Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          116f9dnzUTXnDU8w2QEDlnH6vO2L/lEFin+cVO42MMA=
Subject key identifier:   0E:9E:B5:2C:B8:0C:FE:3B:B0:0A:AD:C7:F6:33:3A:9C:DE:3E:F7:83
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019D2583684343493B01DBAD307049B8478D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F49
Signing time:             Wed 25 Mar 2026 15:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:02 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: X2vhzjCQaHmkQ/MqKdEmv7RsBtwsJ1lYdsgHYp1jf9U=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:68:43:43:49:3b:01:db:ad:30:70:49:b8:47:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Mar 25 15:01:02 2026 GMT
            Not After : Mar 26 15:01:02 2026 GMT
        Subject: CN=0e9eb52cb80cfe3bb00aadc7f6333a9cde3ef783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:ee:64:f6:78:52:f4:5a:0a:eb:9e:8a:4e:
                    be:29:48:cb:4b:33:06:f0:4b:fe:1a:a9:d2:6a:28:
                    fb:47:bb:a5:17:32:12:dc:4e:54:1b:7c:07:bf:50:
                    d0:40:60:91:85:c8:52:e5:fe:ff:0c:cb:3a:2c:a6:
                    76:e6:64:af:9e:b7:e4:41:e2:f8:fa:d8:49:7f:03:
                    13:21:f8:54:da:7a:23:13:e0:9b:28:97:80:ed:1f:
                    ed:00:25:99:b7:bc:90:2c:bb:4a:df:94:ff:48:02:
                    f6:e4:95:b8:de:3d:d0:4a:3d:11:a6:f0:91:60:bb:
                    cd:db:32:a0:4a:ae:44:eb:49:da:0b:19:39:9d:b7:
                    78:6b:aa:a8:8a:5e:b3:fc:ea:72:bc:f0:75:92:65:
                    1e:f9:67:3a:9f:f7:37:e0:4b:f8:f7:7a:d2:04:fa:
                    89:64:73:71:28:58:ed:1f:08:96:5b:c1:06:94:78:
                    bb:db:2f:b4:ed:ad:36:08:23:23:33:21:9e:4c:4f:
                    28:a5:01:54:7c:ec:79:65:09:cf:6f:9b:c1:3e:4d:
                    db:a4:7e:31:ce:ea:6e:18:c5:29:57:ba:22:43:72:
                    01:4d:86:83:b3:dc:33:83:47:e3:a8:64:ad:96:9b:
                    15:53:f2:bb:2f:4f:83:f5:52:b7:4c:a1:50:c6:7b:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9E:B5:2C:B8:0C:FE:3B:B0:0A:AD:C7:F6:33:3A:9C:DE:3E:F7:83
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:5f:3c:93:5f:c2:d9:05:2c:61:00:40:19:69:d0:8a:e5:
         e0:cb:f6:8d:bb:3b:73:c7:11:ff:60:57:64:66:b2:1b:c3:3b:
         7b:7f:16:a0:0b:96:22:fa:01:5a:0c:39:b5:72:4d:f1:b8:b8:
         6e:2f:b8:07:ad:e4:00:d6:b8:8f:13:ef:57:81:03:90:9c:a4:
         e1:0d:20:64:ed:55:3c:c5:d1:80:b3:c7:85:d9:1d:66:ba:86:
         3f:52:33:dd:e0:f7:a0:47:1b:4c:73:2e:82:49:ee:40:30:62:
         7b:d1:8d:05:d7:7e:52:e5:f9:2a:53:b2:8a:7d:42:f6:85:6e:
         e7:22:a4:dd:9c:f3:be:5e:b5:d8:b0:39:3c:33:64:2b:73:02:
         78:e7:4a:bb:eb:13:b8:d9:c2:6d:ac:4b:e6:6d:f6:e9:69:13:
         4a:47:86:ea:56:6f:ab:62:fa:a8:7a:6b:45:cf:1f:19:01:19:
         dc:0b:4d:e6:42:ae:33:4f:f7:c8:3c:ff:7b:02:6c:58:d9:49:
         8f:fb:38:6b:3b:41:0d:f6:e7:04:69:b3:0b:ca:c1:e5:79:4c:
         32:4a:cf:f0:16:1e:54:92:16:a9:10:17:b5:b5:ac:88:bf:fc:
         24:61:18:78:8a:0f:5a:75:18:ae:68:b4:1d:19:91:8b:6c:8a:
         e8:7a:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:28 2026 by rpki-client