Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File:                     cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier:          VbQfGeVHLlhQ8oFUguVUDaV0qmKg5yEOmI7gHOGVavs=
Subject key identifier:   5B:6F:15:4C:7C:85:A8:25:41:F9:48:7D:A8:44:48:71:83:CE:96:B9
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer:       /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial:       019D27E075F84614780A19E595955033DCEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number:          1556
Signing time:             Thu 26 Mar 2026 02:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:54 +0000
Files and hashes:         1: VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa (hash: Lbn6Fby7EdHc1UHJ59PaUZ9J82IIGLS0ZcRQWB4hGSs=)
                          2: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: qksliZb+YOXKnmB0GiENCgtQ8keH81anmmAFa1bCV34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:75:f8:46:14:78:0a:19:e5:95:95:50:33:dc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
        Validity
            Not Before: Mar 26 02:01:54 2026 GMT
            Not After : Mar 27 02:01:54 2026 GMT
        Subject: CN=5b6f154c7c85a82541f9487da844487183ce96b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:84:e0:b6:63:88:6b:9e:27:24:0a:50:a7:
                    1b:c2:5d:a1:d1:f0:3c:98:f3:5d:86:9d:32:bd:06:
                    50:48:7b:90:77:62:94:9e:db:e2:52:70:f9:fe:aa:
                    d7:b9:90:ea:00:c3:1c:ba:c2:47:32:59:cc:cf:03:
                    7f:37:24:75:e6:1d:4c:7a:e8:18:04:b2:59:df:b6:
                    de:ce:87:a4:f2:c8:56:b4:59:42:55:e4:46:5c:26:
                    5b:c6:99:b4:3d:24:3f:09:dc:e2:94:e0:e7:92:b8:
                    72:00:4e:ef:c4:e9:76:08:09:38:68:24:9c:ab:85:
                    b9:6e:d9:df:16:95:74:53:74:36:30:f7:fd:ec:b1:
                    d7:0e:c2:fb:b8:13:4d:12:27:d0:30:c2:15:16:f0:
                    61:76:fd:9f:28:5c:46:66:72:ed:34:6c:ca:db:ad:
                    12:55:f9:63:84:ac:6b:f6:5e:7d:4c:0b:6c:ee:3e:
                    15:3b:32:bd:0b:3d:06:3e:af:41:8a:a9:f2:2a:02:
                    4e:82:b6:9e:a4:c9:f5:ae:08:d4:14:72:15:f2:1d:
                    d3:06:9e:24:ba:64:9f:cf:f1:24:bc:74:c4:bd:34:
                    d5:0b:ec:2a:e8:0a:2e:74:a4:3d:fc:72:d2:4e:65:
                    f4:94:9b:4d:f2:ad:f3:5b:91:a2:b1:51:66:03:9b:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6F:15:4C:7C:85:A8:25:41:F9:48:7D:A8:44:48:71:83:CE:96:B9
            X509v3 Authority Key Identifier:
                keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:5d:3a:b5:c9:27:ed:61:1d:6e:eb:c7:b6:80:c3:36:8d:
         ef:18:89:ed:a7:1f:fc:a8:d9:63:37:fc:03:44:97:e7:17:dd:
         c7:55:48:ea:d8:38:b2:39:e7:9a:66:59:dd:63:05:67:01:b6:
         8c:e4:70:8d:a3:94:0c:56:40:28:6f:d8:34:00:cf:42:fe:8b:
         c1:6b:0c:c7:19:6b:ca:e7:cb:96:5b:2b:7e:f4:aa:65:d4:0d:
         b1:07:1d:79:d0:2a:56:47:ce:d7:da:c5:ee:b2:c6:99:6e:a3:
         a5:72:58:ed:cd:37:01:a3:47:35:06:27:07:5d:a9:3f:6b:72:
         3b:be:c0:fd:5c:91:ec:ac:2e:34:65:26:9e:8a:d2:0f:45:2c:
         40:82:46:3e:cb:fe:61:fe:82:ad:b0:53:e5:0a:a4:90:a8:1d:
         82:fb:59:71:b3:f1:0c:94:d8:d2:19:4f:0c:c6:9e:31:12:4b:
         8e:52:fb:98:10:4d:2b:91:f5:e9:cd:93:ab:92:fd:ee:cb:ff:
         b3:a4:38:2e:62:43:18:45:f5:7c:3a:bf:1b:ee:26:91:6a:0d:
         e9:3d:12:e5:aa:8a:82:84:05:b6:72:62:c0:eb:3a:96:f6:66:
         13:cd:84:6d:1d:97:b1:c4:74:d3:ca:44:45:c2:55:02:3f:7a:
         d6:dc:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:10 2026 by rpki-client