Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File:                     sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier:          t1WH4iTlgQe4bwf5NFABEX2IrsIitjKrgmPX/VGlnqI=
Subject key identifier:   18:2F:CC:35:19:A2:CA:C2:DE:CA:09:8B:61:DA:BB:57:03:46:4F:14
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer:       /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial:       019D265FDBF157D6919E0539076E2604901D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number:          1430
Signing time:             Wed 25 Mar 2026 19:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:49 +0000
Files and hashes:         1: Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa (hash: juQkDFo0AIVz1+RSIS9ayHrDC2gpBK7MmNeN9tyG2go=)
                          2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: 9RXrvZhqReVpDAlFlMP1qp4xYDDlOUeOJS5SKyCLoWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:db:f1:57:d6:91:9e:05:39:07:6e:26:04:90:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
        Validity
            Not Before: Mar 25 19:01:49 2026 GMT
            Not After : Mar 26 19:01:49 2026 GMT
        Subject: CN=182fcc3519a2cac2deca098b61dabb5703464f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:84:4c:1c:99:a3:3c:f6:fe:f5:cd:1a:ed:
                    19:05:8d:3b:d0:f5:f0:02:08:56:05:cb:f2:98:a3:
                    78:22:a7:ac:26:75:d1:53:52:ec:2a:2f:f5:21:bc:
                    a7:e0:5d:08:5b:94:c5:9a:41:db:f9:e8:ef:e0:96:
                    f6:11:55:53:36:4f:da:45:c8:5e:2f:40:85:9e:21:
                    dc:23:5d:9f:cb:82:ac:94:f1:39:32:2d:91:cd:09:
                    5c:6f:9a:cf:e5:74:6d:a2:92:7c:ec:cd:8c:96:aa:
                    ae:0d:f7:f4:1c:3b:65:8d:a9:6c:3d:f2:41:4b:5e:
                    20:da:d7:dd:94:a0:62:2d:3f:95:a6:cc:ca:ca:c1:
                    f8:3d:9f:9c:8e:7b:ec:1f:8b:dd:45:28:22:34:57:
                    49:05:2f:cc:d3:47:ec:38:a9:e5:d2:62:31:5f:c0:
                    45:8f:2f:d9:e2:38:4e:6f:9c:4f:f8:2f:af:f6:d0:
                    00:ce:7c:ec:09:8c:04:f8:b6:a7:d1:08:85:01:1f:
                    2a:fe:52:6e:c3:25:b8:b3:51:c2:97:b7:94:c0:2c:
                    71:23:ee:a9:07:3e:5b:17:3a:a4:f1:20:39:31:cf:
                    d5:cc:b7:a3:cb:6f:0b:20:cd:58:e4:db:b0:bd:62:
                    6f:e1:8d:18:8f:d3:3b:d8:c5:31:33:17:a9:be:da:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:CC:35:19:A2:CA:C2:DE:CA:09:8B:61:DA:BB:57:03:46:4F:14
            X509v3 Authority Key Identifier:
                keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:95:d1:17:06:56:02:de:30:5c:43:1d:62:81:d0:43:90:56:
         48:3f:da:7e:18:8c:2b:a1:0b:8f:f5:c5:2d:91:09:6f:61:63:
         19:9e:85:2b:e9:96:eb:74:5b:5e:bf:4a:44:c1:da:9d:85:f9:
         3d:5f:ef:52:ce:5f:55:ef:3d:3c:b0:c1:fa:0a:ae:97:29:e0:
         df:27:28:19:81:15:9e:78:ad:90:42:37:2c:1c:f3:2f:5d:e2:
         5d:91:b7:82:7b:07:b8:cf:59:89:fd:57:63:e9:f6:7f:40:92:
         7d:2b:38:b0:11:3a:c6:c2:e6:b9:77:94:14:88:d4:35:86:49:
         19:73:a9:20:22:a0:39:16:39:97:88:4a:f5:6f:c5:29:38:3b:
         58:af:40:11:46:eb:a0:1d:4d:6b:77:b9:a6:b7:58:7a:de:bc:
         51:51:12:0b:d9:c3:3c:2c:b2:d0:06:5a:85:1f:c5:96:fc:08:
         39:59:f3:30:30:7b:a1:2d:1a:85:a1:f3:ed:bb:75:cc:e7:44:
         78:1e:ec:53:f9:fa:d4:ee:28:df:1f:f3:62:ed:0e:c9:db:91:
         fa:1a:da:26:29:a6:ee:e7:0e:0a:3a:c7:97:95:a1:7a:21:14:
         cc:f7:55:3e:11:74:6f:29:50:51:61:9a:56:74:ba:98:b0:bd:
         25:16:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:39 2026 by rpki-client