Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File:                     cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier:          Qa4Vxn+KgWAiPjjF7+Aq6ZYJdLwAXo3mlqlWf+yOIdM=
Subject key identifier:   7C:6B:96:04:DF:71:DF:2A:53:17:99:BF:75:88:71:F2:69:85:C1:C9
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer:       /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial:       019D2695FBDFF39D6107D8867875B015591A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 20:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:56 +0000
Files and hashes:         1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
                          2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
                          3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
                          4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: nu4t3LGiemS5OvDZR9CCJkCAMCrn3M/KM7ZnvUW6aDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:fb:df:f3:9d:61:07:d8:86:78:75:b0:15:59:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
        Validity
            Not Before: Mar 25 20:00:56 2026 GMT
            Not After : Mar 26 20:00:56 2026 GMT
        Subject: CN=7c6b9604df71df2a531799bf758871f26985c1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:ca:38:f4:76:b3:84:47:3e:14:31:95:f9:
                    07:ac:37:9b:33:42:e4:09:17:5b:67:96:74:00:44:
                    c8:f7:c0:40:4b:9c:00:dd:a7:92:56:61:2b:25:d7:
                    36:87:5c:9d:fa:18:36:89:71:ac:20:d9:7b:ed:0c:
                    ad:f7:0b:9c:f9:21:d3:a5:80:9a:82:df:7e:6d:8d:
                    e9:bc:7e:a6:a6:e5:d4:b0:4b:d7:e4:93:74:7f:be:
                    bc:05:60:48:30:50:99:0f:7f:29:34:be:49:5a:3c:
                    4c:25:25:a0:bc:f6:ea:14:0d:4d:4b:8d:4d:3f:0f:
                    a8:9c:08:34:66:38:0b:5e:b8:87:5b:78:53:9d:85:
                    c9:5e:8f:b1:0d:78:8a:c1:8d:a1:a2:57:30:9e:37:
                    2c:97:85:ba:ff:f8:31:d8:64:10:96:19:75:d7:58:
                    7f:7a:43:a5:e8:c3:79:82:10:59:2b:85:06:6c:30:
                    a8:ba:6a:f2:33:79:00:70:3b:60:16:6b:53:ef:b4:
                    ee:5c:0f:e1:af:d6:92:88:1c:26:4b:cf:48:a9:83:
                    80:23:fe:88:8b:72:26:86:26:3a:41:c8:4b:02:8b:
                    0f:14:31:16:2f:28:61:b8:59:d2:ce:da:63:92:6c:
                    8e:5b:00:9a:71:dd:95:45:b9:52:ba:b8:f8:a1:1c:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6B:96:04:DF:71:DF:2A:53:17:99:BF:75:88:71:F2:69:85:C1:C9
            X509v3 Authority Key Identifier:
                keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:c5:2b:a6:4f:35:65:14:66:1f:8c:55:9f:0c:40:c6:a2:
         f1:b0:e1:a9:0e:fe:c2:aa:19:da:0e:64:76:1c:96:b1:fb:bb:
         14:25:07:58:80:2c:c8:1d:3c:20:a3:dd:4f:c0:01:e9:fc:55:
         1a:ab:df:df:7d:fa:0f:86:39:3f:b3:f5:ac:0c:a4:c3:47:73:
         12:42:35:cd:df:e4:53:54:d7:73:af:39:04:c3:e5:ff:0e:e8:
         78:85:00:b5:86:de:9d:e9:be:a0:b6:61:93:ef:51:25:7f:0a:
         6c:dd:66:60:94:ff:98:0e:a9:b8:65:56:2b:7a:0d:20:b4:8c:
         cb:80:cc:32:c9:42:3f:a9:3e:c4:04:a0:78:84:81:72:12:77:
         b2:df:c0:63:29:51:36:cf:e5:8b:63:91:42:9c:d8:ae:93:b3:
         6c:b1:d5:43:2a:0c:25:5a:ec:de:85:1c:df:79:f2:6f:0e:a3:
         6a:81:cd:26:0c:c4:f2:b2:33:76:fc:d3:bb:0f:63:75:8c:de:
         4a:03:ce:3c:10:61:11:6d:41:54:5a:b6:85:4b:21:2c:ae:99:
         e0:7d:9d:3d:b5:d3:fc:57:4c:f9:75:16:36:3f:71:1e:86:e8:
         d0:1e:e4:7a:6e:2b:57:93:f7:29:65:02:a0:6c:4f:7b:3c:84:
         62:a0:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:36 2026 by rpki-client