Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          9Il/awYd+rfSRFNzdBE+sp47s/KdYQ7ARxYT1zyFfHs=
Subject key identifier:   7B:C8:44:C1:AD:AA:74:62:80:11:6B:B8:AE:7E:62:A0:9E:60:69:3F
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       019D27DF71FDCA3C19EB731C27EFDAA1D4BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          18C1
Signing time:             Thu 26 Mar 2026 02:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:47 +0000
Files and hashes:         1: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
                          2: K6dmrbU49_IjvCVVpoSCda0DtfY.roa (hash: UEb7+sC3OMpTg7SsyM1skPMy+THsMiYjl1kHjQRs2y8=)
                          3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
                          4: WGAML1YjI5zAxq5PEqT3x_V8_tY.roa (hash: 8+17DXSjFxcEUdFqGfGDD9sHzlrlToFKTDXRvABhK4A=)
                          5: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
                          6: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: w1COd+BghPW0q9ZU5qIaN5HqOB3s+nccrCdTaPLtZ/M=)
                          7: w_LV1njNA-V7dFXJC3guIvKUQWo.roa (hash: NrG0kBcxPmetf+3OQDVHDWFcnwtwPSHPXue1LQZ+Zbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:71:fd:ca:3c:19:eb:73:1c:27:ef:da:a1:d4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Mar 26 02:00:47 2026 GMT
            Not After : Mar 27 02:00:47 2026 GMT
        Subject: CN=7bc844c1adaa746280116bb8ae7e62a09e60693f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:ec:4d:94:ef:d3:1b:58:5a:6e:25:60:4e:
                    52:1d:9b:87:8e:ef:25:c6:f9:1a:88:f0:f2:bd:fb:
                    ba:c5:f7:61:91:88:0e:3d:c2:7e:c9:c3:09:3a:04:
                    06:e4:70:74:30:ab:c9:4d:fb:22:82:2a:d7:9d:04:
                    f1:ef:22:c2:5c:45:59:c6:10:ab:8e:ee:b6:55:ac:
                    ae:96:50:c4:19:61:65:4d:ac:9b:7d:f9:7b:d5:e5:
                    32:b4:08:2a:9a:c9:ca:14:94:50:9a:c3:46:ad:40:
                    f8:15:0d:57:64:b2:9a:78:10:5a:b0:74:91:6c:2b:
                    57:47:d1:05:04:b9:df:d6:17:12:08:5a:59:56:07:
                    09:47:d9:22:4e:a1:7e:c1:12:32:dc:07:4b:e0:39:
                    41:3b:4f:7a:16:f2:e9:68:9b:ad:02:86:e0:9a:6f:
                    2e:21:fd:f3:12:f7:04:49:29:b2:53:e2:83:4f:92:
                    0b:72:91:10:4d:16:21:42:28:8a:ac:a2:8b:05:b2:
                    6c:88:1e:1f:55:5c:88:07:1c:39:4b:4c:08:df:20:
                    df:dc:6c:4d:8b:d2:7d:d4:38:b4:25:f5:dc:53:54:
                    63:49:b7:21:6d:97:09:f9:9a:0f:e9:c2:02:9d:93:
                    c5:34:67:8e:1d:1d:83:6c:4d:29:c7:15:fc:3b:89:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C8:44:C1:AD:AA:74:62:80:11:6B:B8:AE:7E:62:A0:9E:60:69:3F
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:ef:43:80:a2:7f:e7:6c:22:4d:92:dd:06:36:e8:fc:4c:
         04:6f:6f:9c:8c:e3:42:92:32:2d:1d:e1:f9:c1:cc:f0:e4:ac:
         1f:f9:d4:96:ec:a0:e3:f1:aa:0f:f6:4b:9c:9a:fc:8f:33:bf:
         d9:9f:89:4d:be:e7:a8:74:80:1a:c8:13:a6:00:6d:05:09:1c:
         cc:a7:73:21:23:5b:b3:04:8c:47:05:b2:c5:71:e6:63:9a:96:
         70:9e:4c:f8:2f:48:73:2a:22:ed:67:76:7e:da:a5:e7:05:3d:
         fd:9a:0e:43:e9:a0:ee:54:1a:05:d6:76:c6:94:04:14:eb:5b:
         2e:8b:ce:09:4b:33:ad:f3:84:20:a0:77:3a:8d:5b:03:ce:16:
         d6:33:21:b2:53:1c:4f:4a:22:cc:8b:ad:be:39:33:af:23:a8:
         08:0b:ba:49:bd:56:0b:08:3f:9f:63:ff:27:0b:4d:33:e9:15:
         00:4e:ad:61:5b:a5:5d:3b:43:4c:7a:f6:4d:cc:4b:ed:2a:a0:
         ba:25:5a:02:cd:dc:e2:b3:4d:21:b1:81:51:8b:fc:1b:e8:5a:
         04:07:b9:a9:04:97:95:26:18:00:04:d6:c3:2a:0f:3c:32:c2:
         d9:a9:81:cb:ac:53:40:9b:d7:d1:d0:89:c5:0f:0b:fe:de:39:
         57:49:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:13 2026 by rpki-client