Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File:                     M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier:          iFuEzaJFXPs/uGZuyNDAJGGT3y2CzSbgCTcH6YqUIvI=
Subject key identifier:   74:6E:D2:87:E5:52:A2:AF:05:6A:B9:11:B3:50:29:DB:A2:BA:51:9C
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer:       /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial:       019D28BBA2B86264E6DF0F610ED9569897E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number:          119D
Signing time:             Thu 26 Mar 2026 06:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:18 +0000
Files and hashes:         1: JY_xv27BSE0PmJzxtxeH3ELGERo.roa (hash: 7ZqKA1QkpMvfCfkiUQ38tlesyzt3GalUpSbgM/pSlcA=)
                          2: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: v0agLr4ieG+P7ps9obTcd3HaNd8AWnoetguFIdiVU4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:a2:b8:62:64:e6:df:0f:61:0e:d9:56:98:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
        Validity
            Not Before: Mar 26 06:01:18 2026 GMT
            Not After : Mar 27 06:01:18 2026 GMT
        Subject: CN=746ed287e552a2af056ab911b35029dba2ba519c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:f3:4b:cd:e5:1e:6e:82:b9:66:f9:1a:3f:
                    1d:be:f9:ee:e0:62:14:88:fc:30:8e:87:5e:7a:18:
                    70:69:1f:76:6e:5b:0b:66:c8:3e:ca:6b:7c:e9:ac:
                    26:71:77:0a:29:69:52:0e:30:c3:fd:db:c2:d7:6b:
                    47:ac:e7:e5:1f:a9:d7:33:76:00:c5:9f:ec:4e:fe:
                    2d:81:87:de:68:67:2d:3d:34:6b:0c:d0:37:97:47:
                    84:a2:42:62:de:e7:68:8c:f3:0f:85:d3:b1:56:8c:
                    4c:7f:d3:35:af:8d:f2:a0:22:1c:00:63:03:40:b3:
                    27:43:c0:6a:9b:69:a7:11:d8:52:c9:63:d5:f5:49:
                    11:2a:ba:ca:db:cd:96:5d:6a:94:da:3f:d3:ee:cd:
                    21:0a:aa:b9:10:a6:07:33:98:e8:bc:f9:c5:7c:a3:
                    06:62:5b:b5:0e:13:8d:8c:14:40:a0:37:44:66:49:
                    d6:c6:db:ca:3d:53:cf:17:76:f9:d5:81:eb:45:0e:
                    7b:e0:2a:9d:59:29:47:b3:36:be:4c:ab:c1:e4:52:
                    ef:bc:04:06:00:a1:7e:5f:7e:ad:42:36:06:1d:a3:
                    4b:35:57:60:24:0f:c0:74:3c:b6:a6:28:94:e4:65:
                    7a:92:f9:9d:6e:0b:58:3c:ee:f3:dc:2c:c3:3a:ea:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6E:D2:87:E5:52:A2:AF:05:6A:B9:11:B3:50:29:DB:A2:BA:51:9C
            X509v3 Authority Key Identifier:
                keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:60:37:52:93:a6:d0:90:51:84:be:21:16:ed:20:bd:68:e6:
         9e:2a:3c:f2:58:5b:82:b2:8b:7a:82:47:b0:52:95:ee:10:3f:
         96:ff:ba:8c:02:1d:3f:79:8b:6f:65:21:d1:28:55:f4:4a:25:
         94:f5:c4:30:ab:06:65:d0:4a:19:e0:ed:26:d0:14:87:8b:f3:
         a9:46:56:cd:b5:aa:f9:21:71:67:a6:fa:f4:54:d5:47:aa:95:
         90:3c:1f:5d:ec:74:59:aa:d7:3c:be:f9:a3:e7:c8:e2:e3:33:
         e7:1e:df:fe:d6:b3:94:84:4e:47:01:b1:28:43:59:bb:76:06:
         60:69:7b:2a:43:b6:b2:72:93:2b:3b:74:d4:7d:aa:c0:06:1a:
         9a:20:60:e7:ab:fe:da:82:d3:c9:7e:9a:ce:f0:01:97:1c:2a:
         db:ad:1d:f5:df:94:ff:85:9f:ee:2a:54:3f:20:d5:5e:ae:a0:
         56:d1:0a:7d:4d:63:c6:22:42:f8:ef:20:e8:a3:90:32:04:dc:
         b8:1a:d7:77:43:2c:5e:2f:df:45:00:f3:ec:7f:18:6c:45:d3:
         55:a4:41:2e:04:7b:40:69:35:c8:cf:f6:2f:dd:7d:84:2a:a3:
         e4:a6:ce:6f:c4:64:e6:a7:18:f5:04:ee:fe:d0:d0:e3:39:fd:
         0a:71:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:26 2026 by rpki-client