Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File:                     edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier:          zGPHDf1/bQh6pb0pkRsgYyUFN/tF0mvo21gTjJnpAfU=
Subject key identifier:   49:2A:43:38:D5:CD:E7:A4:A0:4E:DA:37:A7:37:CE:1B:AE:1A:EB:90
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer:       /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial:       019D26287E9BA5CC9A245368D12A9B7E3522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 18:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:21 +0000
Files and hashes:         1: 1oQnHtziYZUN1dZc7QkQQyuqMPE.roa (hash: j6nJzk5ZsSd6XpFmMvEADhEDlPdaRY5G9ebbRW3253M=)
                          2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: RyW9b0Pv3syZK23I+yPJ4LkUBJ/PFSueOoD7hy8+qGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:7e:9b:a5:cc:9a:24:53:68:d1:2a:9b:7e:35:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
        Validity
            Not Before: Mar 25 18:01:21 2026 GMT
            Not After : Mar 26 18:01:21 2026 GMT
        Subject: CN=492a4338d5cde7a4a04eda37a737ce1bae1aeb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:c3:45:dc:dc:5d:a8:d5:00:0c:71:4f:fd:
                    55:c3:4b:05:a3:63:93:63:ed:45:34:3f:5f:6b:1f:
                    b1:7a:0c:83:0a:ff:f8:d8:40:b6:a3:d6:9a:9d:29:
                    fd:55:7c:a6:83:0b:6c:a9:1c:7e:81:6f:1d:b4:76:
                    b6:f6:7b:e9:db:07:79:0d:b9:da:cc:75:1a:03:84:
                    56:9c:8b:4f:e6:5b:5c:96:b6:b1:c2:23:0c:5d:ea:
                    22:58:53:dd:64:3b:04:ba:05:2a:2b:0e:12:b5:27:
                    3c:8f:d3:bb:11:84:1c:ab:d0:3a:f6:86:55:71:e3:
                    70:6f:6d:8f:58:1e:9a:91:5f:50:b1:6e:a8:d1:14:
                    1d:32:1e:25:24:ef:55:11:e2:9c:d5:90:09:b4:90:
                    cd:54:0e:9f:64:23:bf:dd:cf:a4:2b:32:81:cb:ff:
                    8a:38:1f:df:0e:d2:04:d8:50:4e:95:ee:90:31:a9:
                    a8:fa:9d:dd:ba:4f:c5:11:25:6f:02:e2:8d:64:50:
                    27:27:a9:a1:db:3e:c0:48:dc:24:c9:71:a7:55:4a:
                    f8:ef:60:1b:94:84:61:d5:88:56:5c:b2:91:1c:00:
                    55:de:28:16:9d:72:e6:36:5a:73:f2:e2:e0:09:f6:
                    ae:b0:89:5b:25:31:08:2d:32:fb:1d:62:db:08:a3:
                    4c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2A:43:38:D5:CD:E7:A4:A0:4E:DA:37:A7:37:CE:1B:AE:1A:EB:90
            X509v3 Authority Key Identifier:
                keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:2c:78:22:f5:38:66:fe:65:fa:f8:55:5c:07:fa:64:8b:
         96:a0:83:ff:c6:d1:84:62:d2:b8:e2:ff:78:fe:12:a6:48:da:
         83:80:cc:59:3a:7a:37:b3:12:53:9b:4f:1c:d8:08:b6:a9:97:
         5d:6d:7a:7b:f9:93:1d:17:90:cd:07:b6:2e:1f:cf:78:2d:32:
         d2:a4:27:3f:71:e4:70:a3:90:a8:23:65:e3:64:4d:0f:f8:c6:
         e2:04:3e:37:3a:c4:1e:d1:d4:c9:0f:89:01:1b:2d:07:0e:4e:
         f3:b1:9f:a8:04:ff:64:03:89:bb:50:96:cd:a9:a7:19:29:23:
         8f:75:6d:68:ba:1c:de:57:ed:24:98:48:50:5d:d7:df:b5:61:
         91:b2:12:ec:da:ae:6b:64:27:c0:66:c0:1f:22:56:82:a1:17:
         08:66:74:b5:dd:7d:f7:7c:63:2e:4e:10:f8:c9:9b:2d:9d:47:
         d7:b4:b0:e8:35:72:e8:bd:70:e5:b1:ba:bb:41:22:82:df:06:
         29:e8:2f:61:92:52:91:17:ce:7f:4c:19:75:6d:47:df:92:a6:
         1b:7c:21:3a:d5:21:e4:dc:70:fa:d5:cc:6c:33:7d:b2:83:93:
         7c:ee:81:9a:15:ec:57:13:1c:01:52:2e:b9:03:1c:8e:1d:78:
         19:35:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:19 2026 by rpki-client