Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
File:                     SPWbrFHUhS0vyW6LTPu5__i0qTk.mft (raw, json)
Hash identifier:          d/abmIxZlCJ1jStExT8xedJuqzwdRWtFiNg8tKqnf+E=
Subject key identifier:   A1:F7:FD:AF:2D:13:27:90:0E:5C:A0:07:B3:1F:83:F2:4E:E4:7D:7E
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Certificate issuer:       /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial:       019D2772D77963568FD38DE5470F2F44D51E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
Manifest number:          162E
Signing time:             Thu 26 Mar 2026 00:02:10 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:10 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:10 +0000
Files and hashes:         1: FHtQNrQOfizQjvpxizt5OLW0SC4.roa (hash: oak0eNWy1cfTGmlGpcII2x2ElgyncsNilePzPotJ0B4=)
                          2: SPWbrFHUhS0vyW6LTPu5__i0qTk.crl (hash: gdQCGifFeJfCbWlR2U6PlgQxTzDA2YwSY3A0v0QfFwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:d7:79:63:56:8f:d3:8d:e5:47:0f:2f:44:d5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
        Validity
            Not Before: Mar 26 00:02:10 2026 GMT
            Not After : Mar 27 00:02:10 2026 GMT
        Subject: CN=a1f7fdaf2d1327900e5ca007b31f83f24ee47d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:c7:66:b0:1e:05:f0:bd:3e:0b:d4:ad:64:
                    b6:d7:32:f3:c7:5d:06:fa:69:e2:e6:ff:ac:a5:66:
                    ca:a8:ad:33:5b:cc:93:99:4c:51:a2:df:0a:2b:e5:
                    ca:a2:47:2d:16:76:35:86:eb:11:af:b4:a6:1b:8c:
                    cd:a8:94:ad:d4:72:94:33:91:d6:01:28:51:ec:52:
                    3d:d1:dc:4a:8c:eb:59:b5:02:59:57:39:15:3c:0f:
                    7e:f5:89:6c:75:69:f8:d1:35:29:bc:24:65:f0:95:
                    86:bd:e4:0a:c7:d0:c0:3a:75:b9:73:3a:ed:29:be:
                    89:ea:dc:15:50:71:59:e3:2e:c5:4f:11:cf:8a:94:
                    22:87:4c:b4:58:3b:b1:42:73:bc:13:c3:d5:af:a7:
                    6e:da:7b:32:a2:c8:06:c9:fd:92:d0:15:88:7b:8b:
                    26:58:f7:cd:fd:95:03:c6:a0:75:aa:30:72:af:95:
                    26:22:aa:2b:d4:a8:27:75:9f:9c:bb:c2:cc:24:b7:
                    fc:5f:44:bc:5a:d9:ce:8c:a0:b5:df:88:5b:74:3a:
                    77:78:98:44:4d:80:65:3e:2f:1f:1f:4f:89:2a:47:
                    a5:ae:0f:02:ea:53:08:5d:24:5c:c0:fb:07:f6:df:
                    d1:25:86:97:c9:36:26:cf:b3:5f:cf:90:dd:94:94:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F7:FD:AF:2D:13:27:90:0E:5C:A0:07:B3:1F:83:F2:4E:E4:7D:7E
            X509v3 Authority Key Identifier:
                keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:43:4d:05:2e:28:3c:ce:a8:01:9a:90:dd:e8:cf:6e:b0:
         02:ad:cf:dc:6e:2b:29:c2:5c:9f:91:09:55:34:27:d6:d2:28:
         02:3f:37:63:b1:0b:d1:04:a5:bb:a7:ee:b5:bb:59:51:92:96:
         16:0c:26:4e:cb:7f:05:23:a3:0e:e0:09:72:70:38:7b:94:84:
         ce:a7:af:54:0b:8d:c0:ee:4b:7f:e8:37:86:c3:95:4e:fa:b7:
         be:62:4e:9d:4a:ab:78:6b:80:7f:23:6a:8b:aa:f0:f6:92:26:
         d5:29:df:ad:9d:f5:d3:b2:65:2e:39:ce:4b:b6:8a:d2:81:02:
         69:b4:65:bf:11:02:63:09:c2:c1:70:38:6c:4d:b6:cf:e3:03:
         be:a5:59:c6:25:c7:83:01:c4:7e:85:a5:a1:0e:77:96:e7:81:
         ed:b5:e0:96:c9:fc:68:9e:f2:71:ce:d2:ae:35:70:1a:41:07:
         ec:cc:b3:14:a8:27:96:05:74:9d:88:6c:c3:65:b3:6d:0a:22:
         4e:a7:cc:7a:cd:37:9b:3d:97:9f:66:7d:5e:0f:87:42:c5:ff:
         74:a2:4b:ad:8e:7c:0a:ba:65:39:cf:7b:79:0b:9a:06:97:e7:
         de:42:08:42:9e:88:32:34:98:31:60:87:57:e6:a2:42:f5:09:
         00:d5:97:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:15 2026 by rpki-client