Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
File:                     n5auJ3AmWvMufUvoa6sHoHwtM1M.mft (raw, json)
Hash identifier:          DXNNQY6xdrOcE1j5VRNMAoCsIaPEnXRmIheO9PTp9h4=
Subject key identifier:   48:82:31:58:7B:58:D3:91:42:0E:2A:A4:F0:14:58:9F:B2:AF:6A:BD
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Certificate issuer:       /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial:       019D265F351DDFAC4C68B6E21AD3F948355A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 19:01:06 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:06 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:06 +0000
Files and hashes:         1: KyIL3asNoQ4Ad8qGZAr89eB7ca4.roa (hash: ds+2+c6dFsxpOer7wRkA5m/ze2fRmfjRiONNK5szPXc=)
                          2: buiPavT-Zfx6W72yl4fFQx5DwDc.roa (hash: H3Kr3JFr7VDVGCn1y+EmkSg9SrmE8in6T0N0RwfWJLM=)
                          3: n5auJ3AmWvMufUvoa6sHoHwtM1M.crl (hash: zBkCz7a0TVgjciW0ebEpr4FvANuvXx05m/SgBemPJUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:35:1d:df:ac:4c:68:b6:e2:1a:d3:f9:48:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
        Validity
            Not Before: Mar 25 19:01:06 2026 GMT
            Not After : Mar 26 19:01:06 2026 GMT
        Subject: CN=488231587b58d391420e2aa4f014589fb2af6abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:c6:4b:0a:28:d1:eb:1a:45:1e:f3:a7:5e:
                    09:c6:74:1a:09:ca:71:69:d7:49:b4:6a:7f:11:07:
                    5c:e9:36:53:97:ee:b5:84:33:a5:5f:0f:9f:1c:ee:
                    17:52:ee:cb:c6:72:90:15:72:df:5c:f1:50:6a:fb:
                    be:1e:e1:33:98:e6:7a:2f:d1:c8:0b:82:86:0d:0c:
                    11:c9:8d:6e:87:c4:92:22:11:c7:9c:7c:44:3c:ff:
                    d2:ae:cc:c5:53:49:64:03:e6:d6:3d:d2:39:a6:11:
                    bd:32:5b:3c:91:25:bc:dd:da:42:59:83:b9:1d:60:
                    7d:d9:ab:7c:24:62:0f:52:ee:01:c8:f7:b1:02:f5:
                    dd:3e:f2:94:18:c6:8a:b9:1e:fc:5f:f4:7b:c1:9f:
                    2a:67:6a:83:e4:f9:99:25:ea:a2:e0:b5:f4:b3:96:
                    61:0e:35:e6:31:d4:e2:3c:35:56:b4:36:52:8e:a7:
                    d4:62:9e:16:ab:13:29:86:b6:35:38:50:79:97:1f:
                    e6:2e:c5:74:de:f5:3c:f5:7e:92:36:4b:24:63:5d:
                    58:b4:c1:ab:ad:07:a8:ca:28:30:36:e8:cc:e6:ab:
                    1a:39:5a:af:44:72:75:91:80:0d:df:2b:8d:43:d8:
                    ae:b8:03:a4:0d:41:86:d9:c0:50:0a:a9:5a:06:1d:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:82:31:58:7B:58:D3:91:42:0E:2A:A4:F0:14:58:9F:B2:AF:6A:BD
            X509v3 Authority Key Identifier:
                keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5c:37:cf:67:c5:1c:58:8f:8d:ce:7c:4c:cd:d9:a1:7b:e1:
         7c:5b:70:f0:d4:a7:cd:79:ef:ea:7c:f4:de:2f:a2:0b:d0:5f:
         0b:4b:f7:d0:53:b8:80:ca:a2:3d:30:74:ae:c9:ed:fb:7c:b9:
         49:2c:52:4d:d9:63:33:0e:94:56:f3:a7:06:17:45:ee:53:ce:
         e1:4c:a5:19:e7:11:35:7d:fb:d9:93:32:92:bd:0c:f5:87:8f:
         48:3e:5d:45:e3:ab:a9:5a:7e:a9:59:a4:66:4d:d1:59:b1:1f:
         f1:28:f5:64:b9:2e:0f:b2:c7:34:bd:62:71:4e:7a:c1:d8:36:
         c8:e8:8d:73:b6:f4:4a:36:b5:83:7e:8b:dd:e9:2d:23:ac:1d:
         31:68:7c:4d:c4:f0:06:a6:81:4e:3f:e7:7e:1c:c9:f4:2f:b6:
         e1:f6:90:5f:ea:74:ae:15:a3:b5:2b:b8:3b:2d:f1:a6:73:5d:
         5e:50:a2:3c:88:72:42:20:22:6a:0f:50:3d:78:05:ba:32:ed:
         06:87:81:89:ff:62:58:2f:ef:53:64:6f:3a:d6:14:2c:3b:8f:
         05:d8:2a:fb:66:87:33:ef:1a:5b:af:7e:68:90:76:ce:58:bc:
         d5:2f:96:5c:5e:35:89:37:b1:51:86:75:a6:ee:7a:1b:3a:9b:
         7c:22:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:01 2026 by rpki-client