Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          gVCWpwhJ1RH98nCo4ydHK2eM3ZhFr7UZavjkHiCeT/8=
Subject key identifier:   6D:72:8D:9E:3E:1A:F0:C2:56:D7:AD:5F:5F:FE:BB:F3:C0:A5:41:E1
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       019D25F1EEDD16B09099371C4F0B74DE4E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 17:01:45 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:45 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:45 +0000
Files and hashes:         1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
                          2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
                          3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: ysOU0c7TVYpreGlGIavLORuldWsi4gr83NvBZQLAmu0=)
                          4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
                          5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
                          6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:ee:dd:16:b0:90:99:37:1c:4f:0b:74:de:4e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Mar 25 17:01:45 2026 GMT
            Not After : Mar 26 17:01:45 2026 GMT
        Subject: CN=6d728d9e3e1af0c256d7ad5f5ffebbf3c0a541e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:0f:78:03:87:48:2f:02:97:3a:5c:1c:78:
                    c5:79:3e:c2:bb:98:5e:5d:0b:0b:ef:86:fd:34:55:
                    bc:40:21:88:74:02:0c:1c:cc:20:3d:1f:22:a8:73:
                    d1:6a:95:b8:b3:d1:2b:18:b2:79:06:3a:55:6f:d2:
                    8a:e7:6d:9f:28:95:c9:f7:20:66:68:34:d0:a6:c1:
                    b2:b7:29:d8:78:98:d0:d9:4c:e4:1b:10:c5:ae:eb:
                    f7:59:63:7e:cb:c9:2f:ae:5f:37:54:56:23:38:8d:
                    92:8b:f3:0e:a9:83:22:e2:de:83:ca:27:b5:14:1e:
                    64:8b:d6:e2:8b:46:41:bb:86:bf:f1:e9:5d:3b:5b:
                    98:cd:a1:6e:ad:a4:64:1a:ad:f5:50:a3:d4:ba:3e:
                    66:26:72:db:4d:aa:a9:7a:f6:38:0f:9d:68:34:ed:
                    0b:2e:19:cc:13:39:b1:d0:cf:f3:fd:d4:d8:93:06:
                    10:6d:63:95:b0:0c:27:30:75:35:9b:0f:4a:67:49:
                    4d:d9:d7:e7:18:0f:1e:74:cb:1c:1d:45:df:9a:1e:
                    29:47:e3:0a:4b:88:31:9d:6d:25:d0:78:b4:68:18:
                    77:da:c6:d7:6c:f6:f1:07:e7:d8:a0:81:15:bc:87:
                    be:09:1c:fd:a0:ca:99:be:ec:ae:b9:80:86:dc:80:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:72:8D:9E:3E:1A:F0:C2:56:D7:AD:5F:5F:FE:BB:F3:C0:A5:41:E1
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:23:98:34:ac:6f:65:d9:83:bd:85:8a:9f:70:33:21:eb:0a:
         de:11:5d:d1:12:05:97:b5:7e:e6:58:64:b3:c4:fc:e4:ac:51:
         32:4c:98:2c:01:18:68:2c:bb:c9:ad:5c:4b:3a:bb:ba:81:f4:
         d3:74:96:52:50:55:72:c8:8b:ae:93:83:c3:fa:5c:13:76:15:
         5a:21:c1:4b:c8:ff:fe:3a:ac:46:dd:ca:4f:bc:92:61:7a:99:
         bb:f2:68:81:8e:9b:97:f8:75:50:d3:82:62:5c:02:34:46:11:
         fb:ea:b8:8a:51:36:57:0e:30:4d:e3:0d:d7:7d:be:4a:83:07:
         21:71:6a:73:5a:e9:53:87:91:80:4e:d1:db:97:75:60:be:4a:
         15:de:91:d0:46:1f:ab:4f:53:4f:da:71:57:a6:73:e1:43:79:
         df:16:11:7a:9c:38:22:59:0e:5f:a8:ae:08:9b:b1:49:23:93:
         02:a0:f6:8d:48:28:90:1b:f1:6b:05:a8:b5:ae:f5:d5:75:f4:
         4a:77:cb:4d:87:c9:92:93:15:83:c6:20:64:14:c1:f0:88:ab:
         cc:33:c9:8d:ca:e9:74:62:c6:c7:41:54:02:19:fb:20:e0:7c:
         70:b0:56:04:db:32:6a:78:92:43:f8:e9:2b:b7:8a:43:a7:e8:
         dd:61:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:45 2026 by rpki-client