Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          bpKI5evzm4QY2e3sNmb7D5PLGrXAAHdH78evliKWbqc=
Subject key identifier:   0E:D1:97:42:CB:4F:84:FC:A0:5D:6D:98:6E:16:36:C2:AE:6C:CC:6B
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       019D27A8947F7E037782A6E68B312AD569B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          1890
Signing time:             Thu 26 Mar 2026 01:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:52 +0000
Files and hashes:         1: IwITwGp3B4_pSMBNtVpyOQEaMCE.roa (hash: DL9ccQKNzsDchyhG4KBBhWIj3j9jhXmlBTwSGH+MLOI=)
                          2: aX67thVuhkTa2S1WbEsDaaxyx_U.roa (hash: e6/sW4ioMZgIWgsgRys4jC3T5C0ZPSKh0y+ZX7aZe5E=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: Wl4xfVWw+dwz2WPonT3WzAvQdFOIh6iHRoi67lnWe1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:94:7f:7e:03:77:82:a6:e6:8b:31:2a:d5:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: Mar 26 01:00:52 2026 GMT
            Not After : Mar 27 01:00:52 2026 GMT
        Subject: CN=0ed19742cb4f84fca05d6d986e1636c2ae6ccc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:17:57:a4:7c:be:fc:74:16:69:c6:de:dc:
                    b1:ae:47:8b:2e:6f:15:8c:f6:71:44:bb:a9:65:1a:
                    b2:e8:ce:c5:04:b8:ce:9a:08:8c:5a:05:27:93:40:
                    95:ff:40:70:6c:86:08:bc:f0:b6:07:d3:33:41:70:
                    a6:f7:a6:77:da:2b:ff:b8:c4:ae:1b:77:df:49:ff:
                    bf:1f:cf:c6:79:a2:73:5c:eb:3c:77:d2:73:8a:05:
                    50:46:4c:09:b2:8a:ae:9b:00:07:ba:84:63:2d:95:
                    8a:dd:9c:21:e5:64:b9:b9:88:9a:68:8d:04:96:04:
                    d4:30:75:22:d0:54:45:a8:fe:da:a9:db:ae:de:c0:
                    37:6d:0b:53:a3:81:bc:78:ec:7e:81:ad:a7:b3:2f:
                    21:cb:41:c7:72:b4:b4:f0:fa:ab:a5:f6:a9:20:e8:
                    6f:19:31:d2:5a:59:48:97:5c:3b:52:46:3c:f1:68:
                    2c:97:2a:e1:82:11:31:b7:5e:e3:e6:0d:17:bc:4a:
                    68:b3:78:a6:09:f5:20:b3:9e:bd:51:bf:0e:1f:dc:
                    f6:d8:99:13:f6:31:cb:26:5f:f0:dc:c1:69:9d:0d:
                    a7:e8:e3:2e:07:4c:5c:ce:75:7e:e2:0a:9f:a8:01:
                    55:98:24:50:c9:eb:2a:0c:88:0f:d1:b0:e5:7e:cd:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D1:97:42:CB:4F:84:FC:A0:5D:6D:98:6E:16:36:C2:AE:6C:CC:6B
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5c:3e:b3:a9:ac:8d:12:8b:5b:95:c8:f3:01:66:2f:37:e8:
         57:cd:bf:64:91:f4:52:b3:e8:6f:f2:bc:a6:71:85:4b:37:a3:
         75:7b:b1:e1:e7:17:bf:0b:e0:76:e3:23:2d:ef:40:2c:e1:40:
         3b:19:00:6a:1f:67:5c:51:d5:fb:a0:45:c9:7f:c7:eb:76:39:
         73:e3:e4:91:f3:60:4a:d2:b8:2d:fe:f4:dc:bf:74:41:ad:71:
         82:10:8c:3c:0c:98:c1:d2:01:d6:89:84:9d:e3:1c:64:81:08:
         48:aa:69:5e:bc:84:36:42:90:ac:aa:f9:a5:f1:d2:e5:1d:8c:
         63:76:18:75:12:dd:08:aa:5f:9e:da:59:94:d1:f8:bc:d6:15:
         77:8f:d7:ec:55:04:0e:b8:4b:56:d4:b8:41:bc:39:8a:16:ca:
         19:a1:0a:1d:aa:d8:f3:3c:22:92:84:b6:3a:79:1a:44:4f:0e:
         a8:61:a2:37:57:87:ac:94:00:5c:1f:d1:26:47:25:68:1c:3f:
         65:9c:5c:32:c1:0e:6b:4e:f6:16:c8:fe:64:82:3b:29:20:45:
         46:92:3c:52:1e:05:67:86:db:61:80:9e:dd:94:a8:1c:fd:74:
         86:67:4d:7d:89:0e:6b:c3:d8:af:0f:a8:ba:ee:dd:b9:ed:a1:
         e5:85:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:13 2026 by rpki-client