Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File:                     T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier:          rhfAIEf05ysxMZo/btgE7QrAHKbYGT55MhxZCjE0fes=
Subject key identifier:   47:F5:4E:22:88:EA:7F:8F:CF:DF:08:8A:A4:43:E6:19:D4:F1:67:C5
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer:       /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial:       019D27723E14DC60A6A54C8000D9042D220E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 00:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:31 +0000
Files and hashes:         1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: iYv7tXWvMGR/wXHY2sTn2wI05Ksa9/z8pEzyh4IH4TY=)
                          2: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:3e:14:dc:60:a6:a5:4c:80:00:d9:04:2d:22:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
        Validity
            Not Before: Mar 26 00:01:31 2026 GMT
            Not After : Mar 27 00:01:31 2026 GMT
        Subject: CN=47f54e2288ea7f8fcfdf088aa443e619d4f167c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:39:76:e0:af:46:7b:42:d3:29:20:1b:11:
                    99:76:fc:31:4f:af:24:41:a0:18:e0:41:82:c2:b1:
                    fd:c5:2f:47:39:a6:47:eb:f5:37:a7:9d:48:f8:a6:
                    29:30:b1:ad:a9:45:6b:de:0c:6e:c7:05:e9:0d:10:
                    64:12:72:d9:ce:b1:7e:da:f8:4c:21:96:8e:6f:e6:
                    a9:9c:06:0f:e9:31:d2:2f:cb:04:85:51:e8:01:5f:
                    67:41:0a:e6:0a:af:ee:ca:85:ab:83:a6:3e:64:58:
                    01:88:dc:4d:68:9f:5f:d9:98:d6:96:1f:de:2a:04:
                    8c:ee:dc:34:2c:2d:8d:e0:0a:73:91:cf:bf:26:e3:
                    5c:5b:be:ee:f2:27:d5:75:56:3f:53:09:a5:53:f2:
                    29:76:cd:b7:49:11:e1:8d:cf:70:14:b5:6a:48:71:
                    30:17:dd:64:9d:c5:26:92:73:77:1b:3b:ae:14:13:
                    fe:0c:d4:17:08:a8:05:c3:21:23:ee:b8:ae:20:50:
                    24:0f:6e:d8:c1:8b:43:00:26:3d:83:15:aa:dc:4d:
                    f5:6f:c5:48:fe:aa:65:0a:12:a8:3c:51:b2:74:4b:
                    ed:29:b3:b7:d1:cb:2f:b4:9b:e0:49:6e:cb:c2:ae:
                    87:16:a7:1d:b3:76:1f:57:36:88:86:95:5f:96:ab:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:4E:22:88:EA:7F:8F:CF:DF:08:8A:A4:43:E6:19:D4:F1:67:C5
            X509v3 Authority Key Identifier:
                keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:63:1f:fb:85:a9:02:b6:99:a2:e8:c3:36:b7:4d:70:a4:3f:
         8e:83:c0:20:c2:cd:18:95:ea:77:d7:65:af:42:d9:ab:35:0e:
         fb:cf:99:d3:7b:c0:f7:e0:86:8a:c5:1f:5c:95:d7:60:d5:be:
         66:00:82:f0:dd:bd:22:e9:1e:82:5a:44:c2:4c:69:4d:4a:97:
         3e:a2:39:e9:a2:ad:98:ca:67:f2:53:52:56:d2:aa:9f:27:51:
         2d:3f:16:b3:c3:7d:df:a1:83:dd:00:3d:d6:01:0d:07:f6:6b:
         fc:c8:88:18:05:4d:26:42:f1:c2:67:94:54:da:31:13:6b:af:
         26:c5:81:cb:71:40:31:23:20:22:a2:c7:26:02:50:79:ec:06:
         fa:07:fa:be:9e:a9:f3:36:8c:bd:a8:e8:47:68:49:ff:2a:23:
         20:72:68:a2:83:9a:2a:e8:96:ea:9a:4d:be:76:a7:4a:01:0b:
         63:0c:4b:d4:25:f9:48:15:75:b1:41:4e:2e:54:7a:4e:84:e1:
         af:8b:4a:9c:0e:b1:6d:0a:35:e7:ab:66:5e:9d:3d:c9:a9:f5:
         a6:bf:87:b8:6b:07:2c:1f:f7:08:98:a2:ab:f0:4b:23:8d:a2:
         4c:cf:00:ea:62:a1:21:40:01:74:67:88:c1:78:60:de:3a:c1:
         fe:a1:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:07 2026 by rpki-client