Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File:                     Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier:          eJRWje4hezbBz13b7ZZynGMOonsdxjddbUsLgpS7Sig=
Subject key identifier:   56:C2:8C:55:87:33:45:9C:67:8C:A6:76:CD:18:E5:39:26:2E:47:CE
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       019D25BA466AC2E408BCF706D8B68BA6D06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number:          174E
Signing time:             Wed 25 Mar 2026 16:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:57 +0000
Files and hashes:         1: 80AHb416dPFtah1nGaAc_7l46Ec.roa (hash: 2D/X4apH00Mk7Ti0XtGlvP9oq+7ZpgnstiU/IgSvOD0=)
                          2: ANo9L73aObGqzdP0orWNPP3485k.roa (hash: Q3dDG3+jQe8HP6goxHrxtXjwKKzMb7l9p077g0BZffQ=)
                          3: KXpXJO-YFLLgP89XzYYz7qcHQUY.roa (hash: GGh45Wv5joUkRSI7WVUZH33rmAafKbq5cLNpmunXMXY=)
                          4: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: yHyQO+K1HRZjkf2sbIkK+0ec81/bB0am75acC/23Rsg=)
                          5: ZGPQKEDVE9F1MV2KWCts_BoufGk.roa (hash: epehMPMwEjYywMBrhnF1PZ/wa0g0S9LNY7+R460jN/I=)
                          6: iWOLIa8CHwTMmCIWqUjl6myNeCQ.roa (hash: rcAH7VEF8TBjliKTDv/7zF+IYhohItkkjWceaK+DiMY=)
                          7: uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa (hash: h5Q3Ax5wjUbWsPmn7ajHFEGC0r7tCkijHeUzTOQ9fVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:46:6a:c2:e4:08:bc:f7:06:d8:b6:8b:a6:d0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Mar 25 16:00:57 2026 GMT
            Not After : Mar 26 16:00:57 2026 GMT
        Subject: CN=56c28c558733459c678ca676cd18e539262e47ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:5a:aa:bb:6f:63:17:d7:84:95:bc:b5:41:
                    5e:a6:a6:1e:3b:5a:ae:1d:a5:09:b9:07:b6:2c:23:
                    e9:73:6d:dc:4f:76:cf:68:0f:e0:0f:de:63:e2:bc:
                    43:6b:50:ad:01:a1:96:4c:01:df:88:01:c9:3b:4a:
                    25:e8:e3:c6:32:f3:10:8e:2f:61:c5:f8:ef:01:a9:
                    89:f4:92:09:86:76:cb:20:e4:35:68:70:48:30:7d:
                    6e:fd:c4:fd:6b:a2:f1:f8:0b:10:61:31:51:87:ea:
                    1d:b0:58:6d:62:fd:32:50:7a:e7:ba:1c:8f:ef:55:
                    a3:d6:3c:e7:a0:59:4d:67:5e:94:99:68:37:90:88:
                    3f:2c:a6:b4:3a:d2:98:c9:93:2e:5f:d8:7f:b3:85:
                    5a:a4:68:51:37:cd:4a:2f:9f:01:6c:e0:c3:e2:d6:
                    09:2b:99:a2:6d:3f:14:39:b1:b9:34:c5:72:fc:a8:
                    0b:43:1a:ae:e7:ec:dd:65:27:95:0a:87:26:24:3f:
                    2c:c9:57:85:71:ba:f9:6e:29:f4:71:77:6b:86:88:
                    25:8f:0b:1b:6e:c2:e9:01:68:79:a9:21:24:6f:d9:
                    97:c0:7a:df:18:d4:57:c5:66:24:33:66:ba:6c:dd:
                    24:ef:7e:a0:20:eb:f9:b6:f9:c2:3d:05:ea:e5:87:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C2:8C:55:87:33:45:9C:67:8C:A6:76:CD:18:E5:39:26:2E:47:CE
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:10:ee:94:25:69:06:e4:02:7e:74:61:6a:65:93:ab:e1:f6:
         13:45:25:93:34:86:a3:2c:fd:4f:83:34:91:3a:e5:93:3c:8d:
         06:20:35:ac:7a:97:ec:2d:22:0b:8c:55:ac:20:a5:e6:c8:d4:
         06:b2:57:a8:a4:b5:43:7a:37:37:38:c5:69:f4:f2:6c:0b:d8:
         c3:63:a3:04:64:29:03:9c:4b:64:c4:ab:71:c7:a9:64:01:26:
         0f:1a:ec:8f:46:fa:8e:4d:83:80:3b:cc:1d:34:6d:2f:4a:9e:
         38:68:45:92:00:c1:f7:28:2f:af:3b:ed:01:05:86:3a:81:25:
         f1:9b:91:ac:76:4e:ef:bb:14:c5:8c:52:18:8d:34:31:b7:ac:
         68:5b:da:69:c9:3e:ce:7a:93:96:20:12:f7:77:e6:d6:12:7e:
         78:f5:6d:dd:30:d1:61:aa:32:e0:ba:3e:6b:85:61:4f:ea:4f:
         a0:01:79:cd:09:6b:48:32:b8:2c:e2:7c:e8:3a:c5:60:81:c1:
         36:fa:20:a2:21:ae:ba:21:dc:77:b1:54:82:00:88:4b:0f:ee:
         f3:1b:32:d3:88:7d:d2:4e:3b:79:38:bb:f6:59:16:32:a8:9e:
         d5:80:15:7c:b4:98:67:ae:5e:e6:f6:44:f8:92:85:43:ad:bf:
         ba:c4:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:04 2026 by rpki-client