Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
File:                     Ane1_sq3Pj5N0YapraBl-uio3hw.mft (raw, json)
Hash identifier:          6BmCWioSUcPEWYGXQd8jXZC6v34UP9IusNlMWcl2xJM=
Subject key identifier:   8C:C3:CA:A4:B6:5B:E3:C0:FE:1C:00:63:C3:DD:A5:22:10:24:A6:D1
Authority key identifier: 02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
Certificate issuer:       /CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Certificate serial:       019D29CDF0F2992409FD6E8FEDB25DE94DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
Manifest number:          0283
Signing time:             Thu 26 Mar 2026 11:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:55 +0000
Files and hashes:         1: 4kQOoXdir4FPvZ9bCLqrsgJ56Io.roa (hash: v4oKtc8cLQM/OZEKI6njCV3tcg79uTMtDOJd0UU6hQA=)
                          2: Ane1_sq3Pj5N0YapraBl-uio3hw.crl (hash: txMclmf/MwA05rH+ye3vLtA+nTtat+fo71ak9U6p7Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:f0:f2:99:24:09:fd:6e:8f:ed:b2:5d:e9:4d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
        Validity
            Not Before: Mar 26 11:00:55 2026 GMT
            Not After : Mar 27 11:00:55 2026 GMT
        Subject: CN=8cc3caa4b65be3c0fe1c0063c3dda5221024a6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:a5:01:23:23:fa:9e:74:40:04:05:b4:75:
                    fa:f0:d3:82:26:2a:2d:7c:1e:cd:d4:f0:8e:ad:5f:
                    85:b4:c4:f3:4f:d5:c0:c4:38:fc:d3:d6:fe:0f:c4:
                    8a:39:02:99:c2:f2:ab:e6:7b:11:94:f1:47:11:dc:
                    be:92:0d:db:9d:a1:c2:3f:89:96:e4:ba:e7:29:50:
                    51:87:dc:56:6f:de:45:c1:f8:93:19:c9:f3:1d:03:
                    de:b5:88:57:f3:ce:56:3d:56:a2:f2:b9:9a:96:c1:
                    3e:e3:47:42:0e:d0:f3:19:a9:88:8a:32:9e:8c:aa:
                    8b:ff:f2:dd:48:bd:b9:93:ad:32:c9:2d:77:45:1c:
                    c7:8d:25:4d:b9:46:b0:d8:14:51:a6:f5:16:bc:5a:
                    56:f1:2e:66:d5:8f:66:d8:3a:d8:64:73:dd:dd:88:
                    93:9b:dd:d2:49:08:a4:5a:49:e9:74:0e:b1:e5:9c:
                    8d:29:c3:c6:95:eb:2a:65:d7:a9:18:fe:8a:0e:62:
                    57:05:18:3f:f8:ac:04:62:1c:ab:90:ee:72:82:0e:
                    8a:86:30:1f:0c:af:95:9b:e7:7f:ee:97:7a:3c:46:
                    1a:69:2b:35:e6:71:c0:d2:2b:04:99:d5:d1:de:25:
                    92:44:f5:b3:1a:d7:c2:65:59:ec:2f:85:23:e6:27:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:CA:A4:B6:5B:E3:C0:FE:1C:00:63:C3:DD:A5:22:10:24:A6:D1
            X509v3 Authority Key Identifier:
                keyid:02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:59:ca:35:6e:f2:ff:53:b5:05:0b:5f:a2:5d:29:15:e3:a3:
         0b:48:36:6a:5a:37:0c:5b:dc:57:36:a8:e0:67:ea:b4:28:f5:
         1d:c5:c9:8b:52:45:e7:85:8a:1a:dd:7c:75:1a:4b:8a:fe:f0:
         a9:b3:29:25:f4:72:b3:e1:5f:23:87:44:73:09:33:4a:eb:78:
         dd:0e:7d:17:f9:14:a5:e3:96:83:09:c8:9a:39:f1:80:b7:78:
         73:ef:54:9d:93:72:03:cf:e8:18:2d:4c:9c:11:b9:07:64:ee:
         1f:b9:37:7e:dc:f1:3a:8a:81:d8:aa:b8:ce:9f:ee:8c:46:51:
         dd:af:11:cf:29:12:29:1e:82:0e:56:d1:32:0d:44:0a:27:03:
         35:ef:ff:55:e9:88:be:71:ed:37:55:72:bc:e0:a3:e2:3d:dd:
         fd:be:9a:d7:c3:c0:38:e4:73:5d:ce:f4:29:aa:8d:17:3f:be:
         6c:52:21:fb:ef:1e:e6:46:19:b7:fd:3f:26:a9:8f:d7:b6:ac:
         f7:4e:f6:5a:b0:62:3d:63:d1:97:8b:f5:92:9a:ab:1e:dc:6d:
         cc:d5:eb:f6:b1:a6:0b:6a:47:ec:08:99:5a:4a:27:64:76:7c:
         b5:da:86:73:86:c9:6d:bf:35:32:ee:90:bc:59:90:cf:1e:3c:
         c5:8d:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:26 2026 by rpki-client