Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          p1X5TmAQ6AXzV9NVA2Ar56lKr4BdHVAiIxDm6BmvjS8=
Subject key identifier:   31:A4:D2:B3:C1:56:C9:CA:0A:F7:E9:57:25:A4:7E:E6:68:BF:0F:52
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019D28BB37B948FA79FC662A60D8707F1A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          139B
Signing time:             Thu 26 Mar 2026 06:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:51 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: pRtA0eybdLUcVt/1TMAFa5N3rQqNdLGubp09qeuzHcc=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:37:b9:48:fa:79:fc:66:2a:60:d8:70:7f:1a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Mar 26 06:00:51 2026 GMT
            Not After : Mar 27 06:00:51 2026 GMT
        Subject: CN=31a4d2b3c156c9ca0af7e95725a47ee668bf0f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:be:13:9c:a6:4e:c9:b8:79:59:89:ea:6e:
                    06:1a:0d:ad:eb:60:f2:1c:3f:3b:65:52:09:e6:f6:
                    5b:7b:1c:ed:bc:99:70:2a:fc:82:52:f3:b0:32:42:
                    05:6a:5c:5f:1e:5f:f7:4c:50:4a:af:03:e2:44:d5:
                    f4:2a:4e:1c:5b:fa:ca:ee:0f:50:d7:82:e6:da:93:
                    6f:d6:48:1f:2c:ac:7b:bd:dd:99:f4:bf:4b:68:06:
                    98:43:7a:b5:58:70:72:30:75:f9:b9:cc:ba:d2:ff:
                    30:7b:dd:6f:bf:d5:c6:b6:80:6f:1f:1c:15:5b:7a:
                    02:01:85:c3:97:f9:62:8f:50:12:48:ff:f8:b6:b6:
                    c2:6c:a5:7f:a6:0e:a0:97:07:28:e0:ac:c3:42:a7:
                    57:61:f7:39:f9:f6:e3:f4:9a:44:82:cb:81:16:5b:
                    51:02:e3:b9:8e:a0:13:c6:81:6f:3a:c0:f5:81:15:
                    24:bc:bf:7a:00:ca:13:d3:10:2a:00:9a:1a:14:2a:
                    b1:cc:dd:b3:73:e1:b6:eb:bc:af:6c:56:35:a4:4c:
                    24:01:a7:81:33:d7:27:e4:d7:e8:52:9d:b5:12:68:
                    9b:3e:58:76:96:57:1d:2f:92:eb:13:9d:00:c1:74:
                    a9:38:07:60:a3:d7:c3:3a:92:ba:9d:40:57:b0:01:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A4:D2:B3:C1:56:C9:CA:0A:F7:E9:57:25:A4:7E:E6:68:BF:0F:52
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e2:06:84:da:70:40:7f:1c:9e:35:4c:b8:3d:90:25:4c:bd:
         24:99:2f:49:8f:77:a8:6a:07:5f:61:02:22:0f:bd:e5:53:6f:
         d3:ae:29:d2:fe:38:62:4f:43:7d:5a:da:08:90:eb:97:1c:b5:
         76:b2:2f:06:f6:80:82:56:3f:3b:bb:2c:43:6a:56:4b:be:05:
         eb:6c:08:8a:c8:a8:d6:a3:69:62:ae:10:be:cb:f7:73:a4:69:
         2a:98:b9:96:12:66:57:2d:a5:de:88:39:6c:82:c8:c2:69:54:
         30:78:c4:50:96:02:13:a8:6b:5f:c6:ad:2f:13:91:1c:e9:6f:
         f7:aa:00:90:91:f9:97:73:63:92:0e:c4:a2:4b:61:40:b1:69:
         35:70:5f:5f:31:ce:5f:eb:01:60:82:07:98:bd:af:76:8e:eb:
         a4:ef:ad:eb:54:19:c8:65:e9:d0:e2:8a:2c:9c:ea:56:37:39:
         cc:a1:1b:14:c2:f4:a0:b9:74:2c:76:3b:52:94:bf:3b:0d:6a:
         4c:8d:ed:6a:29:28:bf:50:54:3c:da:2c:1a:a0:10:df:96:fa:
         aa:2e:2d:13:19:ef:c8:17:ed:2a:d6:e2:f3:93:57:6d:d5:aa:
         36:47:5e:de:55:a9:76:0f:bd:a2:13:65:db:0b:c6:8c:8c:30:
         44:dd:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:16 2026 by rpki-client