Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          q6KN2i+e1LHizOLm0Pp8ngjxqe9J2+GHeeP3uMRyOZc=
Subject key identifier:   A7:AB:B6:DA:DB:4B:F5:BC:EA:19:2E:FC:9D:2D:8D:0D:86:58:34:E9
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       019D2C979761B02DD4442D53AF0865D39607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          1888
Signing time:             Fri 27 Mar 2026 00:00:25 +0000
Manifest this update:     Fri 27 Mar 2026 00:00:25 +0000
Manifest next update:     Sat 28 Mar 2026 00:00:25 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: 8HigxKN05BgWtXak2xKQNJwSJaq5F+rFo7c4/P76FrI=)
                          2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:97:97:61:b0:2d:d4:44:2d:53:af:08:65:d3:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Mar 27 00:00:25 2026 GMT
            Not After : Mar 28 00:00:25 2026 GMT
        Subject: CN=a7abb6dadb4bf5bcea192efc9d2d8d0d865834e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:97:27:9f:61:1e:42:52:58:90:7a:52:63:d0:
                    b9:85:24:53:f9:59:d0:5b:56:83:31:6b:d1:7b:21:
                    fa:26:97:bc:01:b8:4f:92:a4:64:40:b8:2d:e3:c4:
                    bd:1e:62:05:c1:87:6e:fe:5a:53:be:c3:a3:cd:d9:
                    6f:39:46:59:a9:a9:a6:e3:78:2e:f3:53:e3:07:83:
                    0f:b3:47:41:78:fa:63:d2:0a:2e:40:d7:37:98:53:
                    90:16:7f:28:8b:f4:11:86:48:86:af:c2:f9:78:c5:
                    f5:b2:19:51:36:c5:63:ea:84:bb:e6:ad:3f:c8:d5:
                    26:bb:68:d8:1f:f5:24:f2:e7:47:5b:3c:91:89:3b:
                    af:1f:e1:55:e9:0a:db:e4:8b:cb:fd:8b:a2:75:a5:
                    37:1a:49:5b:54:53:e4:2c:43:49:8d:5d:57:fe:fb:
                    da:79:25:64:6e:dc:19:3f:bd:c4:ea:38:74:11:ba:
                    3b:a0:92:f7:4a:8b:4d:ea:11:da:65:98:32:3a:5b:
                    43:0c:1a:e2:ed:49:5e:d7:64:d1:d3:6a:01:6a:c2:
                    ae:5c:bc:16:51:c6:2a:9f:60:51:69:cc:56:ba:d0:
                    cd:30:46:e5:92:fe:09:d2:74:90:16:22:be:99:3e:
                    72:c3:ec:03:20:bb:d6:82:e6:50:82:91:04:ec:5d:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:B6:DA:DB:4B:F5:BC:EA:19:2E:FC:9D:2D:8D:0D:86:58:34:E9
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0d:3e:1b:83:da:55:ad:1d:45:67:10:d2:4b:7d:67:df:f0:
         d8:3e:d0:da:0c:31:a5:81:84:c7:77:3f:7e:30:2e:5b:f2:8a:
         c3:7e:dd:69:7d:bf:df:46:dc:b1:17:da:31:ff:3f:7b:ff:11:
         40:ae:0d:62:62:03:5f:6b:3b:93:d8:3d:a0:e2:69:cb:c4:eb:
         b6:fd:7c:72:d6:e2:89:64:4e:0d:43:e4:e4:9f:de:ab:6e:62:
         4b:69:a5:9a:69:61:c7:2c:98:10:5e:c2:43:cb:0a:96:4f:57:
         8f:38:bc:cc:1d:b0:97:d1:59:8d:5d:78:2a:ba:41:24:a7:e5:
         0b:da:0a:89:ff:ff:9f:80:8c:bb:2d:4a:30:d3:4b:21:1c:65:
         8a:82:1e:9a:5a:eb:2b:75:02:5f:cf:22:92:21:44:8b:fa:25:
         ac:c6:70:bc:7e:81:3d:fb:7a:a7:53:aa:45:55:24:e8:1c:51:
         ca:9d:6c:6e:c6:60:30:cf:ab:87:1e:1c:aa:96:a1:78:78:89:
         00:88:42:ee:d1:56:f3:e2:45:d0:ff:9f:cc:53:86:9e:bc:72:
         45:09:33:19:a9:d9:e5:43:a7:94:56:08:7f:dc:fe:ea:8b:65:
         56:bf:25:2d:69:45:f6:74:6d:30:ad:90:28:86:0a:da:d8:cd:
         96:11:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:15 2026 by rpki-client