Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
File:                     ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft (raw, json)
Hash identifier:          2zbGSW/Nk+CzZO+GXHOuAbsGhyWZBqcbBnOzOczFFQE=
Subject key identifier:   5F:15:A0:42:7B:A1:2D:F3:5C:67:9B:59:B8:7D:D0:E7:FA:B4:02:F2
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Certificate issuer:       /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial:       019D2772DB3805619F5C0C3CC7A8B3AB31AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 00:02:11 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:11 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:11 +0000
Files and hashes:         1: 9R3X_Fbswyp0dlU7e0jgLCwlRc4.roa (hash: 48MU1qRcOJqUGd4gBSOu3MVRdMSx3ak0Iy7V4C0HIPg=)
                          2: FMytXTkalgyla6hJFj4eKXqjzf4.roa (hash: uaDRTElD/eQeLBmpMs0iWQkiUkgTUHVvQqy46V1pRPI=)
                          3: VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa (hash: 1oHM+ulR5lgMRMtepZExqDQwuwKJ8Qpfg/fB1/zmAX8=)
                          4: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl (hash: aMj/f5+P4Lm6yQU6G7RvKn2IeibeEBjcfICwWyDIgT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:db:38:05:61:9f:5c:0c:3c:c7:a8:b3:ab:31:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
        Validity
            Not Before: Mar 26 00:02:11 2026 GMT
            Not After : Mar 27 00:02:11 2026 GMT
        Subject: CN=5f15a0427ba12df35c679b59b87dd0e7fab402f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:61:71:f8:40:f6:60:e4:85:ab:08:4d:fe:
                    03:de:42:de:b2:a5:99:d5:54:8e:f3:d3:31:d0:c6:
                    ac:d0:3d:1e:0d:58:f6:d0:64:b2:70:83:f7:4e:cf:
                    f4:22:d8:e9:e0:e1:66:59:42:79:d9:06:8a:77:5d:
                    51:7d:27:5d:68:3c:b3:cd:47:9b:82:31:d2:60:a8:
                    5d:d0:80:21:5b:c4:86:6f:19:c6:db:a3:1b:b0:67:
                    61:11:be:ba:4c:ea:37:14:75:d2:a1:21:f8:27:6c:
                    62:ca:06:98:1a:6d:26:d3:8f:de:44:7d:9a:d4:2a:
                    8d:ca:72:d2:30:71:e1:93:46:2e:e6:46:ec:f7:08:
                    5d:04:10:ab:8f:99:a7:48:b7:49:03:6d:bd:af:03:
                    aa:c1:38:be:17:6b:00:ce:c0:41:15:2d:f4:a0:33:
                    f8:e3:20:b9:ea:0b:63:02:78:f9:51:e6:b4:0e:ad:
                    28:56:af:0d:38:71:5f:1e:9e:05:b3:ab:d0:d1:2a:
                    38:cb:63:5d:e5:97:e4:66:34:76:91:8c:1c:11:c3:
                    8c:a9:fd:42:36:a9:74:38:cf:24:ed:22:54:96:d3:
                    89:45:61:b1:5b:1c:77:98:c2:1a:55:76:82:ed:c9:
                    9f:f0:22:16:b6:5f:64:23:90:f3:1a:0b:13:45:c2:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:15:A0:42:7B:A1:2D:F3:5C:67:9B:59:B8:7D:D0:E7:FA:B4:02:F2
            X509v3 Authority Key Identifier:
                keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:41:35:18:48:95:9a:31:5f:e6:06:55:f1:76:bb:fb:8a:
         1e:40:73:dc:1a:93:b4:d7:17:71:62:05:99:3a:20:b8:86:00:
         c5:07:ac:c7:3b:b8:15:fc:e2:93:ee:05:96:f6:b6:07:43:5f:
         8a:ce:c2:9c:8e:f6:12:5f:ed:68:98:52:d1:85:09:30:b2:7f:
         98:e5:ce:1c:51:49:08:cb:26:a4:12:8b:7d:8c:ab:5a:89:b9:
         2d:fc:0a:2f:d4:44:64:6c:ae:f8:f5:d6:f8:3a:89:f7:5c:64:
         18:f2:13:f2:17:d7:02:b6:e3:95:a0:23:26:53:15:05:d6:0e:
         26:37:8f:b8:ea:11:e3:21:59:61:c1:68:ce:91:d5:ab:3a:4c:
         aa:d9:00:16:06:06:89:16:8f:e6:d2:a6:35:fd:a2:07:f0:bb:
         f1:e9:5e:39:0e:7c:2a:23:79:75:72:b9:4d:e3:2f:3e:7c:82:
         13:39:cd:ce:c9:69:d4:2a:a4:80:2b:9f:8c:b2:a0:2e:1e:e8:
         89:91:c0:67:2d:70:19:de:26:92:00:08:71:16:46:12:96:d2:
         d7:a6:41:4a:c1:fa:07:2d:16:a2:2e:4b:da:4c:21:2f:70:dd:
         6c:d3:2d:77:36:43:4f:32:54:57:84:fd:be:35:3e:6e:0a:11:
         9a:8a:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:56 2026 by rpki-client