Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          Ir4TcPA0PSYr6eIjWYno+K0YMxjGyZl8kb667LcxDSg=
Subject key identifier:   F2:CA:92:E9:82:B7:0A:CB:4E:1D:28:76:7D:08:71:88:D2:31:4E:06
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       019D265F445458A47E07F4147A8C0199E2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          13F7
Signing time:             Wed 25 Mar 2026 19:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:10 +0000
Files and hashes:         1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
                          2: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: CXFWJ5sEoCZU7Ox0NJC+LY7ri0rBkUreeXbN8Lynwos=)
                          3: tdrrEw2QhUroasWZGcJ2TASPuNk.roa (hash: 5qK59vOHIiTj9OvpFdOa8R0zqMTVoz3YO9USMYAJNt4=)
                          4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:44:54:58:a4:7e:07:f4:14:7a:8c:01:99:e2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Mar 25 19:01:10 2026 GMT
            Not After : Mar 26 19:01:10 2026 GMT
        Subject: CN=f2ca92e982b70acb4e1d28767d087188d2314e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:cf:04:7f:df:17:eb:86:a3:12:12:c6:e0:
                    10:59:cd:f3:84:bc:ae:1a:4d:cd:87:79:48:d6:bf:
                    2f:43:32:25:16:f2:43:17:4a:75:bf:2e:b4:7e:ff:
                    9a:ef:1c:13:4c:e7:49:cb:fc:85:45:0c:f5:99:94:
                    84:07:f6:bf:23:77:96:8a:4e:8a:54:2b:13:c5:08:
                    f0:3b:5d:25:c2:e1:c3:c5:6f:e8:e8:48:7f:50:0b:
                    6f:98:35:77:e9:c9:fa:58:63:6f:1a:39:9e:75:c2:
                    d8:5b:23:be:8c:a8:fd:08:a4:76:8a:23:75:a8:b8:
                    89:06:e9:be:94:5c:67:14:10:ec:a0:70:10:29:ea:
                    01:74:53:f6:e2:f8:f7:1b:27:f7:46:12:1e:53:99:
                    96:b9:5f:f8:3e:27:60:a0:4d:f8:89:46:ea:18:86:
                    e7:9c:80:36:68:d5:6a:0f:6d:44:ac:44:e5:3d:83:
                    95:c9:9a:28:ed:e7:06:9a:2e:e0:97:94:fe:82:34:
                    c2:41:6c:79:3b:68:a2:98:4d:e9:ff:c0:66:01:d4:
                    11:58:b8:84:3c:9c:5e:5c:f2:08:66:7b:7e:7a:73:
                    eb:55:e6:77:1d:46:9c:e2:70:be:df:71:77:83:64:
                    46:dd:18:98:55:f8:c2:28:4e:ad:ef:29:d7:7f:54:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CA:92:E9:82:B7:0A:CB:4E:1D:28:76:7D:08:71:88:D2:31:4E:06
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ef:91:07:61:10:50:b4:d1:03:18:c4:dc:66:42:81:17:62:
         58:0d:67:c2:6a:57:90:fb:a9:ed:31:28:82:f0:af:6c:54:bb:
         11:59:88:e1:90:e1:6d:d5:e1:3a:03:30:1c:57:90:cc:20:59:
         60:2a:46:fd:5c:5d:90:fa:d7:38:3a:8c:16:17:d8:f9:47:cb:
         aa:2a:98:b3:25:f5:72:9a:4a:af:34:e5:b8:27:22:75:01:89:
         c2:5a:7b:03:20:47:32:41:e1:f2:e4:6a:b5:8f:17:26:c9:a9:
         aa:41:2c:c6:bf:55:ac:d6:10:c2:ac:f4:c6:ff:ed:d2:9c:34:
         40:ef:d0:e1:8f:e7:f0:b2:43:65:5a:fc:9b:01:1c:41:d4:c2:
         b0:f9:7e:b2:f5:b1:0f:de:6a:32:e4:a1:22:8d:82:cf:01:4d:
         9b:fa:31:91:43:49:51:5b:c8:96:03:0f:24:18:dd:a3:85:44:
         d7:b0:f1:3f:a6:dd:b5:2b:9f:83:0d:a7:59:b3:27:7e:1e:4d:
         43:a5:1b:8d:d2:ca:2f:f5:05:ca:e2:79:ce:c5:f0:06:fb:93:
         f0:96:b3:42:20:15:4a:90:9b:3a:d4:7c:ef:31:d6:93:6c:cd:
         58:4e:fc:2c:36:79:aa:26:1e:ab:d5:4a:c5:35:4f:78:b9:2a:
         28:ab:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:12 2026 by rpki-client