Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          2mIhSZDzzVuLNhiJFK2q2wMGf3f0NSOfUSd0Qkhbtz4=
Subject key identifier:   3D:A8:79:27:24:45:C1:AB:96:17:18:97:23:71:6F:C2:D9:C6:DA:BE
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       019D28BBB96DE7DA51FA3E6B4C2606B071F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          1023
Signing time:             Thu 26 Mar 2026 06:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:24 +0000
Files and hashes:         1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
                          2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
                          3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: Zm91r8VmwUCYKqfTZJ1ae0BBtRBZYUABiEylIfM9RlA=)
                          4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:b9:6d:e7:da:51:fa:3e:6b:4c:26:06:b0:71:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Mar 26 06:01:24 2026 GMT
            Not After : Mar 27 06:01:24 2026 GMT
        Subject: CN=3da879272445c1ab9617189723716fc2d9c6dabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:b1:04:46:97:a8:e1:f6:a1:96:22:4d:4c:
                    47:5e:b8:83:61:56:63:74:ae:c6:93:1c:37:3d:60:
                    3a:0a:62:b7:41:ce:6b:67:57:c1:70:1b:4a:db:8c:
                    b8:d7:68:b8:1f:2b:7a:c5:43:94:91:2b:24:b7:71:
                    b6:b7:35:cd:c5:58:ad:1d:74:45:16:c8:87:9c:f0:
                    9d:b4:2a:5b:47:12:36:7b:b2:67:9f:b7:af:0e:aa:
                    62:bd:67:5b:69:2c:88:14:8d:b8:dd:b6:79:b4:4b:
                    40:6c:29:4a:87:1c:94:db:a0:22:30:47:55:e9:32:
                    3d:3e:4b:ba:fb:17:2b:a3:51:72:ef:28:b4:39:9f:
                    8c:bf:7e:fe:36:b1:89:01:85:8e:cb:c8:29:c6:1a:
                    2f:f7:93:3d:41:51:81:c5:f6:62:bb:d0:2d:11:4e:
                    3c:f4:3b:63:91:97:2c:8b:7d:39:7c:23:4c:1d:45:
                    7d:4f:eb:d0:e6:9e:24:0b:07:3e:4c:a5:8c:03:e5:
                    e7:4a:d0:b3:66:55:47:08:f9:4e:36:f4:ec:4b:c4:
                    da:31:11:30:2c:bb:31:18:8e:d7:08:be:62:d3:00:
                    b8:0c:0a:13:13:99:12:97:fb:30:f0:86:0b:93:02:
                    55:23:d7:7d:7c:83:02:ec:23:7d:48:14:29:cb:42:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A8:79:27:24:45:C1:AB:96:17:18:97:23:71:6F:C2:D9:C6:DA:BE
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:51:a4:83:e0:0f:0e:f0:c6:24:65:e5:e6:89:45:5a:f1:
         11:01:b0:01:81:e0:eb:7d:f5:4b:6e:85:d0:a7:16:e4:0e:db:
         d5:eb:f4:3f:df:ab:8a:b5:22:84:92:2d:99:35:b0:4d:41:de:
         af:b6:06:bc:80:8d:06:6f:ef:a3:4f:d2:3b:e0:7f:79:4f:d9:
         3c:22:e9:29:c2:42:07:97:d9:37:02:92:e6:35:a8:39:0b:c5:
         7f:36:6d:06:91:1f:58:34:34:2a:51:e7:6c:ef:9e:a0:05:b5:
         39:63:61:96:44:7b:91:79:80:16:54:9c:8b:ca:6d:37:00:24:
         58:da:4f:b4:6d:33:48:86:cf:75:ec:20:7f:9b:e7:c6:ae:29:
         49:94:12:fc:7d:98:af:0c:14:0f:3e:8b:eb:0c:40:b9:c3:f1:
         ef:e5:e1:d4:b6:94:38:49:cf:26:72:83:03:7e:2d:cf:22:c4:
         8c:f2:49:01:bb:22:7b:e4:83:a9:16:95:f4:5f:bb:99:5b:23:
         f0:6f:dc:c6:8a:f7:98:31:30:3a:a6:14:c2:ae:38:5f:c1:0a:
         7d:5f:fa:6c:08:66:33:2e:49:a8:46:a1:b8:2a:f6:0c:e0:f3:
         65:2a:1b:1d:b7:dc:1f:a7:17:f4:be:52:29:49:f5:f9:0a:77:
         02:c1:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:41 2026 by rpki-client