Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File:                     3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier:          sjS07/eqdNa5Fx9MsiMucMAlCIVm+2/YdVdM+aZ2xUY=
Subject key identifier:   0C:AD:DA:E2:23:F6:86:03:11:98:08:98:D9:E5:53:C7:F0:8B:0F:65
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer:       /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial:       019D2A72828215742A52B77BD4257C88ABAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number:          1329
Signing time:             Thu 26 Mar 2026 14:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:40 +0000
Files and hashes:         1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: 1D18eCaALb+P3LKtsnpLc3/W6w8/g7yyMveP3XYxjJ8=)
                          2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
                          3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
                          4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
                          5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
                          6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
                          7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
                          8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
                          9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:82:82:15:74:2a:52:b7:7b:d4:25:7c:88:ab:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
        Validity
            Not Before: Mar 26 14:00:40 2026 GMT
            Not After : Mar 27 14:00:40 2026 GMT
        Subject: CN=0caddae223f6860311980898d9e553c7f08b0f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:55:83:4c:ff:11:a7:63:3c:d5:00:97:fd:
                    d2:35:25:e3:86:7d:47:64:4c:29:f4:dc:9f:23:32:
                    db:d1:84:27:12:a5:c1:27:a4:0a:bf:d5:cd:eb:f7:
                    fb:61:e8:50:24:76:bb:ca:79:07:28:36:d3:81:ca:
                    3b:7b:5b:45:bd:9b:3a:ff:91:45:00:8e:0a:7a:a1:
                    34:c0:d0:aa:97:0b:e0:23:0c:4d:6c:4a:da:9d:6f:
                    0b:7c:1f:3f:26:e0:7b:05:1e:bf:8b:4c:7c:65:ef:
                    24:ea:b7:10:09:b3:2d:38:31:79:80:1a:3e:2a:d8:
                    36:57:c6:25:0c:8c:f5:cc:6b:97:c2:f3:01:56:da:
                    a0:77:2d:c9:9e:eb:ae:43:ce:f5:e7:5a:f0:22:e7:
                    a8:8d:a7:4f:b4:24:0c:9d:06:0c:f5:60:bc:95:a1:
                    a4:2f:0f:87:83:2f:b6:ee:b4:48:31:e7:b4:47:ef:
                    b2:9e:e4:03:b0:7e:d3:c4:03:d2:15:8f:79:e0:78:
                    02:a1:65:74:9a:02:8b:da:ed:74:b0:01:cb:ff:f4:
                    8c:2a:bb:55:4d:fa:34:05:c2:0e:fa:ca:86:da:36:
                    cb:44:82:8b:2e:4b:4c:60:c7:23:59:d7:e0:98:e1:
                    2c:5a:8a:37:a4:e7:18:ad:8d:b1:11:b1:c7:ad:45:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AD:DA:E2:23:F6:86:03:11:98:08:98:D9:E5:53:C7:F0:8B:0F:65
            X509v3 Authority Key Identifier:
                keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:77:92:b3:ca:94:e2:92:f8:57:72:0f:a2:bd:97:5a:6a:
         9f:7a:7b:64:72:e2:49:1d:d0:2c:e5:b8:f8:e1:49:72:1d:e5:
         de:4b:40:79:62:5b:59:55:d7:32:77:f4:2a:3e:7b:3f:8f:34:
         6b:b9:d7:68:61:43:c3:f1:ad:09:f6:98:4b:36:ed:be:7f:15:
         d1:07:a1:cc:16:99:ed:d4:a6:e3:eb:1f:7d:49:cd:70:c8:d7:
         b0:01:fb:c4:db:1d:a2:38:62:ae:a7:8b:7f:15:d0:bc:30:a3:
         33:25:31:0f:f5:46:5b:5b:18:5d:06:8f:d8:f2:28:2a:df:02:
         0d:0c:3b:3b:a6:55:40:bc:62:71:9b:40:86:d5:a2:f3:23:80:
         46:f4:8e:c2:2c:cd:63:20:f2:51:98:9c:bd:01:f9:46:9e:3f:
         ab:9d:0d:32:0d:43:a7:b6:e3:f8:9d:f3:4f:7d:9d:bc:4f:c8:
         97:fe:5f:6c:62:93:41:92:bb:41:86:7f:1e:42:db:af:3e:fd:
         62:ab:77:19:c4:8f:82:9a:7f:b2:a4:6a:df:1d:4a:0e:e8:b4:
         1b:51:df:ec:0e:e1:d0:ef:9f:a7:a9:dd:27:b5:48:f3:c6:84:
         8a:aa:cd:e2:5d:02:be:45:60:91:6a:6e:df:35:4e:5c:a2:49:
         80:9e:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:06 2026 by rpki-client