Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File:                     is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier:          wpNRmogUvd8e1RfTc+Y9co+U3dz8ztc119J4Oy9pbf0=
Subject key identifier:   72:B7:DF:6C:99:B2:61:07:F7:3E:16:E3:3C:D3:F1:2F:B7:2F:7E:FD
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer:       /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial:       019D2929428576DB57638D01CCA3E9605D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number:          0929
Signing time:             Thu 26 Mar 2026 08:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:02 +0000
Files and hashes:         1: V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa (hash: XQIlYXeV6ifizyIfOjtUETRq073y4wC5uk9DBtAE+iM=)
                          2: dnN8Qbgzlqa5jVekVWfdeYwMnr0.roa (hash: 2SBvdtsFiLZ+3pTsa8tg6rA3awhSjVKAsmyNnLuEU6w=)
                          3: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: AYCQ8BLhT8++8MbzOkq3vFd7sQHitEciTA9vqG1og/c=)
                          4: qEOd0JSRITKmwn_MrAq43anHLe8.roa (hash: Mq7M3zfHqSv4p6zFUAXdeS8k6DJ4Psbdqulheqnt9F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:42:85:76:db:57:63:8d:01:cc:a3:e9:60:5d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
        Validity
            Not Before: Mar 26 08:01:02 2026 GMT
            Not After : Mar 27 08:01:02 2026 GMT
        Subject: CN=72b7df6c99b26107f73e16e33cd3f12fb72f7efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:17:a0:82:bb:d7:a6:c4:7d:2a:11:9a:a8:
                    cf:4d:25:e4:59:1a:87:73:14:ff:a9:8c:b8:5d:17:
                    36:8e:1a:7c:7f:ed:ac:8d:d7:31:73:73:7e:e9:67:
                    27:0f:d2:9b:8c:d7:ed:8d:1b:1d:92:29:4d:37:e8:
                    86:36:0e:db:56:67:2b:bb:ff:56:2c:63:df:c5:be:
                    e8:32:97:59:8b:55:67:d1:87:52:75:e1:2c:98:0d:
                    c5:bd:d5:75:c0:d6:c4:b8:ae:85:34:fe:5f:a9:6f:
                    cb:f4:c8:bc:61:3d:df:44:ab:4f:fe:b9:de:dc:44:
                    91:db:c3:1e:a4:a1:40:b6:e7:75:4b:97:52:1d:27:
                    9a:f7:c7:5c:24:96:26:86:8d:79:4d:39:6b:b6:16:
                    cf:f7:af:b7:d4:1b:28:55:8b:7d:c5:03:0e:be:3f:
                    b3:a7:3d:a5:f2:91:ff:35:c7:5e:f1:d6:a9:68:6d:
                    b9:d3:24:b8:49:01:af:27:22:af:76:57:11:e4:ca:
                    94:7b:f3:16:ee:48:72:9d:3d:2e:fd:8f:eb:9d:54:
                    ea:2a:fb:c8:49:12:3f:7e:26:90:ca:13:a2:ec:f2:
                    60:22:54:e5:a9:41:5a:07:7b:db:6a:f8:d0:4d:e3:
                    4b:c7:a3:04:e3:97:6b:0c:12:23:27:22:49:5f:2c:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:DF:6C:99:B2:61:07:F7:3E:16:E3:3C:D3:F1:2F:B7:2F:7E:FD
            X509v3 Authority Key Identifier:
                keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:83:d7:91:32:ee:5c:a4:16:e8:53:c9:3e:49:76:c3:aa:
         81:7c:7f:46:23:1b:5a:da:6a:e5:9a:77:76:26:4d:d1:b4:27:
         d4:28:7e:48:c0:18:dc:23:6d:d1:87:d0:c7:92:81:0e:c2:90:
         a8:7e:72:27:49:36:cd:f3:1f:e2:df:7b:44:61:7e:fd:c1:5c:
         4a:10:bc:9e:79:11:41:5e:eb:36:ab:c1:b9:be:ee:74:8b:8f:
         6c:3e:a1:a2:bc:92:45:2b:87:bd:79:51:46:21:c7:63:9a:36:
         b1:e5:3d:fa:7f:cb:72:31:27:b4:f1:61:11:80:b4:cb:c3:80:
         75:12:a2:70:46:64:25:1a:2f:5d:75:82:a9:b7:12:99:0d:83:
         46:d0:48:22:61:d1:8b:2d:c3:82:31:77:b6:57:63:e4:41:1e:
         a2:8c:af:f0:08:8e:38:9c:16:5a:f1:17:cd:fd:b0:db:ef:b3:
         0b:f0:44:cd:34:ce:52:0b:d4:47:79:1d:38:41:93:a3:f6:0c:
         68:c0:69:cb:63:2e:0b:cf:be:ed:39:2e:41:99:f3:e5:b1:c2:
         51:1a:1a:5b:e9:f6:fb:d3:08:64:57:45:cd:ad:8f:98:1e:ec:
         b2:56:9d:74:f6:ab:ec:8a:12:78:df:71:a9:3a:27:56:8b:20:
         ed:ce:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:31 2026 by rpki-client