Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File:                     k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier:          dO+ruOh6Sf2kzTaKG3DjUz35V6mbeUg3/5xRq8FdOcY=
Subject key identifier:   6F:3A:F5:15:0C:FA:8F:3F:C0:C4:96:D7:65:D2:3C:AD:18:DD:03:37
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer:       /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial:       019D284E51349DD588B91B1373489ECE9E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number:          1819
Signing time:             Thu 26 Mar 2026 04:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:54 +0000
Files and hashes:         1: 8Na-R2PqVFyNzA5u6KAFRMf11HE.roa (hash: 8IZEcdLtXy5KbQ5iic2lrmgZO3w7ovtbGyG4T1KJfkY=)
                          2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: s5nNMre+fBXdmVJhEe6S+pxcNpXpF2qylYbQaBMM8B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:51:34:9d:d5:88:b9:1b:13:73:48:9e:ce:9e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
        Validity
            Not Before: Mar 26 04:01:54 2026 GMT
            Not After : Mar 27 04:01:54 2026 GMT
        Subject: CN=6f3af5150cfa8f3fc0c496d765d23cad18dd0337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:36:55:cd:1d:28:cc:e8:3c:fa:0f:46:48:
                    25:8d:88:59:da:50:b1:65:da:ef:57:29:7d:05:51:
                    eb:7d:6b:52:8b:11:a4:02:0e:22:65:ad:b8:10:e2:
                    f5:60:72:43:fd:43:aa:d1:54:9e:a5:bf:14:6f:aa:
                    33:ba:88:79:9d:87:7e:5d:04:81:d1:82:56:14:15:
                    09:7f:7a:eb:06:32:97:c9:9f:5a:55:20:56:f7:9a:
                    d1:ca:4f:8a:60:0b:44:da:cd:da:21:f4:26:c8:bc:
                    90:0e:20:3b:d6:49:5f:e2:84:b2:23:67:d2:da:b9:
                    a6:c2:3d:e1:3d:34:22:ce:ea:01:ea:a1:e2:56:dc:
                    26:47:c3:04:34:0e:aa:49:48:e1:0e:d6:3a:3e:91:
                    4f:dc:49:43:9a:f1:7f:3b:20:4a:0f:b1:3c:ab:db:
                    3c:cb:37:50:52:92:c2:34:9b:f0:14:f5:93:5d:d5:
                    d7:81:05:63:42:d7:88:94:a6:3d:9c:3a:59:d2:6c:
                    6a:75:e1:16:69:2b:f6:90:16:40:75:15:e2:3a:f4:
                    19:86:fa:0a:be:0a:c5:aa:d8:13:7a:49:ab:d8:c1:
                    dd:69:dc:6f:db:eb:5f:2b:77:f5:99:ad:cd:69:03:
                    8a:9c:a0:d0:91:a3:a9:25:53:01:27:b0:36:49:e1:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3A:F5:15:0C:FA:8F:3F:C0:C4:96:D7:65:D2:3C:AD:18:DD:03:37
            X509v3 Authority Key Identifier:
                keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:f6:36:8e:bb:c8:5d:07:a5:2f:60:28:3c:5f:7c:1d:c2:
         80:ec:07:e9:91:05:c9:d7:68:fb:9f:b9:72:16:91:7b:a1:4f:
         70:1a:bf:47:63:90:45:e0:1c:1a:6a:fc:cb:43:8b:18:44:8e:
         d6:86:7a:8c:48:50:e7:be:e9:5c:bd:ca:ec:c3:e3:ac:12:97:
         0b:f3:57:58:82:26:8f:83:62:b3:c2:94:35:2d:09:9b:c9:02:
         25:3f:b3:a0:79:0a:e4:8d:9e:4f:22:ee:63:b5:26:b3:f4:c6:
         73:5d:4c:40:9f:a2:85:8b:5c:47:25:6d:42:96:b2:f6:ec:ea:
         35:e7:31:56:5f:44:4d:e0:1e:ac:f4:80:5d:e1:e4:61:b6:56:
         54:26:33:fb:44:7e:22:4b:b0:f1:c8:c6:ae:aa:f9:53:74:90:
         ed:86:51:7c:42:5b:a3:23:a6:e3:a8:61:eb:fa:a1:5c:3f:73:
         c5:5f:65:b1:e0:15:50:a6:73:7c:20:24:74:37:bf:11:a0:58:
         40:82:ea:ff:33:7e:e4:89:df:ac:e1:70:a7:af:29:bd:a4:bf:
         1e:ec:97:d0:d2:83:12:5a:82:c7:3b:ef:43:1c:a9:b8:7a:3d:
         43:0f:d5:ba:1b:73:de:22:68:18:77:4a:70:f7:d9:d6:e0:86:
         09:77:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:04 2026 by rpki-client