Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          3A2DU+qU33VFmwD/e/L7SnZtPjN6TyBJMOanI3RkfWc=
Subject key identifier:   DD:9B:50:87:C7:20:B8:52:43:8D:BC:38:DA:F0:52:97:64:9E:28:09
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019D27E075B176A2146059D2DE9D4774A4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 02:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:54 +0000
Files and hashes:         1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=)
                          2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=)
                          3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: gTuajakBGktj2dgyU0/Tyk9WcjIDCU/v00M7lLGSjaI=)
                          5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:75:b1:76:a2:14:60:59:d2:de:9d:47:74:a4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Mar 26 02:01:54 2026 GMT
            Not After : Mar 27 02:01:54 2026 GMT
        Subject: CN=dd9b5087c720b852438dbc38daf05297649e2809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ab:3e:90:5f:a3:0c:6b:5e:a1:d2:4b:b1:7f:
                    e4:74:e4:af:c8:cf:4a:f5:d1:54:48:a9:56:f8:c1:
                    17:aa:ee:c0:3c:23:5c:f2:0c:d7:4a:4e:b2:6f:87:
                    51:3f:dd:58:5e:cb:39:1f:08:07:f8:30:62:d0:90:
                    f0:1b:b1:b9:12:99:af:70:f3:8f:a8:07:66:b1:5a:
                    02:4b:2e:25:51:72:ea:26:d5:ca:28:c1:43:3d:0b:
                    46:0e:30:c1:55:e1:2b:f3:32:d4:ae:ce:54:61:56:
                    cf:f4:e5:b3:41:0c:27:b7:a7:e5:1c:7f:bf:26:7c:
                    1a:62:a5:1b:12:ba:43:fb:87:5f:f7:08:d2:01:e7:
                    d0:7a:f2:c1:70:7d:6c:b0:cc:ce:74:8a:a7:59:56:
                    f1:02:60:83:dd:75:e8:d7:6d:34:b8:0d:c0:ea:b9:
                    a7:11:b2:ac:46:6a:83:d1:af:6d:ba:ee:17:d8:a5:
                    79:6b:56:8e:5a:3d:7d:9e:f6:ae:8c:f3:81:d4:e2:
                    64:8f:2d:6f:75:c9:34:e2:8c:d8:8d:98:1d:e7:73:
                    54:0d:53:72:d1:c6:2f:c3:82:b3:77:91:1f:55:62:
                    f8:46:82:16:10:f5:db:61:17:ac:ac:a2:c3:3e:db:
                    78:86:0f:e7:14:8b:66:e8:c3:8e:da:3a:36:fe:5e:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:50:87:C7:20:B8:52:43:8D:BC:38:DA:F0:52:97:64:9E:28:09
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:96:2a:31:f5:52:04:b9:13:54:e5:d9:b6:a7:f2:85:43:
         de:08:3e:03:cf:6d:1f:eb:31:af:73:25:78:27:82:24:f1:67:
         8a:30:9a:3c:ea:6c:14:01:a4:0f:1b:d5:8c:ca:56:8e:83:57:
         5b:8b:ac:36:1b:b8:bc:87:e2:29:f0:d3:7c:c9:fa:b6:39:2c:
         3d:a6:54:ce:b8:c5:bd:93:5d:9d:4a:ca:56:7b:be:d3:2c:1c:
         11:a0:bf:85:f5:d4:50:51:a3:1c:a6:67:2b:89:db:21:56:c2:
         f8:50:e1:eb:0f:e4:ce:64:b6:56:63:7c:d7:36:19:a4:bd:ec:
         99:93:de:2a:7b:1e:8e:75:0e:83:af:47:1e:2a:eb:4d:d3:46:
         b0:7d:7b:ad:ef:80:be:ed:eb:dc:8a:36:28:da:6b:ba:dc:cf:
         43:b1:57:75:a6:92:c2:8a:1a:a5:ec:28:36:9b:9f:5d:9a:f4:
         10:e9:35:85:10:00:95:6c:48:a3:1b:1a:42:1e:22:54:94:f8:
         d5:c3:af:7f:20:d1:19:81:48:61:52:db:10:4b:69:63:05:c2:
         63:ba:f6:8f:0c:c0:63:16:dc:03:f3:9a:69:43:1d:1d:60:b8:
         44:50:7e:d5:07:75:ee:84:ea:e5:70:1a:bb:f6:00:4b:ef:9e:
         ee:e4:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:16 2026 by rpki-client