Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File:                     v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier:          XFSGeFlB03Wc3PJScpI9jvZ3cfK2gj59E28ccDIsunE=
Subject key identifier:   34:38:A0:C8:8A:5C:84:4C:94:5E:1C:32:CD:84:F1:4C:40:F1:DD:2F
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer:       /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial:       019D265FEE884F747AB803A42193A233AD4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number:          057A
Signing time:             Wed 25 Mar 2026 19:01:54 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:54 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:54 +0000
Files and hashes:         1: hdGGuUW7w7lu19dOukQNCJdWtzY.roa (hash: 6vH3xdgt47fTM5+WjM7MrmGzDZai/lOYV54DW8UACVg=)
                          2: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: v5xBp/LgGYX3fNmUDPwxnQXfjO0FAkK03jyCQMX7xkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ee:88:4f:74:7a:b8:03:a4:21:93:a2:33:ad:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
        Validity
            Not Before: Mar 25 19:01:54 2026 GMT
            Not After : Mar 26 19:01:54 2026 GMT
        Subject: CN=3438a0c88a5c844c945e1c32cd84f14c40f1dd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:19:02:fc:75:67:14:ab:32:a0:bc:6e:9f:
                    a4:3c:a8:a5:26:55:f9:95:4b:ca:eb:2d:cc:5b:1e:
                    af:43:93:07:8a:ea:f7:31:1a:a9:c9:17:ee:44:28:
                    6b:c9:4e:8e:6c:59:51:c6:38:ce:3b:c1:b9:a2:84:
                    88:f7:de:2a:42:56:88:3e:f3:f5:07:5a:67:25:9f:
                    f9:2c:91:6d:18:bc:7b:73:f4:3f:98:7c:e5:56:bf:
                    be:79:ac:74:e1:94:f2:2f:cd:22:30:b9:6c:a6:f3:
                    32:32:3a:ab:fe:16:83:e3:0c:b6:5c:3b:89:c3:f7:
                    df:2d:3a:fe:13:47:c0:87:91:75:b5:4e:4f:e5:ea:
                    6b:d8:e3:ab:2c:b6:9f:7e:7f:cb:9d:fa:0b:cf:61:
                    76:0e:61:c1:48:c1:95:79:e1:30:e4:68:f1:eb:7e:
                    c9:73:15:1b:7a:92:94:0c:cf:18:8e:fd:01:fb:9c:
                    f0:57:35:07:7e:ad:a2:59:5a:66:af:a2:2d:a1:0a:
                    68:26:70:e7:05:94:b3:8a:7b:0c:19:46:9d:cc:45:
                    f1:d2:aa:0d:85:e4:21:a3:bb:3b:f5:e8:c4:dd:26:
                    2f:84:74:6f:17:18:6e:89:6c:59:0d:61:2f:f7:ee:
                    02:b1:dd:24:f2:3f:3b:9a:d5:f7:0d:93:bd:c6:f8:
                    0e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:38:A0:C8:8A:5C:84:4C:94:5E:1C:32:CD:84:F1:4C:40:F1:DD:2F
            X509v3 Authority Key Identifier:
                keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:39:8d:dd:7d:16:ff:bd:bd:2a:6e:26:42:ce:3d:d5:e6:ad:
         c3:e3:8b:1b:49:6a:88:80:e0:27:9b:6b:61:5d:78:f8:9c:7c:
         56:ac:23:f6:3f:cf:e1:80:af:58:25:66:10:cc:ee:65:f1:ff:
         14:ac:48:2f:80:c2:b3:46:30:fa:96:8f:85:76:d4:36:26:45:
         c1:91:b9:63:83:ad:2c:36:bd:e5:b0:d1:1b:fa:aa:86:7f:72:
         9d:14:84:d7:e6:f7:dc:d1:a7:51:81:3d:79:ab:c0:2f:0b:8a:
         ad:11:cb:fd:4f:05:20:8c:f7:32:14:a3:67:2a:e3:e5:81:f5:
         fc:9a:45:ef:d8:eb:30:35:8a:c8:39:2d:60:c5:80:7a:74:eb:
         37:f3:d8:d7:ab:1b:93:bb:77:60:71:ca:6d:3e:2b:37:50:8d:
         41:7f:60:c6:07:fa:ba:5b:e6:26:5d:6f:48:87:49:cd:1a:b4:
         ea:a1:c2:49:16:a3:3e:f8:e8:26:d8:c3:0d:ea:e9:6a:e9:01:
         27:31:ff:4a:16:d3:de:c1:80:0c:54:0f:ab:9e:33:f0:66:7c:
         03:90:b4:91:ac:5a:a4:00:22:64:6f:e3:3f:52:5c:ac:9b:51:
         1c:c5:df:1d:48:d8:33:1c:be:90:e5:dc:a8:1c:08:d1:4a:43:
         29:f9:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:58 2026 by rpki-client