Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File:                     pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier:          c+SX1NjSQVMv1zrVkLAGmRhTI6hQjs6OTeA4Dj63AAI=
Subject key identifier:   E5:FB:30:C3:A6:BF:06:2D:89:30:A1:D2:5D:A7:46:49:A9:30:A4:9B
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer:       /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial:       019D26CD0BA8537E9CE17571572B5854B608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 21:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:05 +0000
Files and hashes:         1: X_iDPN1nW5JA7DFaJuaGHWyYxHM.roa (hash: 0BXxzNZo7OeS9MP/LttH/fhWliNs3dL+qMaMqaBeflw=)
                          2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: UX14Q6XzYwhYCpwa2z5YdpaI3i+PbKhQt8su6nSzZRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:0b:a8:53:7e:9c:e1:75:71:57:2b:58:54:b6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
        Validity
            Not Before: Mar 25 21:01:05 2026 GMT
            Not After : Mar 26 21:01:05 2026 GMT
        Subject: CN=e5fb30c3a6bf062d8930a1d25da74649a930a49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:d6:27:41:3e:87:b5:8d:20:0e:97:94:9b:
                    21:43:75:4b:6f:58:14:32:04:fd:48:ef:40:1b:a2:
                    e8:6b:6e:c6:15:ff:95:ed:9e:57:42:21:be:af:05:
                    a5:37:5c:b5:71:f2:75:a0:33:b3:6b:46:e2:55:19:
                    1d:27:ac:d3:a5:06:8a:7e:99:69:09:d6:94:83:2e:
                    c2:b5:c2:3e:e0:36:49:aa:db:eb:93:50:e1:7b:f8:
                    b8:ec:59:bb:7b:a2:ec:7a:5a:41:29:0c:48:fd:49:
                    f1:3f:28:93:b3:4b:ac:98:cb:02:2f:98:97:a4:83:
                    e2:2c:1f:49:59:d5:a4:7f:ac:53:32:3b:1c:d5:c9:
                    f9:e5:a0:6c:b5:d1:03:90:fb:e4:da:40:90:b6:02:
                    72:86:1c:8b:90:73:9b:b9:dd:ee:db:10:a0:83:a3:
                    03:20:22:4c:19:e0:bc:9b:64:8c:cf:69:7e:4b:14:
                    96:de:6b:af:a5:b8:6b:9c:16:2b:c0:84:8c:c2:1e:
                    b7:45:43:13:99:74:3e:db:e3:58:78:c9:8d:8f:c8:
                    05:cf:92:bd:f2:4e:70:3a:4c:e1:29:56:3b:2c:8c:
                    e9:38:3f:ec:d7:a1:53:2b:ce:b7:c1:88:08:0c:01:
                    c7:e4:5f:bf:6c:a8:a0:28:f0:09:47:96:77:06:26:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FB:30:C3:A6:BF:06:2D:89:30:A1:D2:5D:A7:46:49:A9:30:A4:9B
            X509v3 Authority Key Identifier:
                keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:80:b3:e5:fa:a9:55:8e:59:63:4a:be:99:21:e5:e2:03:79:
         20:38:10:96:10:d1:f0:e4:e4:c4:6a:5d:89:09:83:ae:d3:08:
         c1:32:9a:07:f4:89:f9:f4:19:70:4e:2d:4b:0f:90:99:41:de:
         14:a8:57:06:d2:9e:90:26:0a:fa:ca:a3:12:9d:78:14:a4:86:
         48:5d:a5:65:4d:a0:03:40:1a:76:c7:d3:09:a8:75:fe:61:5d:
         5b:6f:a7:f2:5a:93:cc:54:b0:ee:17:2b:22:73:1a:33:2a:df:
         c0:8b:29:34:74:d5:1b:d8:8d:1a:8d:0b:c4:2d:55:4a:2f:97:
         85:ed:36:3a:fc:26:59:4e:10:dc:bd:88:a4:f4:e0:32:60:2a:
         d2:2f:09:4e:8f:d2:28:97:0f:9c:25:68:7c:dc:00:d6:84:4b:
         9a:07:2a:5c:ab:7f:3d:1a:4a:b5:89:67:79:b2:40:c7:5e:dd:
         43:8a:87:a8:93:f9:6d:39:99:ff:21:0b:49:e7:a4:7a:98:e3:
         bd:f7:9b:5d:8b:e4:dc:b2:90:2a:fb:a0:89:d9:e4:5e:9e:d4:
         38:73:fe:1d:d7:47:e0:9d:a4:ff:09:ac:f0:15:cc:ba:ad:4a:
         c6:d2:b5:86:77:9e:4f:3a:87:d8:6e:94:d0:ad:25:3b:e4:93:
         e6:ab:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:12 2026 by rpki-client