Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          7hNY6fOEcydBMfDpj6rYXi61N0EooFDVSU2SJirgqM4=
Subject key identifier:   2A:9E:0F:ED:C9:EA:7A:23:85:87:33:77:B4:95:2C:FF:A4:48:FC:E6
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       019D28167BAF653FCC56D9177E047D04A29D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 03:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:55 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: 3r202c8kOUaDs0JGFxtyqnA2iM8jyNshmoN3PyqA9vw=)
                          2: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (hash: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:7b:af:65:3f:cc:56:d9:17:7e:04:7d:04:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: Mar 26 03:00:55 2026 GMT
            Not After : Mar 27 03:00:55 2026 GMT
        Subject: CN=2a9e0fedc9ea7a2385873377b4952cffa448fce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:48:94:76:3f:41:76:c7:ef:6e:6e:cb:d3:
                    3b:48:c8:d7:b6:2e:a3:94:87:a4:2b:e6:e2:8f:15:
                    e1:1d:d7:a7:d6:85:02:eb:b5:e2:e6:02:f0:7c:0d:
                    92:d2:3a:2f:43:b2:82:cf:7c:43:08:1e:52:c9:ec:
                    b2:9c:2b:5d:bf:b7:4c:4f:9e:88:94:a4:27:cd:f7:
                    e5:7d:4a:23:5c:41:6b:99:5a:ac:66:f8:b6:79:6a:
                    04:21:08:03:a8:c7:66:2a:32:f1:4d:e1:b7:0c:2c:
                    aa:89:48:d1:cb:13:0f:8c:63:1d:b6:7c:f6:fe:82:
                    af:21:37:9d:da:d4:06:80:b3:f5:45:17:e4:f8:86:
                    87:62:71:c8:8d:b7:dd:7d:cb:8f:62:15:a0:ea:92:
                    2e:60:ef:1e:86:71:29:8e:a7:5c:c0:29:51:f6:df:
                    93:51:87:95:0d:03:f4:d5:f9:f2:f1:04:1c:a1:5f:
                    00:af:11:92:ea:c6:e3:f6:57:81:08:18:c8:ed:f3:
                    98:7c:5e:94:7c:cd:7d:34:18:24:9e:ff:ab:36:75:
                    fb:ca:9e:d9:ab:bb:0a:69:13:32:72:01:26:80:f0:
                    16:72:a5:5e:c5:cc:aa:bc:50:50:aa:e0:d5:30:9e:
                    bb:e0:96:ae:e7:37:6b:26:e8:4a:ea:fa:55:de:8c:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9E:0F:ED:C9:EA:7A:23:85:87:33:77:B4:95:2C:FF:A4:48:FC:E6
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:42:18:f7:18:60:51:52:54:2f:22:d3:4d:b8:88:f0:83:
         2d:91:da:75:c5:18:68:56:26:14:05:7f:79:08:29:4b:bb:84:
         8d:87:20:e0:30:6b:c9:ef:2f:31:d2:b0:7d:cf:04:b1:ab:46:
         88:d2:49:b8:cb:91:c5:2c:24:e2:4d:41:9e:f9:d9:52:7b:31:
         54:42:fa:7b:56:cb:2e:92:7b:a9:79:e4:13:ac:60:2f:64:cd:
         89:f9:14:5a:8f:44:75:64:47:2e:3d:cc:00:4d:97:db:ed:96:
         e5:69:18:54:a9:0c:70:ae:73:b7:07:eb:08:24:4e:75:d0:dc:
         35:b8:70:35:79:81:a7:42:6a:03:1f:8e:da:5f:bc:41:58:45:
         ac:23:95:74:12:52:72:ef:2f:62:13:e8:96:a2:dc:c7:a5:70:
         ab:59:65:0c:7c:75:79:2e:a0:ef:b8:18:2f:0d:95:b0:9b:1d:
         10:2e:d8:2a:a7:70:4a:fe:9b:2b:30:25:24:02:5a:27:31:4f:
         ca:63:63:9a:d0:db:49:93:89:11:0a:8e:1a:25:7d:5c:9a:d1:
         df:21:37:fe:d1:6d:39:9b:22:bf:d9:3f:9a:d6:72:10:dd:a4:
         06:f9:42:5b:c4:85:75:92:75:74:89:b1:85:47:ed:23:94:36:
         7d:62:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:01 2026 by rpki-client