Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          V+DwarUZRKIZAuaGtLVAVI5WuSOBZPcBTm5W5LtdvPw=
Subject key identifier:   32:B8:08:83:20:8B:3F:CE:59:81:A2:9E:E3:18:54:94:8F:E8:94:67
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       019D2816826F2DB4961EBEA777B5BF060EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          179C
Signing time:             Thu 26 Mar 2026 03:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:56 +0000
Files and hashes:         1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
                          2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
                          3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
                          4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: GoRLAETfFXIV4CSdA1i4B5lEuW6rUFlYAGGDOVDfAMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:82:6f:2d:b4:96:1e:be:a7:77:b5:bf:06:0e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Mar 26 03:00:56 2026 GMT
            Not After : Mar 27 03:00:56 2026 GMT
        Subject: CN=32b80883208b3fce5981a29ee31854948fe89467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:24:b9:c1:23:9d:86:ae:18:fd:06:9d:32:
                    18:30:31:f0:10:6f:f9:ae:d6:b0:8f:a4:0f:24:28:
                    4f:fe:37:f8:86:a1:df:bd:fc:ac:c2:a4:06:41:2b:
                    d3:f7:11:b2:2d:6d:38:71:0a:68:16:6e:fe:68:61:
                    76:26:94:d7:41:6f:9e:76:79:5f:6f:69:bb:4c:29:
                    02:21:58:d9:3a:44:60:62:6e:14:3c:6e:de:6e:b9:
                    27:eb:90:1a:f9:47:83:87:b7:52:46:b9:fc:d0:ee:
                    48:fa:c1:cc:3f:0f:11:83:5c:99:f7:af:13:53:42:
                    ed:fc:fd:0c:22:7e:a7:70:21:96:70:e7:a3:94:8f:
                    54:e3:ec:5b:c9:ff:27:e5:2a:af:85:cb:9f:6e:64:
                    73:41:84:c7:d2:ae:31:cb:01:fb:7c:5b:99:ed:36:
                    0e:07:d1:f9:af:31:9d:ad:e8:cd:ba:9f:16:a3:2b:
                    ba:b8:ec:0f:16:ff:af:3f:d6:f6:6c:c3:6f:4b:ad:
                    65:df:9b:6b:fe:2c:28:10:95:f7:d3:58:27:d4:b6:
                    39:e0:0f:45:24:6c:39:2a:29:d1:f8:42:c7:34:ef:
                    d3:a9:75:44:49:b0:91:92:38:d7:c8:d5:b2:d8:43:
                    43:3f:bf:ba:f3:39:85:ea:1a:44:27:06:48:51:0d:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B8:08:83:20:8B:3F:CE:59:81:A2:9E:E3:18:54:94:8F:E8:94:67
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:11:b0:61:38:c6:69:eb:6a:71:30:10:3e:b1:d8:03:6e:
         f4:0d:cc:40:47:21:c6:ed:32:d0:c9:27:5d:b8:4d:bc:f6:db:
         9a:93:dc:b3:a3:9b:8a:89:ae:7e:f9:de:80:c1:3c:0e:56:13:
         63:58:16:b7:b1:cf:8a:17:08:64:11:31:d7:5e:30:ee:1b:51:
         e5:38:54:c6:1b:fb:39:e0:10:0d:53:a5:1b:26:ae:91:8e:92:
         02:cb:fd:08:9f:99:4d:96:68:94:f3:58:ed:1c:3b:a4:19:3e:
         39:84:b2:c2:65:e6:01:84:12:6c:25:99:2b:a6:63:78:90:fd:
         ea:70:e7:5c:21:82:33:ce:96:f4:bd:49:e7:f7:03:25:83:e2:
         81:ba:22:90:f7:1e:e0:ff:3b:43:dd:88:4b:04:7d:59:56:59:
         09:3f:75:aa:19:79:a1:1a:92:57:0d:8d:06:19:99:77:3b:10:
         2b:ed:29:d9:c4:fa:3e:e1:e0:62:c1:80:2b:14:ba:de:97:9e:
         36:07:41:31:65:c5:a4:35:80:f2:8a:5c:ab:9a:fb:39:f2:63:
         a0:cb:62:05:cd:37:ed:be:db:b0:9d:be:3a:ff:71:bf:f3:eb:
         e2:aa:1f:fd:89:ec:f8:59:41:8b:19:2b:02:98:be:68:c0:3c:
         10:6f:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:47 2026 by rpki-client