Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
File:                     ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft (raw, json)
Hash identifier:          tIV/lUOfQcLwpts+CGfbVCkADUAWTzyVDhP6horyAgc=
Subject key identifier:   FE:20:43:E7:75:65:CA:56:71:CD:2D:57:93:7A:83:C7:84:0F:75:F7
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Certificate issuer:       /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial:       019D2583C99F582BAA34B9F0542FE3A693D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 15:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:26 +0000
Files and hashes:         1: 9R3X_Fbswyp0dlU7e0jgLCwlRc4.roa (hash: 48MU1qRcOJqUGd4gBSOu3MVRdMSx3ak0Iy7V4C0HIPg=)
                          2: FMytXTkalgyla6hJFj4eKXqjzf4.roa (hash: uaDRTElD/eQeLBmpMs0iWQkiUkgTUHVvQqy46V1pRPI=)
                          3: VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa (hash: 1oHM+ulR5lgMRMtepZExqDQwuwKJ8Qpfg/fB1/zmAX8=)
                          4: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl (hash: OV8okcit7vgdctoyJdFrGwwjoSHRncZQfDrvaIjX260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:c9:9f:58:2b:aa:34:b9:f0:54:2f:e3:a6:93:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
        Validity
            Not Before: Mar 25 15:01:26 2026 GMT
            Not After : Mar 26 15:01:26 2026 GMT
        Subject: CN=fe2043e77565ca5671cd2d57937a83c7840f75f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:9a:b2:e2:23:02:0c:fc:c9:a4:ea:c8:bc:
                    88:d1:04:d5:fb:e0:3e:41:bb:c1:88:df:28:46:e4:
                    ec:14:79:2f:dd:06:2c:7f:a6:27:48:d2:93:ad:16:
                    2d:8c:ff:09:fa:aa:fc:61:48:30:e5:ab:52:49:14:
                    2f:b0:ef:6b:b8:2e:09:11:ad:0b:2e:0f:0f:a2:83:
                    42:64:3a:a5:f8:14:f4:dd:8f:b1:cf:d5:33:3d:b5:
                    0d:b0:f4:ee:38:c1:e3:97:54:08:fe:d7:41:b8:2e:
                    5d:66:00:30:a5:16:f0:8e:c5:17:aa:94:85:69:5f:
                    5d:6a:7a:75:29:f7:a3:15:df:2b:79:b2:54:d1:29:
                    84:8c:6b:63:ef:b8:06:0e:7e:21:4e:31:db:29:76:
                    8c:f1:07:30:2e:d5:94:96:32:96:3d:18:e3:c9:b4:
                    d1:7c:ff:6f:81:11:ec:cd:5e:44:2f:2c:8d:3f:d8:
                    78:9b:10:b8:13:aa:0b:24:cf:ac:06:3e:e2:f0:75:
                    71:0b:79:91:d1:66:44:b9:93:03:20:78:71:89:9e:
                    67:3f:78:8c:9e:28:ac:69:48:fe:89:93:c5:e6:e9:
                    b7:24:c1:8d:f8:d3:c1:0d:07:24:79:c4:9b:18:34:
                    8e:1e:82:3b:ca:44:5b:ed:99:75:82:9a:00:2d:55:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:43:E7:75:65:CA:56:71:CD:2D:57:93:7A:83:C7:84:0F:75:F7
            X509v3 Authority Key Identifier:
                keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:00:5b:d0:73:43:a1:19:c7:4a:2d:d9:67:4f:27:3c:7f:
         b4:ea:79:5d:54:5c:3e:3b:24:3e:a5:e6:f7:5f:09:b6:f6:38:
         28:ee:3f:65:7f:3b:5c:af:db:55:7f:59:fa:37:23:6a:52:32:
         9b:62:db:0b:c1:dd:c6:76:b0:c1:c9:55:a2:86:e5:8c:18:b3:
         2b:cc:e5:2f:a7:4d:20:b1:20:c1:ed:18:7c:fb:1e:db:bf:70:
         05:b1:c9:9a:23:da:83:e1:f7:da:a2:c1:13:56:58:de:e4:64:
         a1:c5:90:b5:5c:4d:e8:c2:9b:69:df:1f:ee:ad:e5:36:7d:e6:
         d9:8c:7f:20:fb:63:f9:80:45:3a:3b:2b:06:79:21:1b:24:3c:
         be:1b:83:cd:2c:96:57:96:a7:62:53:d0:a3:46:0a:e5:22:9c:
         95:01:0d:3d:ca:80:66:c0:a7:59:6c:c7:27:10:28:a5:85:c0:
         47:28:26:bd:20:29:cb:18:f4:c5:ea:ee:92:3a:bf:a1:86:cb:
         20:64:06:bd:04:b7:0e:8f:9b:db:40:de:95:ec:1a:b8:23:72:
         4f:5f:6f:1a:bc:f5:d7:37:17:40:f5:18:1f:b1:6a:90:ae:15:
         b7:3d:d6:3c:bc:18:f7:12:58:f2:1a:27:84:d0:41:10:b2:e3:
         4a:af:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client