Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File:                     vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier:          zSXJ2lHBGlw27gigABiMtmzQ+LUfek1QL46hxs9PrS8=
Subject key identifier:   E9:F3:5D:6C:6F:B8:1D:D6:8D:FF:94:A0:05:8A:FC:64:45:DB:9C:2C
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer:       /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial:       019D28BB22CF687A91F423F2ED1F62E4069C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 06:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:45 +0000
Files and hashes:         1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
                          2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: MUiPUz2z5p3uKw4RLHgGKRD45BKmPwfnDHo3pjRM5XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:22:cf:68:7a:91:f4:23:f2:ed:1f:62:e4:06:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
        Validity
            Not Before: Mar 26 06:00:45 2026 GMT
            Not After : Mar 27 06:00:45 2026 GMT
        Subject: CN=e9f35d6c6fb81dd68dff94a0058afc6445db9c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:62:2b:f9:82:30:a0:69:9c:4e:e8:8e:3b:
                    3c:4b:ff:bc:b1:21:55:9f:4f:34:02:3a:71:14:76:
                    7c:cf:a5:f4:01:92:d9:0d:19:07:1d:f1:48:6b:a6:
                    c4:35:ae:9e:69:b7:3d:b3:56:31:17:b7:98:58:d2:
                    68:7f:70:cf:c2:b7:3a:52:26:b9:d7:ac:98:ba:30:
                    b9:27:6e:57:29:d2:43:68:e2:ab:b6:91:ab:3e:5f:
                    e0:27:cf:45:12:f9:44:b7:5b:2f:ba:9b:b3:0f:57:
                    c2:a0:2e:61:19:30:aa:1f:8a:ea:f4:7a:92:34:e7:
                    48:58:36:10:12:13:b3:0d:de:9f:ad:98:af:97:ef:
                    fb:b8:62:72:b2:1d:41:83:43:19:8f:73:1f:9b:6a:
                    77:89:af:28:ef:da:da:42:cb:ad:cd:c2:10:2a:7e:
                    21:50:71:b3:b7:2f:1a:2a:b8:aa:12:c9:8e:47:7c:
                    6d:fe:a2:f4:62:2e:2c:30:1e:ac:89:f2:d8:3a:74:
                    da:08:8c:da:6d:f3:1e:90:41:c0:3d:5c:59:70:0c:
                    cf:41:3c:2f:ab:50:31:cf:79:a0:e3:65:34:d9:22:
                    97:84:9c:cf:3c:4e:43:cd:cd:c8:c6:c8:4d:1b:0e:
                    d9:9c:98:ed:68:1a:3c:68:0c:26:f8:a3:1c:88:04:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:5D:6C:6F:B8:1D:D6:8D:FF:94:A0:05:8A:FC:64:45:DB:9C:2C
            X509v3 Authority Key Identifier:
                keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:db:e9:e6:1f:eb:43:58:91:cb:95:20:f5:56:85:e6:2d:
         11:b8:7d:37:cf:8c:42:1f:b8:1b:51:78:6d:38:81:e2:2c:76:
         96:90:0d:98:a7:34:94:3f:91:4f:26:9c:27:8f:07:4d:fc:eb:
         c9:b6:7b:4f:27:c6:34:e1:60:c0:a3:ff:fa:9d:d2:d6:5d:cf:
         27:80:87:39:a6:4c:d5:c4:e6:a4:de:5d:27:54:59:2d:01:55:
         55:33:39:70:3a:2a:ef:65:9a:9f:89:a6:00:c2:c8:17:7f:12:
         35:dc:d2:bf:0e:40:26:b3:7f:4e:f7:ad:fc:88:0a:e4:85:63:
         d8:bf:29:83:63:d0:05:bf:6c:37:2c:06:85:c2:1b:52:fa:99:
         fb:e4:a2:2f:33:c0:68:6c:ae:d5:c2:14:42:6d:96:fc:9f:15:
         c7:63:67:3b:dc:9d:97:30:8f:15:f9:45:ab:fc:92:35:0a:ec:
         c2:5e:cf:46:ea:d1:b2:b7:6a:69:90:dd:29:69:c0:3e:3c:f4:
         45:89:fc:b6:e0:4c:6e:f0:ad:a9:7a:0d:99:c5:5a:60:98:4f:
         b1:9c:2c:89:c1:07:bb:d4:a5:36:fd:8b:68:03:57:83:2f:bb:
         de:74:7d:04:19:79:c9:4f:84:f6:78:92:9e:82:91:e2:d8:5c:
         ab:d1:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:25 2026 by rpki-client