Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          YCy/u7TpcX1HGbjbbQRqYJjSj1iNo36txWy6KlMh3so=
Subject key identifier:   4B:90:37:AF:27:9B:B8:BD:9E:AB:49:50:06:DC:F4:E2:F9:5B:EE:95
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       019D284D5B5B10EEAB2A0A704572FE35632A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0D44
Signing time:             Thu 26 Mar 2026 04:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:51 +0000
Files and hashes:         1: 8hDvXAFXtwTiaPxitWHApgLE65k.roa (hash: EiRwFtmOo1DVVx7O1xctBpgvgnvAfczha5+H5oxZvkk=)
                          2: FrgtLDHlGMWP7-Ol00IvZZoBesM.roa (hash: T567K72LlQfx3PglnXUfayy6bFn0FIimheQaqSUapwY=)
                          3: PIBAi-NbloODmSiDeKc6jb9ihv4.roa (hash: R3IFcDR+URbSvkybKJ/Sj9TwLvQjyr3A69qpjrCDlEE=)
                          4: ga1BrMjD7wY_QoN5ExMTad0kou0.roa (hash: /2/Lg7lZekU4p6NvtnYYz9mRfacgER7O7n79Ibm5W4s=)
                          5: lplNqf06vua3DkgbqqhwRpQX5y4.roa (hash: yaa0RKonl28mWEtrN2B7tlLyBAqCTM4woPMQSkOo7wE=)
                          6: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: 4+imwxD5I/YOAJy2rUzvC6lUirbEY5VYRE7rFmfbYJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:5b:5b:10:ee:ab:2a:0a:70:45:72:fe:35:63:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Mar 26 04:00:51 2026 GMT
            Not After : Mar 27 04:00:51 2026 GMT
        Subject: CN=4b9037af279bb8bd9eab495006dcf4e2f95bee95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:77:dc:13:82:ad:39:63:e9:01:a0:20:73:8d:
                    68:48:39:b8:03:a5:4b:e1:eb:bb:c1:a7:81:8b:46:
                    5a:d1:28:2c:36:98:e2:4f:09:ac:ae:50:d6:da:fd:
                    23:b5:b9:52:bc:9a:bd:3e:9d:19:2d:73:5c:ae:01:
                    bd:ca:7b:3a:90:31:62:27:53:f8:31:45:09:da:46:
                    1d:b1:c1:34:69:4b:58:49:ed:53:27:a0:a2:f1:b2:
                    81:f2:39:db:71:42:c1:c2:fd:75:98:ec:d6:e9:78:
                    8e:65:8c:74:05:b0:ea:c7:1d:4f:8e:c5:10:89:dd:
                    9f:9b:ee:d6:76:4d:c2:bd:b0:88:d9:8a:49:9e:df:
                    f0:a8:29:2a:86:fb:af:d9:1d:ca:61:45:d8:bf:c7:
                    f5:47:e1:47:29:d1:fc:28:6b:e1:5c:7f:fb:8a:8e:
                    21:24:56:2f:97:7c:03:e1:ec:6b:fc:83:7d:41:78:
                    57:7e:0e:e3:13:c3:40:b0:4c:9d:0f:d1:1d:54:57:
                    08:78:ea:90:1e:23:a7:38:a5:54:fd:76:68:00:15:
                    81:5c:02:9d:c5:14:b8:67:7f:1a:8f:95:8b:8c:f1:
                    37:b8:0f:ad:7c:ac:55:c5:c2:ea:b1:b7:ff:11:e9:
                    1a:ea:2f:95:e0:01:cd:2d:bb:24:77:9d:78:42:dc:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:90:37:AF:27:9B:B8:BD:9E:AB:49:50:06:DC:F4:E2:F9:5B:EE:95
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:5f:ca:65:fb:93:ee:64:0a:64:b9:94:12:20:e2:96:0f:
         3b:5e:f8:31:ae:d4:f0:d8:5e:10:cc:3d:38:48:f8:95:b5:35:
         4b:01:63:42:43:56:a7:e3:0c:39:3d:da:36:3b:89:55:60:e5:
         22:35:e2:e3:6e:a0:8e:21:5f:78:af:60:2e:74:ab:ce:cb:91:
         c2:93:9e:46:c3:c8:ee:b5:59:e1:89:be:f3:e1:f7:83:27:0e:
         f4:d4:30:74:97:2b:80:88:17:53:99:2e:68:48:96:86:92:9a:
         98:7c:80:9a:4a:77:2c:9e:e7:f4:35:b9:4d:ef:75:2b:0d:a9:
         d4:86:3f:95:22:fa:2e:8b:66:60:18:f9:60:3f:44:47:cc:81:
         f8:3d:e1:28:e6:89:aa:ca:d4:5f:25:e9:d9:19:be:48:93:71:
         ce:f4:38:d6:54:46:48:99:19:b1:a6:35:86:93:a4:b8:95:2a:
         b6:b0:eb:f6:8b:cd:8a:05:7c:85:e0:14:a7:71:e3:82:37:c9:
         2b:28:0d:65:85:45:a8:91:0e:19:d0:0c:b7:52:64:a2:78:10:
         a1:b2:1e:dd:66:2b:61:0e:d9:2a:a7:59:89:13:d0:5f:07:cf:
         cc:c3:f2:6a:f3:24:6c:83:21:4f:7c:da:c9:55:d5:fb:f2:b2:
         71:62:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:15 2026 by rpki-client