Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File:                     sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier:          BG1TZEeTuYeTqdkwWMsfy0BKv8uPOIpgZrhxlCdj+RE=
Subject key identifier:   1C:83:13:7A:36:AC:EB:7C:AA:A3:E5:D3:7B:5A:A3:A4:5A:68:00:7F
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer:       /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial:       019D265F6ED0CDFDA728D983E2881C22FBF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 19:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:21 +0000
Files and hashes:         1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
                          2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: Nav2cefp0RxR03P9r6ZeLxFd+fOj5yC4DnY8lunmzjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:6e:d0:cd:fd:a7:28:d9:83:e2:88:1c:22:fb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
        Validity
            Not Before: Mar 25 19:01:21 2026 GMT
            Not After : Mar 26 19:01:21 2026 GMT
        Subject: CN=1c83137a36aceb7caaa3e5d37b5aa3a45a68007f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:4b:10:05:99:cb:43:f8:a9:62:fc:9e:ab:
                    57:8d:06:4a:54:a5:60:b2:a7:54:94:7b:e7:65:8d:
                    68:5d:fb:50:42:13:01:55:7c:17:4c:05:bc:4e:fc:
                    e9:61:1f:77:45:1c:a0:ad:69:8d:ac:fd:b2:45:a1:
                    d7:71:33:c8:af:2d:29:3d:13:71:3b:f1:08:c4:2d:
                    b6:d6:a3:6b:83:9b:a6:cb:ff:0d:b3:d7:7e:50:bb:
                    d1:39:21:84:81:4e:35:6e:12:82:6c:ac:3f:f0:53:
                    8b:e9:87:e5:84:0a:c9:d3:50:a1:bb:43:2e:26:af:
                    1f:73:6c:44:71:f6:5a:d7:aa:f1:c7:c1:7d:ff:bb:
                    bf:d4:73:c5:16:8b:2c:c5:86:33:e5:26:18:bd:0e:
                    4d:de:23:1e:69:63:03:e9:d2:e1:93:54:f9:f9:40:
                    9a:ea:49:bd:6d:a5:e8:35:a8:8b:d3:84:01:96:fc:
                    16:e1:44:a1:b6:0f:5d:15:79:2e:e2:69:29:81:c0:
                    14:5b:21:66:44:f3:4b:5b:69:f0:95:5c:71:d9:ca:
                    39:aa:f6:b5:90:43:d9:1e:d1:d9:20:40:df:8d:4f:
                    7f:e7:69:0d:2b:2a:c8:75:f3:38:1a:81:e5:b1:1c:
                    df:88:1b:47:6a:6c:d9:07:58:1c:9e:be:75:26:cd:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:13:7A:36:AC:EB:7C:AA:A3:E5:D3:7B:5A:A3:A4:5A:68:00:7F
            X509v3 Authority Key Identifier:
                keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:1b:b2:32:19:3e:ba:1d:5d:90:17:ca:85:50:15:bb:53:
         1b:66:d9:ac:e2:d1:db:86:f9:3b:1d:04:66:b5:27:9f:df:87:
         df:a8:21:a6:42:b1:30:24:5f:71:e2:7f:4b:c2:ab:20:16:10:
         94:cb:1d:d0:e5:38:27:11:31:6d:ac:4b:0c:88:0e:0e:e7:8c:
         4e:96:1a:e0:bc:fc:45:b7:4a:49:39:a1:74:71:fc:0e:e1:d5:
         9f:eb:a7:ad:03:c9:66:46:4f:f9:41:46:4d:21:10:13:1b:f2:
         13:c4:e7:0c:aa:60:e3:86:2a:50:21:7b:3b:61:c7:bd:f1:7a:
         bf:d4:33:d0:ad:85:15:ec:94:9f:15:d1:56:69:d6:8b:5d:22:
         f4:53:7d:ff:e4:67:3b:b9:f4:87:8e:07:06:a0:8f:a9:89:a6:
         bc:5b:9f:b3:c7:ae:a8:1c:05:4c:f9:de:50:15:b4:a5:5f:9e:
         b5:91:b0:5e:0f:af:2f:20:d4:43:12:ec:63:16:7c:9d:70:0c:
         6d:0c:42:87:ff:a3:56:09:66:cf:b5:91:a5:5d:b9:b1:0c:f4:
         74:91:ca:70:0d:28:ba:33:47:5a:cf:ae:be:51:7f:6e:e0:1c:
         95:3f:18:cd:4f:17:a8:b8:28:21:b9:2e:34:3a:4d:15:d8:e9:
         72:8f:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:26 2026 by rpki-client