Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File:                     iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier:          mpxzFkAyFT/jbiENA7qlRfPJbTlCs6gMAPUKKwxh2t0=
Subject key identifier:   D1:CC:81:B1:75:20:AF:26:3E:D5:83:01:B1:50:ED:40:2F:4D:23:57
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer:       /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial:       019D26CD5B6501590154EF1B0E016AAB0FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number:          0787
Signing time:             Wed 25 Mar 2026 21:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:25 +0000
Files and hashes:         1: 7EYICmxx7jfWFKyNew2yJRdJD-4.roa (hash: C6pdWtI2MDU5VLgQf1VYuNUhvfomAtWCGF4df8IZdjc=)
                          2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: O+ReoydwRZQ6w/gpvcgXo0Qbqrv1TsIQSTujrDr00WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:5b:65:01:59:01:54:ef:1b:0e:01:6a:ab:0f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
        Validity
            Not Before: Mar 25 21:01:25 2026 GMT
            Not After : Mar 26 21:01:25 2026 GMT
        Subject: CN=d1cc81b17520af263ed58301b150ed402f4d2357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a7:53:ee:fe:e0:fc:51:8d:e4:30:b8:ff:25:
                    e6:aa:c7:18:28:cd:96:9f:19:0b:d6:fa:fa:ef:71:
                    b1:ef:c7:6e:4f:c2:0d:a1:bf:3d:46:e4:5d:28:0d:
                    2b:53:92:13:6e:27:30:c1:95:70:bd:6c:d2:24:c2:
                    28:00:47:24:08:9d:93:5e:68:30:0f:d1:b9:f4:0e:
                    9e:bf:50:86:52:72:7c:3b:e7:9c:b3:fd:7b:1b:e7:
                    a1:d5:56:8b:a1:d1:c1:e3:7c:61:20:1d:b9:43:2b:
                    9b:ec:28:b6:02:7b:1a:03:6b:72:89:9a:53:34:a8:
                    1a:f9:9f:88:c9:95:94:5b:35:38:7f:99:9e:82:e4:
                    1b:e2:51:52:60:f1:9d:9a:7f:4f:f5:ef:83:21:f9:
                    48:4f:95:17:4c:ac:3d:77:01:73:3b:46:a3:6d:fe:
                    ee:6e:42:13:47:7b:df:56:ca:44:bc:eb:35:37:ea:
                    68:57:5d:d5:95:e0:ea:3d:85:b9:b2:64:72:9e:4d:
                    bb:83:b3:b2:f2:65:3c:f6:c1:f9:bd:fc:bc:0e:73:
                    49:18:cb:f3:27:ff:6f:db:98:b8:51:57:7b:fa:2d:
                    dd:da:7a:73:e2:84:cf:9b:f4:47:55:83:77:80:a0:
                    82:c1:94:a5:20:81:40:27:0c:30:f7:4d:21:25:9c:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:81:B1:75:20:AF:26:3E:D5:83:01:B1:50:ED:40:2F:4D:23:57
            X509v3 Authority Key Identifier:
                keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:33:ba:34:69:87:3b:3f:4a:93:ff:60:50:7c:a0:48:e0:51:
         32:e4:db:63:1b:7f:ee:bf:12:6a:db:15:cd:2e:f8:67:f0:31:
         37:56:7b:51:45:80:41:81:e1:13:25:f2:cd:c7:16:d9:0d:48:
         71:a7:13:50:a2:0b:87:2e:26:a3:96:91:10:69:12:7a:b4:ed:
         46:e0:dc:66:0a:30:1f:8e:2a:12:38:67:b5:39:15:cb:ac:2d:
         29:be:b6:34:5f:48:9e:bf:fb:b3:9a:34:3d:e4:d6:d9:b2:42:
         8f:70:fb:a7:81:8a:e0:f5:9f:8b:c5:35:3b:65:2c:b6:ea:5b:
         fd:55:52:a4:46:50:7c:06:06:62:31:44:ee:58:34:fe:6e:e4:
         4a:3a:6b:00:64:f2:bc:c2:f3:1d:31:b5:54:f1:e6:0b:8b:71:
         ec:2c:89:d9:e4:0a:5d:70:3f:33:69:80:7f:e3:42:8c:51:55:
         8a:f5:e8:73:9a:65:28:d5:79:0a:66:2b:86:1f:51:6a:8e:ec:
         3c:7d:b4:43:71:aa:4e:16:93:99:57:96:66:2a:2e:79:8b:8d:
         fc:f3:90:c3:1b:3c:61:f1:30:9b:32:19:a3:f3:2f:8d:bd:1f:
         a9:3c:ef:03:e6:7e:1f:41:7d:81:7a:95:5e:aa:b5:f7:2a:44:
         1c:3a:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:20 2026 by rpki-client