Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File:                     mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier:          Y0t9SobgEMGiW6e5rnUDqVF3eLMCaGgu8c+EwdMZu5s=
Subject key identifier:   BC:71:04:8D:03:5F:D7:28:2C:DA:7B:4B:F1:3A:1F:96:5E:F6:BE:CD
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer:       /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial:       019D29294D1DE4B7EF846AB025BCFF89277C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number:          069E
Signing time:             Thu 26 Mar 2026 08:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:05 +0000
Files and hashes:         1: 1sGhU6MrhqOQe72GVQ3uEjbGwB8.roa (hash: IzX/NeS/gsGTMbDaq8QMW6ohP4ePoSu82S6CGrAjXmE=)
                          2: 7g2RZeaRS9vdn7VTGlUUljooyjg.roa (hash: TDCPm1iHmXQo+Iw8VJeLJKTjPRB1MKrXpudcYi2nCl8=)
                          3: AcpzUDJdh0QVREs7oyJtCxQqBno.roa (hash: h09GFyOqdQu3iLmVfPCv9jYL7SkvvrDzZUtMK/M7w7s=)
                          4: Ogeb0NIuZiUzdbJ2L0IQMwR8aKE.roa (hash: pgk407tpVqJOpRBfZ29H20iPf3oWY6NCHEs/wV2vLyg=)
                          5: WQApiK5AqVLXzb2NxG_TG7ltg58.roa (hash: siSt0UVKPrrD5BPPklQPFJzk2EiG13UyW6FUUioZ3+w=)
                          6: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: oy/VXe4wNMatQSHuqnOpZQgBYN0Zhrc1ikcy9ZVEfy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:4d:1d:e4:b7:ef:84:6a:b0:25:bc:ff:89:27:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
        Validity
            Not Before: Mar 26 08:01:05 2026 GMT
            Not After : Mar 27 08:01:05 2026 GMT
        Subject: CN=bc71048d035fd7282cda7b4bf13a1f965ef6becd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:fc:ce:33:3e:69:f6:b0:41:7c:95:e0:d0:
                    c7:d7:ec:98:73:7e:f1:4e:c5:1a:5b:15:4e:8c:55:
                    91:ad:6b:5c:93:c2:8f:3c:f0:97:2f:e1:87:04:14:
                    d3:50:ad:e1:d4:50:fd:c6:e4:01:92:13:58:cd:4b:
                    67:a7:fb:65:58:f9:bb:35:ed:f5:a1:71:ba:5b:b6:
                    da:6e:07:57:c1:09:f7:eb:60:f3:7a:ea:71:8a:0e:
                    28:96:91:37:74:e9:1c:bd:40:43:31:75:88:21:4c:
                    dd:3e:a7:48:42:e1:66:43:0b:fe:5d:4e:3b:c7:d0:
                    49:ee:22:98:74:52:10:61:be:7e:55:39:63:23:b9:
                    e4:90:9c:fe:34:5d:58:3d:2a:cc:ad:af:cc:0d:75:
                    71:5d:58:5c:1b:da:e7:5d:05:ca:88:ec:93:c6:96:
                    16:9a:23:6d:13:93:dd:cf:36:a8:e6:a4:02:b0:38:
                    c2:62:ca:bc:31:97:08:ea:26:7f:25:0b:91:ce:5a:
                    e6:8b:62:a6:31:f6:32:dd:83:6c:de:e1:cf:84:98:
                    8b:9d:fd:8b:71:8f:fb:36:28:40:8b:76:d3:ae:df:
                    24:7f:2f:b0:6c:2c:3a:2c:85:d7:91:eb:b5:e4:d7:
                    da:f8:3b:d8:31:ed:2b:53:e5:c1:f9:79:a3:63:fa:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:71:04:8D:03:5F:D7:28:2C:DA:7B:4B:F1:3A:1F:96:5E:F6:BE:CD
            X509v3 Authority Key Identifier:
                keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:1a:e6:cd:a3:78:52:55:dc:e3:a3:1d:ef:a8:df:41:a1:
         e8:4b:ac:d3:d3:9d:94:8f:ec:f9:72:55:63:3c:fd:12:fb:af:
         ad:eb:c2:52:83:9e:ad:d5:aa:51:ea:39:b4:0b:da:ed:0a:b9:
         ef:57:97:bd:31:a0:54:02:2d:3f:87:ba:0d:25:d0:d2:35:6c:
         73:4f:2b:5c:f4:a1:5e:f0:96:58:bc:34:ec:e1:95:18:50:1d:
         a9:74:0f:69:9f:f8:0c:1b:38:ec:15:03:cf:4c:97:00:c1:97:
         57:28:a7:7d:33:2e:d8:5f:df:ed:99:95:ce:fb:86:f5:38:1b:
         3c:9d:5f:62:40:90:cb:88:ad:b6:35:17:f5:4e:b9:35:ff:14:
         93:03:6b:68:f0:3d:eb:c5:f0:7d:aa:a7:4d:6b:de:56:e0:75:
         8e:eb:a0:c5:34:d2:db:ec:6b:c8:9f:bf:6c:da:c9:ff:ba:2e:
         b9:c1:45:9a:ec:5e:76:45:43:10:de:32:79:3d:c2:f1:61:ae:
         b6:01:af:fe:4b:f3:c6:40:52:85:61:00:94:32:8e:4c:84:3a:
         d1:60:71:58:cd:4f:22:61:42:d1:7d:d2:6b:76:73:4a:85:02:
         07:c3:ee:36:5d:da:85:df:e2:6a:d3:4a:e2:1d:e3:70:a9:83:
         ca:27:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:20 2026 by rpki-client