Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File:                     mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier:          Nh9XCRFcWCaHLk0AuJgWTTwCpbnj2M1sz9b07yUkzxY=
Subject key identifier:   46:F9:EE:66:DF:3E:7A:C7:B4:E3:1C:4B:07:FF:13:96:7E:28:45:9D
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer:       /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial:       019D281686B2B240DA98BFB3BD262651BB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 03:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:58 +0000
Files and hashes:         1: eMpcZEpOg2N0GNjlI3sO9BmaZ6A.roa (hash: j9M/fnlNW/6tDg+Ea3qW22DPN5/BiegIfG702h57st4=)
                          2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: RUInFH3QrTzkc9tvO3NBYUeW9oIZe3hFU6JcABFA6eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:86:b2:b2:40:da:98:bf:b3:bd:26:26:51:bb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
        Validity
            Not Before: Mar 26 03:00:58 2026 GMT
            Not After : Mar 27 03:00:58 2026 GMT
        Subject: CN=46f9ee66df3e7ac7b4e31c4b07ff13967e28459d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:f7:a1:c0:02:b0:cb:f3:95:a3:35:fb:9d:
                    66:bb:6e:e5:87:d8:09:21:29:cc:c1:51:ce:3c:ca:
                    64:0d:98:fd:c2:90:2d:09:17:62:bf:59:df:3a:f9:
                    3a:80:12:2f:92:9c:ac:46:f3:10:d7:81:c8:f7:2d:
                    50:aa:01:af:24:d1:bf:26:5b:fb:5f:e1:d5:70:30:
                    12:16:49:d4:57:83:fa:25:6e:5b:c4:92:1c:2c:d8:
                    d0:de:93:7a:84:05:71:03:98:b0:80:d8:ab:3a:e5:
                    59:b6:a7:61:90:c7:8e:53:84:28:c5:df:74:e5:db:
                    cc:31:6c:7d:3c:b6:a7:80:ca:81:7e:cf:73:53:39:
                    84:85:db:92:d8:6f:99:a5:94:be:d3:f6:ae:2a:e9:
                    6c:9f:48:70:35:f5:7f:a4:de:3a:c3:9d:2b:03:29:
                    81:3f:4a:f5:52:ff:c1:49:f0:e6:d5:9e:37:8f:51:
                    40:46:39:b1:f5:95:4e:64:b1:00:b3:cb:c5:0a:d6:
                    b7:26:78:f8:38:c8:48:2c:65:aa:40:62:ad:28:c6:
                    40:d5:e0:89:9a:9d:5c:59:04:f4:79:8b:0b:9c:2c:
                    5d:77:33:c7:f8:94:9b:81:01:7e:76:89:fc:15:29:
                    7c:94:71:c8:9a:5a:41:08:94:b9:ff:a6:8f:26:ee:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F9:EE:66:DF:3E:7A:C7:B4:E3:1C:4B:07:FF:13:96:7E:28:45:9D
            X509v3 Authority Key Identifier:
                keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:02:e5:c1:da:fb:44:84:32:6f:f9:a7:42:91:9a:04:99:
         37:98:51:c6:13:46:81:cf:a8:39:f2:bc:a0:27:08:2e:3c:bd:
         85:45:b6:67:c8:8e:39:93:10:9c:11:fc:17:16:9b:d6:6e:84:
         fc:e8:c2:73:fe:c8:e7:28:a7:54:18:17:59:13:13:85:0e:92:
         3d:17:4c:63:ab:cf:91:2d:e5:3d:df:f0:18:54:56:f0:75:e4:
         a6:8d:6c:f8:f4:b6:b2:f0:aa:85:46:83:b9:47:15:de:73:6f:
         2f:70:5d:b7:9d:73:74:c8:e4:d7:a9:75:a1:af:97:3f:b2:9e:
         d8:6b:ce:ac:ef:d5:fc:88:4f:7e:8f:26:a3:4a:f8:de:64:cd:
         6a:19:d6:6d:f3:73:b7:9e:19:de:f6:ac:37:b2:5b:e4:52:0b:
         ca:f6:4e:ab:a9:44:20:6b:dd:67:61:61:30:38:c7:8e:de:7b:
         6c:aa:ec:75:6f:5f:c0:cd:a6:51:3b:53:3e:c0:aa:8e:94:83:
         a4:15:53:b6:fa:72:4d:22:a2:66:61:89:26:ee:10:2d:33:66:
         ba:72:23:f2:50:3e:5a:c4:68:99:93:53:96:99:40:11:42:63:
         4a:a1:b5:cc:01:1b:db:9c:b5:12:da:0f:71:4f:b5:f4:55:e9:
         9f:1c:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:24 2026 by rpki-client