Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          tuH937em32KMGmxKZDPpqAae1W6yrco7J8rK93umw1E=
Subject key identifier:   16:3F:44:08:01:F1:37:31:A9:59:86:7F:AD:35:2B:80:18:F8:7D:85
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019D2AA95961FDF718F8A731D74CED19D5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          18A2
Signing time:             Thu 26 Mar 2026 15:00:34 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:34 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:34 +0000
Files and hashes:         1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: QvembX1S+2t4gbmdk5luuLtLg1Eu1G12KU/GvOlLQXk=)
                          3: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
                          4: eBZ7AmSoNEvuFIsVSaKIFPergtc.roa (hash: bJyd01nfZd9XumL2AfymHRJRduJs4cP6QwBEo8jMpBk=)
                          5: ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa (hash: /beWoLO2qLG+iVsq1LgAGcDTFDHTDeaWmY9kyyThHj0=)
                          6: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:59:61:fd:f7:18:f8:a7:31:d7:4c:ed:19:d5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Mar 26 15:00:34 2026 GMT
            Not After : Mar 27 15:00:34 2026 GMT
        Subject: CN=163f440801f13731a959867fad352b8018f87d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:93:31:4c:8f:94:48:74:66:92:71:be:99:
                    8c:23:76:86:4c:34:31:92:0c:50:ab:81:4f:5f:cd:
                    6b:29:22:3b:4f:2c:70:7c:95:b3:fe:1e:9b:28:06:
                    29:12:62:e7:0d:a2:0d:79:f0:89:89:fc:65:81:70:
                    d2:6c:49:07:19:b1:29:15:db:ec:a6:88:1d:b8:f6:
                    e6:00:20:af:63:91:18:32:cb:a3:53:37:e2:b8:53:
                    1f:bf:58:78:5c:70:d9:03:ec:e3:ac:a9:e9:1c:b0:
                    e6:7d:67:63:42:d9:80:b8:1d:d9:1e:ec:98:29:cf:
                    25:ec:59:bf:8a:54:6e:e5:ad:f7:b6:04:bd:04:67:
                    ca:5a:e9:3d:7c:53:bd:0c:df:95:75:f3:56:de:ed:
                    d0:93:05:9b:d5:c9:77:e2:ce:ad:5d:cb:c9:ba:07:
                    69:f4:6d:3f:f5:1d:5a:1d:7e:4f:36:52:10:3e:04:
                    ea:78:8b:d4:22:06:3e:1b:48:8e:73:94:10:b1:e1:
                    d0:99:8e:6c:e1:34:b4:a0:0a:32:b0:f4:d9:9e:dd:
                    f7:7b:12:0f:91:6b:c5:8b:e0:0e:42:a7:02:55:73:
                    8b:ee:cd:fa:c3:0b:a7:a4:51:12:51:5a:8a:7d:cf:
                    c6:33:c6:62:6d:91:b1:2b:1a:21:63:2a:02:b1:3e:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3F:44:08:01:F1:37:31:A9:59:86:7F:AD:35:2B:80:18:F8:7D:85
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:f0:68:e1:0a:36:16:15:aa:52:b2:7c:76:09:80:06:e2:
         ca:f0:4a:7f:d8:0f:54:6f:9c:4d:34:62:db:bd:81:ee:6a:cf:
         4f:0c:1c:2d:a3:37:a4:cb:fe:df:a5:39:e7:3d:a9:18:71:4a:
         88:f0:c9:fc:b7:f7:6c:8f:56:91:1d:0a:95:7e:6b:8d:6d:9d:
         62:d9:25:6e:82:db:70:93:a1:44:45:ea:21:3d:e3:7d:30:09:
         03:4d:5a:aa:46:b0:bc:3a:f8:53:88:c7:bf:d3:5e:d0:26:08:
         a4:5f:56:ff:c4:f9:3a:7d:be:8f:b9:32:07:bd:66:36:d8:ab:
         58:11:bf:9b:55:ca:35:74:96:3e:48:10:35:d2:fa:11:04:c9:
         ac:61:6d:42:55:fe:2e:1f:54:cb:80:f7:62:04:9f:cb:fb:d5:
         97:12:e0:7e:5f:63:82:ec:15:a8:45:d0:08:b9:df:1c:bb:32:
         0d:d8:24:b7:43:07:bf:08:8e:d8:42:d9:69:65:73:e5:94:a4:
         57:28:6d:d9:aa:3b:19:56:7f:46:dc:55:10:9d:2a:28:61:2e:
         0f:34:04:30:6f:7c:8d:ae:18:6b:33:f2:83:79:6b:ac:ca:3d:
         14:39:d9:0b:65:3d:b5:a0:05:21:8c:18:3b:e6:af:cc:f5:fb:
         c0:79:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:15 2026 by rpki-client