Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File:                     dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier:          bADVW+Y/uv9xPvuQJN5vvZzR6KlDpn1zW4BFXloxM6U=
Subject key identifier:   C1:77:41:24:26:1C:3D:C4:3B:BC:16:FF:35:AA:0C:8C:9E:8F:B2:5A
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer:       /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial:       019D2628A1E33D721BD93E34CC0674381C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 18:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:30 +0000
Files and hashes:         1: MFfCciSjPtd-0Qs0BCudUPENVos.roa (hash: db9UzTXPSUySmDiyf53JbRZXpNuIvhPSJmF4lMWPXjc=)
                          2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: BqAown73GToTMoG14OUz9J9Roqb7MpQGwJ9lakgcW3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:a1:e3:3d:72:1b:d9:3e:34:cc:06:74:38:1c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
        Validity
            Not Before: Mar 25 18:01:30 2026 GMT
            Not After : Mar 26 18:01:30 2026 GMT
        Subject: CN=c1774124261c3dc43bbc16ff35aa0c8c9e8fb25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:29:b0:79:d0:13:d3:4f:20:2c:cd:c4:3c:
                    74:7a:c3:70:4c:e1:ef:45:72:15:af:a5:d0:e0:48:
                    81:6c:1e:0e:7e:c8:e7:34:78:26:e7:89:11:6b:3c:
                    c7:2d:e3:d2:bc:81:fb:53:a9:a5:93:55:80:34:5f:
                    e6:40:4f:dd:d9:07:7f:ec:67:4e:49:b4:64:6d:d9:
                    cb:90:f2:10:a8:21:c9:0b:73:3e:3d:f7:fd:35:80:
                    52:5c:55:34:bd:4e:d2:0d:68:9b:04:9e:91:f9:38:
                    c1:3f:ce:d6:99:06:e2:78:ae:60:ab:b7:6b:3c:9c:
                    94:99:03:e6:8d:1a:fe:f3:a5:4e:ff:26:fe:02:55:
                    56:ff:3d:6e:52:28:e3:85:2d:39:41:22:65:42:5e:
                    cb:e3:1c:3e:98:25:b0:3c:1d:ea:8e:e4:e1:67:8b:
                    e7:32:6b:dc:a6:2b:ab:8b:55:d0:17:95:b7:f7:16:
                    56:25:5b:18:86:05:2f:80:ca:e9:98:4f:b1:2a:4c:
                    ae:6a:4b:f1:01:5d:72:a8:72:c8:06:06:7a:71:09:
                    20:71:11:ef:10:35:df:5a:0e:09:b0:d3:4e:3a:37:
                    ef:17:ec:21:b0:9c:2f:fb:06:55:9a:c2:41:5d:f5:
                    b8:e2:16:bc:9f:fb:db:2b:f4:14:0b:57:46:c5:13:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:77:41:24:26:1C:3D:C4:3B:BC:16:FF:35:AA:0C:8C:9E:8F:B2:5A
            X509v3 Authority Key Identifier:
                keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:d7:d9:7b:a9:0c:80:7e:e9:19:c7:19:d4:26:f1:32:3f:
         e7:6e:6b:3f:09:8d:25:7f:88:f9:c9:6b:09:57:9b:0f:79:1e:
         fd:b7:28:98:40:41:09:28:a4:d9:97:c3:8e:4e:a1:a0:54:10:
         52:3d:2f:30:1e:d6:12:96:89:90:ba:6c:7d:9b:98:12:ef:05:
         84:7b:b4:59:28:7c:bc:cc:0c:f4:74:e6:3d:b5:38:bd:e6:ab:
         bb:00:c8:bb:6c:3d:e0:f4:f1:fa:8a:97:90:c5:8d:05:6b:b2:
         ce:e5:85:18:68:15:7f:18:50:ab:6f:5d:ba:ed:2c:a5:97:08:
         62:b8:0d:0b:f2:0f:17:ed:52:f4:de:fc:d1:79:1b:de:20:99:
         35:2a:15:cc:eb:e2:6f:c5:8d:fc:20:3f:d3:36:d2:75:f2:1a:
         e9:c0:d4:f2:ca:4b:2f:9d:78:d0:7e:6b:8a:b6:5e:38:68:17:
         e5:21:b1:6d:4b:9c:40:8c:50:62:4c:8c:73:ab:6f:72:38:d3:
         dc:01:4f:5a:90:8a:2b:50:a1:ec:19:e2:66:16:fc:68:99:d2:
         29:9f:49:e0:48:b1:ad:3b:2f:01:05:f1:2c:a7:28:9a:b5:b1:
         08:3a:bb:2a:c8:e6:8c:67:80:94:bb:7e:0f:d5:60:0d:ce:0f:
         5f:0b:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:50 2026 by rpki-client