Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File:                     of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier:          ImHwn1g9YUzW1odBca30K8v4QzwsbBS7G/seqmEP9po=
Subject key identifier:   1C:87:56:07:6D:50:6B:E5:C6:E8:AA:FF:4D:D9:7E:86:23:E2:4E:2E
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer:       /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial:       019D284E1BEC7DDEEF891719797C7C4D2C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 04:01:40 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:40 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:40 +0000
Files and hashes:         1: 3X66D8rd_nYfhEI9M4q9SKmLMaM.roa (hash: hH7Y3DCETnMnnmJRKV+CQ8Ci7Hnqb3mZqszadLViFz4=)
                          2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: 7e1KhkXrvAKuled0G+gL+kGK66AxJRxbIIsGG1BBmVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:1b:ec:7d:de:ef:89:17:19:79:7c:7c:4d:2c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
        Validity
            Not Before: Mar 26 04:01:40 2026 GMT
            Not After : Mar 27 04:01:40 2026 GMT
        Subject: CN=1c8756076d506be5c6e8aaff4dd97e8623e24e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:60:29:a6:3b:a3:c4:2c:65:ff:0b:8b:db:37:
                    b3:7f:51:18:5e:47:01:05:8c:e1:78:3c:9a:b4:1c:
                    78:f3:79:73:82:ba:fa:4c:e4:89:47:b2:2e:24:22:
                    00:51:ea:01:e1:94:7a:98:da:c3:18:c7:35:47:18:
                    58:7d:b0:e4:2b:86:ae:c6:75:c5:6b:ec:12:96:52:
                    8d:9e:ed:49:23:e4:91:12:0b:1e:f9:6c:72:c9:88:
                    a1:47:ba:8a:a6:d8:07:1c:cb:22:21:4a:d9:76:d6:
                    ce:8b:7e:ee:09:d2:ff:fb:ec:a0:e2:48:db:37:1b:
                    42:d0:22:38:19:ef:97:2b:ce:85:88:cf:28:0c:ff:
                    e8:78:6b:36:2f:01:39:12:27:79:2f:55:aa:c2:f1:
                    48:6d:22:b2:48:2c:5d:df:53:b8:d8:08:f6:fd:cf:
                    e4:49:9c:7d:59:29:a5:bf:72:53:1f:22:29:9e:38:
                    25:29:45:2e:d7:a5:f4:41:a7:55:b3:ae:9d:2b:fc:
                    71:20:8f:e8:2a:d6:4a:a5:87:85:f1:ce:37:6e:33:
                    2e:cc:cb:23:52:01:a6:f0:03:0c:57:79:f8:fd:c2:
                    fa:df:0a:b9:af:e9:e3:eb:7f:e9:71:71:67:c9:e7:
                    74:cc:ec:2f:62:ef:5e:9e:33:d0:56:65:38:b0:dd:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:56:07:6D:50:6B:E5:C6:E8:AA:FF:4D:D9:7E:86:23:E2:4E:2E
            X509v3 Authority Key Identifier:
                keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:df:1c:9d:d4:42:5e:ed:7e:d9:95:f7:f7:d8:c8:2c:fd:
         b0:23:9a:19:52:7a:9f:dd:80:66:0f:6d:bf:f2:27:ed:0c:40:
         4b:82:52:88:36:6f:7f:81:27:4b:c1:26:e9:58:80:e0:63:c1:
         af:c4:1c:ac:38:0f:23:9c:a2:bd:21:2b:6f:47:86:30:8e:61:
         66:53:30:28:1a:a8:3f:37:01:f1:41:d7:03:7d:8f:95:d3:c0:
         3e:e9:d1:22:4a:19:70:2b:9d:0d:b6:83:b6:49:e6:b7:ef:e7:
         0d:1d:05:55:28:74:14:a6:b1:70:92:35:fa:56:d4:20:01:0f:
         5f:ed:8e:02:fa:7e:7e:8f:57:eb:5b:fa:09:24:ae:06:bc:9f:
         f5:c4:dc:ff:69:e1:d5:15:07:c4:15:66:66:e5:80:d3:9e:29:
         cb:98:59:34:52:ad:35:73:83:67:3f:d2:8b:7b:99:03:0e:20:
         b8:f6:fa:2b:4d:03:b2:fb:3e:c3:e7:44:e7:3b:96:ea:b0:cc:
         ac:3a:0d:ec:2d:a8:8e:26:bb:25:1c:3b:0f:84:f3:26:cb:f7:
         7c:0b:b2:83:ae:65:5f:21:35:d7:47:b5:a4:a8:ed:c6:55:46:
         fc:7b:4b:cb:14:ce:22:31:ed:e7:18:51:98:49:b2:8b:8f:b7:
         d0:4d:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:28 2026 by rpki-client