Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          DsE1BaJ7/fMGI9N+x3IgJqsAydYApBLc534Cf9Hg2r0=
Subject key identifier:   75:6E:61:DC:BE:63:8A:5B:3D:C8:04:56:BD:E9:2C:96:3A:86:03:81
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       019D24DF27F40F7799C50D0CA09F41AC7F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 12:01:37 +0000
Manifest this update:     Wed 25 Mar 2026 12:01:37 +0000
Manifest next update:     Thu 26 Mar 2026 12:01:37 +0000
Files and hashes:         1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
                          2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
                          3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: zVWDOgBFg+kYWhW5PtXSS6LGihkLMwpkFldLqCYstbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:df:27:f4:0f:77:99:c5:0d:0c:a0:9f:41:ac:7f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Mar 25 12:01:37 2026 GMT
            Not After : Mar 26 12:01:37 2026 GMT
        Subject: CN=756e61dcbe638a5b3dc80456bde92c963a860381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:28:dc:05:4d:f1:6b:47:e9:1e:61:22:41:
                    1e:ee:bb:bc:14:55:40:98:90:40:b6:2c:33:ab:de:
                    98:33:81:fe:83:25:d6:82:a8:dd:0b:23:56:40:59:
                    98:5f:18:ae:ac:f2:c1:57:fc:f9:2d:46:b9:24:a2:
                    e6:b6:e3:b7:b6:03:56:6c:e2:db:ff:eb:9c:4c:4a:
                    70:cf:92:30:e2:8f:7f:82:80:99:c6:c0:70:92:b1:
                    c0:6b:2c:66:0d:03:d8:88:9e:42:fb:90:f8:b4:5d:
                    81:02:19:d8:d6:b4:94:bb:ca:2d:27:e4:61:d2:e6:
                    e5:c7:82:01:2c:ff:3c:38:64:90:1c:90:3f:20:30:
                    f7:e9:f5:d2:fb:95:7f:af:34:97:29:0f:6f:69:e1:
                    5a:56:5d:11:27:42:64:ba:09:cd:8a:93:dd:62:bb:
                    fd:ea:df:0f:0c:4d:ae:41:29:59:c9:89:c7:00:87:
                    15:be:d5:0a:e9:84:75:81:1f:a7:ba:cc:0e:38:b7:
                    95:55:e3:3f:bb:4c:08:46:92:b8:97:d1:de:50:e0:
                    11:88:e9:f4:42:dc:30:95:e3:ed:d7:3b:fb:af:80:
                    aa:a2:96:09:07:bf:18:b4:58:bb:ed:d2:6f:93:ee:
                    db:7b:66:84:cd:7b:cb:7b:f9:b3:ba:8f:b8:de:74:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6E:61:DC:BE:63:8A:5B:3D:C8:04:56:BD:E9:2C:96:3A:86:03:81
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:11:1e:7a:65:13:5d:5c:98:6b:05:1e:17:dc:c0:fd:93:
         1c:ad:78:14:5b:e6:85:83:09:a7:bb:e0:46:2f:7d:8a:9b:1b:
         8d:cd:ff:fe:57:a4:17:0d:2d:56:78:d5:28:fd:94:0b:b9:9a:
         15:4d:09:2e:06:5e:ba:4c:43:d5:01:bd:a3:07:0b:fe:3f:8a:
         7e:d9:ee:fe:76:9b:f6:df:b7:13:4c:66:2d:21:b5:a9:d5:74:
         37:28:ee:73:ea:19:dd:4e:c0:d8:78:24:35:f1:9a:b5:c7:ed:
         3e:3a:56:39:2c:0d:0f:bf:e1:d3:4a:f1:c0:5c:49:fb:c6:ac:
         7a:5d:7c:41:5f:78:7a:1b:2b:3d:17:42:a3:64:4f:07:89:91:
         4f:0c:6b:6d:3a:97:82:30:42:81:b3:58:40:11:b2:c2:d1:4b:
         53:64:4c:b5:df:5c:6b:ba:59:78:d6:b8:e7:85:fc:e9:24:9e:
         1c:a9:65:42:bf:c7:f4:d1:1d:a2:b9:d8:58:41:1a:4b:fb:fe:
         55:b5:b7:40:c4:54:2a:56:69:53:09:4a:af:58:32:8b:54:84:
         4d:94:5e:14:dc:c1:f7:d8:10:2c:3c:86:d7:43:3e:7c:e3:e1:
         88:fd:a3:d6:e4:fe:85:41:48:8e:23:21:d1:67:8b:71:4f:8a:
         92:e3:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:47 2026 by rpki-client