Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          jFNxWHGPt2Yq6GjeaHpJJ9Sc7hIIZMBBBgltY3qDmNE=
Subject key identifier:   AD:5C:A5:E5:90:94:B8:5A:F0:EC:04:B0:63:79:9B:63:F4:68:43:42
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       019D28F30CCE179618D2ED8865B282062C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          0BCB
Signing time:             Thu 26 Mar 2026 07:01:50 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:50 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:50 +0000
Files and hashes:         1: 0Lowu7hxVeuqlAiVWg9uh-_oyWw.roa (hash: 83FXzGC9XwUj1X8htPlTdsZg8/wSnvklV0n8qfw7AtY=)
                          2: Y8T6MQ3N6EL6A9u7REeJi88lYjc.roa (hash: yyEUvZCmaFWTlHBddTvd35XB4O+cqU+todAuZd+/9Mk=)
                          3: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: IOq2VrdJ3R5AuH9H08+ITLbHD6el2KcEwDZUzboQGkw=)
                          4: nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa (hash: kYPGaco3pxLDHifaSJV9n0xVBsh+iPQ3pvB3Ce36XNM=)
                          5: owHwLyctP8Oxzql0_PgsjnKWR1Q.roa (hash: okd6ixQMASQtM3vodku2s12MniqN1mXlVsNaWbdKM5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:0c:ce:17:96:18:d2:ed:88:65:b2:82:06:2c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: Mar 26 07:01:50 2026 GMT
            Not After : Mar 27 07:01:50 2026 GMT
        Subject: CN=ad5ca5e59094b85af0ec04b063799b63f4684342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:78:9a:15:9d:97:95:e7:9e:3b:21:bd:c6:
                    0e:32:c9:3d:22:bb:f1:d6:01:44:9c:77:24:a1:8f:
                    88:b4:59:3c:9f:68:53:50:f9:01:0d:7d:bf:f4:7b:
                    70:29:a6:2e:b1:6b:48:b6:c2:0b:78:74:92:5d:4d:
                    53:2a:2e:2e:2f:b3:0f:89:54:7b:c5:5d:3d:e3:7b:
                    9a:ca:bd:6a:f6:3d:ca:d8:9b:dd:76:fa:47:1d:dd:
                    32:41:78:d9:8d:b9:85:7c:c9:37:6e:95:84:4a:e8:
                    70:bf:34:a8:9f:b5:e9:28:51:4c:7f:d2:cb:00:a8:
                    7a:e3:05:b5:38:af:26:ba:6f:09:ae:80:dd:64:cd:
                    3d:6d:f8:a7:a6:ed:1e:9a:ab:fd:aa:bb:3b:98:af:
                    6c:94:50:40:76:cb:69:0a:44:a6:d3:70:c9:4f:60:
                    44:5a:c5:c0:d9:b0:9a:3e:46:ef:42:64:89:ad:ef:
                    a8:ae:07:b3:b0:c6:bb:06:a3:63:d3:36:b5:9a:7a:
                    fb:02:69:b0:25:0f:a6:1f:ab:ca:61:4f:fb:6d:b0:
                    7e:79:a2:10:8f:b8:1b:72:0f:ff:89:29:f3:80:f3:
                    74:42:30:5a:2d:83:29:b6:c2:cf:9f:73:be:c2:69:
                    0c:6e:3d:c5:69:1e:ca:65:30:da:8b:1e:2f:b5:cd:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5C:A5:E5:90:94:B8:5A:F0:EC:04:B0:63:79:9B:63:F4:68:43:42
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:12:a4:ca:03:07:6c:69:3c:b5:15:a7:20:09:29:17:43:f9:
         82:b4:0f:7f:eb:b3:8f:92:6e:9a:8f:6b:c5:1c:18:89:59:ed:
         be:50:d2:52:7b:75:98:68:8f:12:60:b7:f8:0a:72:92:9e:68:
         d9:6d:dd:67:f0:cb:ea:12:52:b9:b0:03:56:e3:7a:6c:79:9e:
         a3:0d:8b:25:33:be:16:46:12:77:de:cc:aa:e4:1a:6a:ec:34:
         80:bb:17:28:bb:a9:4a:1a:79:aa:fb:ba:68:6f:7f:ab:49:78:
         fa:3e:fb:12:c2:00:50:e5:c7:d5:22:95:ab:9d:73:24:ee:75:
         4c:63:7f:bd:55:f0:82:96:df:1b:94:a7:60:6c:78:89:d3:12:
         c0:69:e6:a4:7b:c2:80:52:33:41:3a:17:f6:4b:e9:54:36:ad:
         7f:78:83:b4:5e:d0:b5:5e:bc:a4:a7:bc:3a:0c:48:8b:35:9d:
         28:b4:d9:df:29:69:4f:da:aa:bd:ba:49:68:9c:8f:44:d9:ce:
         ad:3d:57:7f:1f:83:9a:47:a1:41:c6:7b:77:bc:ea:6d:3f:9e:
         d1:d4:e7:c0:8a:b3:28:d8:c3:0a:9b:f2:10:01:f8:59:74:cc:
         d4:8b:35:46:30:3e:fb:83:d2:44:14:f4:3e:80:eb:fc:32:8f:
         dc:40:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:38 2026 by rpki-client