Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File:                     sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier:          O0WMLDC9IeFT4doNtVs+ZKdb2zI4CP2QU+iy4SFDgRs=
Subject key identifier:   46:11:E2:6C:A3:19:82:1D:94:53:F5:D1:98:ED:58:EC:42:05:BD:F8
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer:       /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial:       019D284D93F4477DE1703837F9E96E57F085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number:          181B
Signing time:             Thu 26 Mar 2026 04:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:05 +0000
Files and hashes:         1: 9y3JK83GAsm13D0YffuSXVmKNYo.roa (hash: mRnoN4uYmedrpU7jo9ReZ2AadwnL5SQlW0OFJSUdrsE=)
                          2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: m5LL1i87Tz2sLEv55MH9EoX+AYDVl7xNorjAikH1hgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:93:f4:47:7d:e1:70:38:37:f9:e9:6e:57:f0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
        Validity
            Not Before: Mar 26 04:01:05 2026 GMT
            Not After : Mar 27 04:01:05 2026 GMT
        Subject: CN=4611e26ca319821d9453f5d198ed58ec4205bdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:ab:0e:38:24:54:4f:03:cf:9a:20:fb:e3:
                    73:bf:d2:53:21:f8:6c:23:b2:db:42:8b:b0:66:21:
                    84:57:ac:5f:f9:3f:99:bd:18:4c:d9:85:53:4d:c3:
                    34:8d:db:3a:7c:7b:48:09:fa:1d:dc:2f:8d:4a:77:
                    8e:64:0b:a6:bf:3b:a6:8f:f6:3b:f6:2e:ec:23:cb:
                    ce:c5:86:c7:fb:ef:e7:5e:95:08:0e:75:8f:e1:2b:
                    58:95:cd:bf:9c:7b:a3:31:c2:0e:48:d0:0c:93:11:
                    64:39:40:af:44:5a:18:63:4a:9e:4e:cb:e2:bd:55:
                    d9:31:89:b1:a2:6e:a2:38:91:ea:bc:e3:19:e5:d0:
                    0f:5b:37:c1:c6:e8:d5:f6:00:b4:94:ea:15:82:69:
                    24:6a:f5:a6:b3:8d:15:dd:5a:29:ff:e5:71:5c:d7:
                    e5:85:ad:e6:67:5f:7d:57:6f:da:c8:ed:44:e2:97:
                    c0:09:ec:ab:e0:f9:ec:c2:ac:3f:8e:9c:cb:cf:99:
                    fd:d9:fd:54:4d:b5:9a:bc:34:4a:98:8b:a9:d4:c5:
                    15:16:32:8e:59:4b:79:52:38:17:de:10:10:69:d7:
                    69:6e:54:10:45:45:d5:ed:74:65:3e:df:e6:72:42:
                    69:2c:17:ca:20:97:ab:03:ea:50:7e:58:76:3a:d2:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:11:E2:6C:A3:19:82:1D:94:53:F5:D1:98:ED:58:EC:42:05:BD:F8
            X509v3 Authority Key Identifier:
                keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:da:75:c8:8f:5e:42:00:29:2f:d8:50:9f:62:13:f6:42:02:
         2b:c3:bc:c3:15:fd:27:14:78:3d:b2:59:35:42:8a:fe:85:f0:
         01:9a:36:82:12:3e:c4:db:91:79:29:e7:12:a3:99:76:9f:6e:
         22:6c:96:6e:64:c2:ab:fc:47:45:8c:60:7d:09:61:49:41:24:
         50:7a:27:3d:54:d8:17:e3:35:4d:a3:95:5f:58:e9:76:61:4b:
         a9:a6:81:d6:6e:ce:7c:5f:52:ac:ad:07:7c:bd:d1:56:32:f8:
         4d:33:35:aa:4b:f6:ec:1b:59:07:f1:8f:98:b6:d2:ba:d3:06:
         fa:99:64:36:04:e3:1a:a6:69:33:7f:76:a3:b1:fc:2b:2d:78:
         88:7d:3f:67:6d:10:57:1c:a3:32:e6:dc:91:d4:f4:b5:2d:1f:
         d8:28:e5:25:f9:73:99:f9:95:f6:4c:7c:4e:e1:8c:a0:8b:31:
         98:d9:46:dc:bb:87:44:4d:9d:f1:c6:28:84:63:1b:61:98:e0:
         f3:fa:97:1a:68:76:a1:ce:97:32:66:f0:21:31:e7:ad:44:3a:
         61:8b:bf:63:d6:0a:1b:41:1d:fa:df:37:ff:13:23:71:22:8d:
         91:34:6a:19:b3:a2:6d:4c:bf:93:8e:ec:ff:48:ab:cc:37:9e:
         ab:cc:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:03 2026 by rpki-client