Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File:                     T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier:          fi76BQlK+FLiWSLK/wWPOiemIYGS1lnLRE85wBNVvDM=
Subject key identifier:   55:B8:7A:4D:F0:49:5A:C6:AD:77:F8:F5:67:50:B9:D4:28:8E:5B:F4
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer:       /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial:       019D28BB39938A4EE15733D8F092431461FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 06:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:51 +0000
Files and hashes:         1: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: AEyVxei1wv/aqiF+D2mKe8U2fJcddfc3DMNmWF/4reo=)
                          2: YrHkJUDzzHYV4NSM8kuc3mWA3No.roa (hash: XN+H9pEw3/RHdNbn4FFCp9WEa3ViQ6Ir6r897iLElR0=)
                          3: eczTTw63Z89Bvx_PDTMEgnxlsuM.roa (hash: EGjQDsuLjtgXMDaJKqFFVXP8wORi9rfRbOBnhjq8cf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:39:93:8a:4e:e1:57:33:d8:f0:92:43:14:61:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
        Validity
            Not Before: Mar 26 06:00:51 2026 GMT
            Not After : Mar 27 06:00:51 2026 GMT
        Subject: CN=55b87a4df0495ac6ad77f8f56750b9d4288e5bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:d9:a2:aa:1c:a4:d5:cd:97:8d:a0:5b:5b:
                    de:b5:3e:d1:00:2b:97:1a:3c:d7:14:f3:cb:d9:16:
                    94:bc:fb:27:d4:bc:23:e4:ce:a8:43:91:74:1f:d5:
                    09:cf:36:e6:8c:0a:0d:0b:8c:74:ae:f8:13:6f:0d:
                    a7:e6:a9:7b:bd:be:e6:db:a8:98:1a:07:43:62:cc:
                    c3:44:f0:11:84:de:62:98:01:8b:24:ad:44:ec:31:
                    b1:12:15:fb:47:a7:23:2e:f0:d8:44:7f:ad:91:d6:
                    cc:96:67:a3:11:df:59:b8:d4:7a:80:0d:a9:dd:7c:
                    a5:a6:bb:4f:c1:7b:6f:cb:ef:1b:6a:cb:06:67:77:
                    f8:42:46:97:a6:92:01:d9:c8:84:0a:67:9a:37:7a:
                    6d:01:4d:28:72:eb:28:d4:35:4d:00:ad:03:f4:f3:
                    9b:88:4a:0f:d3:d1:b2:1e:2f:b2:22:0d:1c:76:10:
                    84:95:63:56:c1:a1:36:79:83:c0:a8:fe:2d:39:a6:
                    d5:61:7f:a4:90:d8:15:a3:97:3a:1c:7f:72:64:b8:
                    7a:cf:a2:45:10:45:15:f5:9e:fe:b2:d5:38:35:5c:
                    a8:03:77:3d:2c:ed:0e:16:42:b4:14:9c:6d:fb:9c:
                    c3:a8:1e:91:33:76:8f:b9:f2:91:6e:66:0e:4c:8d:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B8:7A:4D:F0:49:5A:C6:AD:77:F8:F5:67:50:B9:D4:28:8E:5B:F4
            X509v3 Authority Key Identifier:
                keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:f8:52:25:e4:c4:4f:99:d6:a9:e8:f0:54:f5:53:db:b7:
         98:1d:c8:28:30:3e:65:1b:75:d3:18:4d:35:e4:e2:57:ef:c8:
         52:37:c7:dd:b1:70:dc:9e:ba:fe:96:51:5a:26:92:59:40:b3:
         a9:f6:ef:39:2e:13:90:7e:8e:3c:76:f8:de:e9:16:d2:8a:f2:
         58:b9:61:e0:dd:c7:a2:c6:8d:b5:dc:9b:6a:aa:ca:51:4a:6f:
         29:d0:1a:a6:52:64:d2:81:13:4d:81:c0:0f:e0:27:90:93:7d:
         c1:5e:8b:8d:05:b2:61:46:c7:57:1b:9d:20:7b:cb:b7:ae:01:
         0c:d6:ad:60:e5:10:b3:fc:bf:77:ae:dd:f2:b0:5b:94:42:a6:
         45:a4:af:df:84:e9:09:3b:1f:c2:79:79:d8:bc:ca:19:05:7a:
         d8:19:58:f9:c3:f5:53:a2:90:12:9e:e1:b8:61:5e:f4:a3:38:
         7a:83:99:bb:c0:3a:2c:5f:18:08:f6:fb:45:e7:fd:de:b1:bb:
         5b:5a:80:a5:fd:be:60:99:6d:b5:29:1f:39:f9:d9:74:ce:47:
         45:d8:a9:b7:ae:b1:82:93:b8:d2:14:ea:fc:38:72:71:f6:15:
         45:37:b7:aa:c9:70:c7:4b:0b:1a:1c:23:2b:8f:84:25:c9:e4:
         d6:56:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:37 2026 by rpki-client