Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File:                     l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier:          D7kDG9tAHzgNIXsDpxmkY9ooxS5lDpVoUFHkWQP4qHo=
Subject key identifier:   B3:70:EF:9C:E2:EB:CD:BB:13:FA:29:68:6C:AB:BF:D6:10:B4:C6:C0
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer:       /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial:       019D27A8F288C6C9DD696DEF029FA9EBE76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number:          083A
Signing time:             Thu 26 Mar 2026 01:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:16 +0000
Files and hashes:         1: YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa (hash: v2F9ZSNvDEOEkn09bpTuxmjtHiwOPIKq7B7AJM2GesM=)
                          2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: 0kny9l8648PwsNcoDbNPmtW25Vi7fvagoyebP8/7RTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:f2:88:c6:c9:dd:69:6d:ef:02:9f:a9:eb:e7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
        Validity
            Not Before: Mar 26 01:01:16 2026 GMT
            Not After : Mar 27 01:01:16 2026 GMT
        Subject: CN=b370ef9ce2ebcdbb13fa29686cabbfd610b4c6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:1b:79:d8:ad:38:95:52:a1:3a:c4:3d:91:
                    f8:4e:cb:f7:70:6d:49:05:5b:79:d3:9b:6d:75:5e:
                    97:d6:40:ac:32:48:9d:e6:94:28:5a:e9:a5:9d:8a:
                    0d:72:f8:27:5d:61:67:75:7c:ff:9b:11:a4:7a:ca:
                    90:1a:24:33:9c:3a:1a:b6:e6:39:6e:f8:fd:a5:ec:
                    be:a7:bf:10:63:5c:0f:b3:75:20:79:0c:64:87:8d:
                    c8:3c:22:e4:f6:15:a3:b5:0f:47:21:8d:b5:17:b8:
                    86:f3:30:97:67:ca:24:0d:f2:3c:50:cb:da:e1:05:
                    e0:32:ef:c7:f2:66:78:ae:d3:a0:b4:0f:7c:55:5e:
                    4a:4d:0f:15:da:b9:0f:4c:eb:e7:4e:2d:1e:12:66:
                    fb:64:15:3f:6f:42:96:f7:60:ba:1d:ed:14:0b:15:
                    e4:72:61:01:e9:f8:e2:b9:72:79:05:c2:5d:69:28:
                    a1:06:7c:94:ee:50:d6:ed:02:b3:a7:2c:7b:93:46:
                    2c:ec:10:69:6c:52:dd:95:0a:93:0d:f7:9f:10:77:
                    29:15:88:70:18:bc:b6:b3:ed:81:b0:55:64:5a:ee:
                    3a:17:6c:b8:66:77:58:39:92:66:9b:28:a8:2d:96:
                    6a:fc:5b:8b:f0:42:f2:8c:20:0b:96:0c:dc:70:a1:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:70:EF:9C:E2:EB:CD:BB:13:FA:29:68:6C:AB:BF:D6:10:B4:C6:C0
            X509v3 Authority Key Identifier:
                keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:48:9f:b2:e6:89:d4:a0:b7:da:d2:3d:9c:cd:02:84:1c:
         7c:36:29:6c:2e:8f:04:6d:a3:17:8f:8e:a5:d2:ec:0e:fb:2a:
         29:39:1e:47:bc:8a:ea:63:fe:6b:2f:81:5a:c2:14:be:ba:52:
         49:5e:e4:87:85:ad:fa:fe:de:c2:a5:42:de:26:88:06:ec:33:
         8a:ba:63:fb:ab:01:92:f3:0a:0b:8b:83:d1:33:61:a4:82:83:
         4d:6b:70:5b:ca:ee:5f:81:53:06:ed:48:7e:ba:78:2b:24:a6:
         c2:72:37:fa:0a:02:f5:b7:74:f6:41:f8:a8:8f:b3:51:d2:2a:
         d3:84:28:83:72:c3:89:42:9d:a7:6f:79:f8:28:dc:21:ad:70:
         21:8c:f1:8a:d7:d0:b9:88:4a:2a:f9:d4:9f:1c:38:32:27:cd:
         29:e7:cf:d3:e3:8f:42:6a:d9:3d:56:39:2a:b8:ef:73:c1:47:
         57:6d:d3:b0:34:bd:e3:8b:fd:6f:68:13:e1:92:96:c3:3a:28:
         39:cc:8e:ad:09:38:e0:6c:c5:ea:5a:fb:29:bb:68:6e:79:73:
         b7:09:3e:03:31:19:9d:ad:7a:ab:96:8b:c2:9f:5b:d3:f0:74:
         dc:fc:f2:7f:65:75:67:fd:ce:07:ae:21:31:ea:dc:e5:30:b1:
         d4:f9:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:22 2026 by rpki-client