Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File:                     c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier:          Xo35UmGm9R7V7VRkqNYU4mMyY1b/3Rf5QSWSLoA9cjk=
Subject key identifier:   BF:0B:0A:63:DD:46:06:07:ED:A8:42:AB:52:19:72:8B:FF:DD:63:55
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer:       /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial:       019D2816BF759403302C93A7819362604EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number:          0D2C
Signing time:             Thu 26 Mar 2026 03:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:12 +0000
Files and hashes:         1: JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa (hash: Vl0xLqESsMyxlanXnevOLg/LtIR0/LLBMgnk3RuFu6Q=)
                          2: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: w1K7VUfQSDWAcdKV2Q9sOhKLlGT6td/l85bDvqzpq+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:bf:75:94:03:30:2c:93:a7:81:93:62:60:4e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
        Validity
            Not Before: Mar 26 03:01:12 2026 GMT
            Not After : Mar 27 03:01:12 2026 GMT
        Subject: CN=bf0b0a63dd460607eda842ab5219728bffdd6355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:a5:49:03:ce:2f:85:9b:5c:d0:06:23:6d:
                    3c:6f:e0:a9:65:34:8f:23:bc:96:b2:35:40:6c:38:
                    9e:31:b9:28:51:a7:34:a9:22:7a:57:37:cc:c6:04:
                    77:fc:66:f9:f6:75:a4:7e:c9:64:27:bb:8f:4a:31:
                    46:c5:02:48:b9:99:69:7d:85:ed:43:15:48:b9:cf:
                    33:bd:f7:c1:b5:57:90:36:ef:a0:01:5f:37:7b:85:
                    2e:19:05:da:61:b4:b2:43:10:6b:bf:cc:01:62:5a:
                    f3:78:ae:cd:25:23:b8:ef:c1:16:b9:27:9c:a4:5f:
                    43:1c:7d:e8:fe:ce:cf:f8:e9:6e:bb:18:47:0b:7a:
                    d7:d4:14:13:ae:4c:0a:4a:c2:d2:61:ae:fa:3d:50:
                    35:f3:c3:ec:23:77:fc:4d:68:16:e4:42:22:26:95:
                    55:c9:c7:2a:a7:03:81:6c:fe:90:93:5f:7f:d3:1c:
                    ba:4a:f8:1b:62:1d:1c:60:2a:6c:c7:f6:57:11:4e:
                    e3:ce:9a:54:bf:f7:12:5b:41:78:0f:5d:b7:3d:9e:
                    6b:7b:fa:b1:dd:81:0f:69:e3:74:6e:21:76:fb:bc:
                    5b:e6:3b:df:58:ed:7b:d3:af:b6:ae:b6:be:3f:81:
                    c8:86:35:5e:83:0b:73:82:4b:a4:a9:cc:76:c2:c5:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0B:0A:63:DD:46:06:07:ED:A8:42:AB:52:19:72:8B:FF:DD:63:55
            X509v3 Authority Key Identifier:
                keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:61:1a:22:dc:48:ba:73:d6:76:a0:1b:23:d7:7a:85:53:78:
         04:20:fd:cf:5d:b0:4f:45:66:2a:dd:af:d1:f5:74:85:bb:ed:
         3f:65:be:67:9a:6a:aa:04:8f:6e:23:bb:8c:96:75:53:db:86:
         0f:33:69:7c:27:f1:f6:e8:ec:b5:09:0e:21:be:4a:19:1a:bd:
         e4:52:69:0c:b8:55:06:4c:ec:88:0b:62:7b:10:01:4a:45:3a:
         f0:91:a7:33:60:41:e7:01:84:c5:93:66:29:58:33:f9:de:e0:
         25:28:3c:bc:b3:b4:8d:d5:2e:20:de:f4:5d:bf:6f:23:c6:18:
         b9:89:ec:e8:75:09:4e:cd:7b:52:99:31:7d:fb:d7:df:87:c1:
         a0:1d:52:1b:8d:e5:fd:f4:c5:83:6d:78:b1:47:66:39:c9:13:
         cc:d8:a6:61:53:b3:9d:3d:f8:f3:ea:a6:72:4a:00:75:a7:2a:
         d9:93:52:6d:0b:09:c1:2a:f7:8c:bc:b8:2e:e9:40:8c:f2:b9:
         f0:fa:39:0d:b0:0e:ea:b6:8c:da:6b:f5:8a:8b:22:97:f6:3f:
         d7:28:52:38:1a:6d:87:6a:88:73:9e:07:a8:3c:41:40:63:17:
         e7:b2:af:fc:9a:9c:9d:89:9f:d8:0d:3c:23:7a:97:29:1d:2a:
         96:89:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:23 2026 by rpki-client