Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File:                     564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier:          uOMfE/3JBcuRGnAaJbiA5rE0JzA0vbW2uaWFTIbFW/c=
Subject key identifier:   2F:76:90:84:62:24:6D:E5:70:06:7E:4C:63:97:DD:70:1B:AB:47:91
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer:       /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial:       019D28844085143F283FEA4126BC14915A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 05:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:48 +0000
Files and hashes:         1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: 1JYw7mhLYWyR0h4k0kjqphUKY92i/oZiK56iFMI8/xE=)
                          2: MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa (hash: 3l8Y3glur9khayrgDEUAxZoVQurQKRMAgC985VKxnJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:40:85:14:3f:28:3f:ea:41:26:bc:14:91:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
        Validity
            Not Before: Mar 26 05:00:48 2026 GMT
            Not After : Mar 27 05:00:48 2026 GMT
        Subject: CN=2f76908462246de570067e4c6397dd701bab4791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:0c:9c:a9:f1:d9:a4:52:40:56:e3:28:a4:
                    bf:50:fa:50:8a:92:44:e2:42:b0:bc:a1:e2:56:d6:
                    6f:bf:13:31:f7:3e:a9:8d:7d:70:95:ca:90:42:ed:
                    11:4a:55:a2:be:ea:10:d3:ef:90:c5:4e:b9:f9:ec:
                    af:8c:aa:59:5f:0c:28:d6:b2:be:87:c0:a0:1e:d4:
                    b0:78:ef:41:a6:a9:a1:28:05:b5:b6:25:d2:a7:f1:
                    20:d0:3d:61:ea:66:d0:b3:19:63:5f:72:d1:1f:6a:
                    97:d7:96:47:3e:ea:c9:06:cb:23:ee:4a:5d:37:e4:
                    73:16:61:52:37:b5:36:1e:9e:be:86:a6:fb:ff:ba:
                    6a:36:0d:7e:d7:87:35:87:33:b4:0b:97:8a:f5:b0:
                    0b:dc:c0:fb:75:b4:50:4a:8c:4e:81:68:2a:cf:e4:
                    d0:c7:d9:ca:23:2a:4c:16:34:ad:2b:7f:6a:60:3b:
                    f8:b1:bf:37:0c:0f:81:8e:95:79:72:74:d0:00:1c:
                    b3:93:94:3d:bb:fe:d3:63:33:59:19:4a:79:24:2a:
                    6b:3e:4c:f3:ce:ed:9e:17:f7:4c:ff:4f:79:d8:4e:
                    09:ea:16:4e:cf:56:2b:77:49:a2:82:da:99:69:97:
                    1f:f9:ce:25:2f:05:cf:1e:19:83:78:71:b1:6e:28:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:76:90:84:62:24:6D:E5:70:06:7E:4C:63:97:DD:70:1B:AB:47:91
            X509v3 Authority Key Identifier:
                keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:95:30:ee:51:a4:cb:4d:79:d7:c0:3b:85:75:8e:c4:20:c5:
         06:3a:d3:cd:a0:24:f1:cf:95:7a:97:b2:40:09:b5:a8:92:30:
         94:bc:49:fc:ff:d8:bf:3a:d2:c5:6a:f0:a3:b1:30:a9:94:bc:
         c0:e1:bb:eb:d0:3a:83:43:de:11:7d:4f:c8:a0:d2:b1:52:15:
         10:cd:e8:b7:02:52:1c:5e:4a:03:d5:bd:84:70:31:66:c8:d7:
         db:90:72:12:ed:7d:0a:74:d2:de:77:23:c1:50:8c:9f:9e:7b:
         33:c7:f3:70:17:ce:61:b5:88:68:7f:5c:67:2d:1b:c8:04:0c:
         2c:2e:da:99:85:a4:11:b0:44:50:4f:2b:9f:43:35:2a:c3:9e:
         53:78:36:62:4b:52:ac:40:e2:5b:84:a6:81:b8:8b:21:25:26:
         c0:cf:97:89:0d:00:58:14:3f:4e:7f:2e:8c:2a:5b:f6:1a:4c:
         be:8c:95:11:34:e5:99:34:06:9a:b3:73:be:0a:59:6d:71:76:
         0e:2c:fb:30:70:db:b6:9d:1a:a3:a9:02:43:c2:c4:de:92:bf:
         cd:15:a0:f1:2a:6a:51:b2:c5:04:3e:e2:d5:c5:49:6b:96:20:
         ca:7e:1b:22:2a:de:22:d9:8e:df:71:7a:bd:94:43:78:56:ec:
         69:a8:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:59 2026 by rpki-client