Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          fuKEIm3hv0jrjsjt5xz4+hqnbNpjZFZosDaU74KFQ00=
Subject key identifier:   E8:75:41:C0:F3:74:1C:06:D0:89:87:00:62:38:76:1A:F1:69:B5:BF
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       019D29CE3A433BE57A323437E752EEF01BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          18D1
Signing time:             Thu 26 Mar 2026 11:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:14 +0000
Files and hashes:         1: QZ_9dSDQYledA3mZvzzU2XsR2W0.roa (hash: nZN1cE74YklriGKMRngm1fgmd4ilU9K/u2p2JG2cQ20=)
                          2: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
                          3: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: SLeKJgwfqEU7AFVPYuuT69TsPMH5FI7QRPhjKdtSkKU=)
                          4: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:3a:43:3b:e5:7a:32:34:37:e7:52:ee:f0:1b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: Mar 26 11:01:14 2026 GMT
            Not After : Mar 27 11:01:14 2026 GMT
        Subject: CN=e87541c0f3741c06d08987006238761af169b5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:d3:ae:7b:15:67:6f:c1:5c:82:be:7c:88:
                    aa:f9:55:f6:d6:09:b9:ef:cd:a0:9e:c6:47:bc:7e:
                    d5:27:4f:5e:39:64:84:6e:a5:e3:9f:5e:38:8c:69:
                    cf:50:51:8b:a2:6a:c4:83:2b:86:f6:6c:fb:77:3d:
                    4a:97:3a:6c:5c:87:d5:b2:40:76:40:9b:47:06:00:
                    a1:f9:b8:c7:4c:2d:cf:34:a2:71:a2:c1:51:49:2b:
                    52:f1:3c:99:26:85:c5:39:3d:3f:28:0d:6b:64:02:
                    da:ca:44:0c:94:e8:28:d9:1f:16:80:14:13:32:7d:
                    7b:86:b1:1e:dc:88:c8:53:2a:85:c3:ea:de:14:c3:
                    d9:61:81:eb:b7:11:44:7a:bd:12:e7:e1:4b:e4:86:
                    8d:78:bf:17:00:b4:c7:56:b3:d1:1d:d3:d8:93:26:
                    0e:8a:9e:e7:3a:7c:e6:46:f3:7c:bf:2b:4f:ec:e2:
                    85:d2:40:c4:cd:29:55:e5:c8:c7:7f:e4:20:01:63:
                    6b:ef:30:66:1a:f6:64:b0:37:3c:fb:15:4d:ea:d3:
                    db:a2:db:2f:1b:49:c7:4b:43:58:49:2b:10:e9:15:
                    74:6f:1e:05:d2:8f:74:7b:e2:56:ae:90:d6:34:a7:
                    b7:1c:b9:34:45:82:7a:ca:04:a6:74:04:a9:f2:86:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:41:C0:F3:74:1C:06:D0:89:87:00:62:38:76:1A:F1:69:B5:BF
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:3c:1b:ab:2d:ee:0b:0a:ea:38:06:ca:69:61:ff:ae:0c:
         4d:2d:54:8a:75:96:79:46:01:3e:0c:aa:a2:ec:fc:80:cb:fb:
         34:3a:38:6f:a4:b9:c3:7c:0b:90:e9:07:ac:c7:71:3b:25:ea:
         10:41:a8:71:9d:12:4a:2a:a1:48:8d:25:de:82:67:28:20:7a:
         bc:8f:1d:6e:f6:34:3f:8a:d5:64:0d:11:76:8a:7a:fc:cc:d5:
         be:83:f3:e5:98:bc:35:b8:ff:59:a6:34:f0:4d:74:0e:3a:ff:
         5b:3e:b8:43:64:77:23:de:30:e8:bc:3f:eb:bb:f7:1b:bb:8c:
         9b:01:6d:aa:2f:4c:83:f3:1c:22:31:09:dd:57:0c:5d:fa:74:
         a8:30:db:d6:2a:14:9e:20:42:df:5c:4c:d3:ee:6a:25:99:85:
         33:89:a1:a2:3a:aa:f7:3e:68:b0:e3:52:be:bc:79:c8:9b:6f:
         96:7d:14:a5:46:ab:f4:0a:d0:3e:b4:1a:a5:0a:86:11:5b:bd:
         22:aa:40:eb:df:61:88:89:c0:8d:17:13:49:15:35:9d:0a:9b:
         d2:82:85:1d:d8:38:ba:97:d4:34:29:b5:c2:db:36:b0:77:f4:
         df:24:2b:2d:86:ef:80:12:cb:65:7b:f0:e0:fc:9b:51:17:1b:
         7d:12:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:38 2026 by rpki-client