Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File:                     _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier:          Cnz/reTuds1gJELT3Gklwf7u8odSj0SOUPitF71iDJk=
Subject key identifier:   EB:F8:C1:D0:0F:B1:1C:9D:4D:17:3A:57:6D:14:45:2C:3F:1D:C8:B6
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer:       /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial:       019D2996F4B695E6D2F27A0DF5E31F3188D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number:          1819
Signing time:             Thu 26 Mar 2026 10:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:52 +0000
Files and hashes:         1: R4oyG7MkvAUxFV8Qe8hFBuhpAZE.roa (hash: 61dyTs8QajKBq9N89Z2db9Gx/wInV1LDSXpLhS9VDls=)
                          2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: VqxHWfO2H3ZjYR4VGDts076JP3BdWNsTamUOW1OhAYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:f4:b6:95:e6:d2:f2:7a:0d:f5:e3:1f:31:88:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
        Validity
            Not Before: Mar 26 10:00:52 2026 GMT
            Not After : Mar 27 10:00:52 2026 GMT
        Subject: CN=ebf8c1d00fb11c9d4d173a576d14452c3f1dc8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:02:c6:4e:3f:f7:ab:de:ed:3a:0c:eb:23:
                    03:85:06:ea:2d:cc:e8:4e:de:21:9c:5f:af:0b:30:
                    4c:9f:83:df:02:54:d0:43:53:d1:15:5f:ca:02:59:
                    9b:64:4a:63:ab:3b:55:25:2e:64:03:27:21:9a:60:
                    0e:14:ef:29:a5:e3:b5:c5:11:ec:02:ea:40:53:e6:
                    a4:d5:7e:4b:72:1d:1e:1d:71:70:4c:12:0d:fb:35:
                    ea:56:77:cd:cc:51:49:10:f0:63:e4:48:b6:d3:45:
                    b3:4e:ee:43:08:3a:a9:27:a9:ac:25:64:c5:f1:54:
                    84:f5:45:22:d5:b3:b1:63:0a:62:01:37:89:47:0f:
                    e5:a8:bd:ec:b9:e3:47:10:eb:a8:23:43:c4:ea:fe:
                    45:9c:87:b1:4c:0a:7a:ac:06:40:91:9a:c2:05:3a:
                    45:2e:48:b8:3c:09:1b:78:d3:bb:19:e4:8a:45:c4:
                    40:4f:33:93:fa:9b:07:ac:5e:89:5a:05:33:e3:3c:
                    2b:bf:0f:ac:44:35:c3:9f:83:73:94:8d:23:ce:53:
                    7f:fa:59:3d:f1:21:8f:2d:af:03:1d:f9:48:12:7c:
                    1c:58:33:22:b3:a4:a0:09:86:97:18:7c:d6:23:6a:
                    3e:b8:a4:e6:0d:44:1e:6e:66:63:a9:82:91:20:cd:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:C1:D0:0F:B1:1C:9D:4D:17:3A:57:6D:14:45:2C:3F:1D:C8:B6
            X509v3 Authority Key Identifier:
                keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:ab:e9:03:2f:0b:a3:6f:19:65:39:40:35:ec:75:c9:50:
         2a:b0:01:44:85:14:b7:b0:59:aa:f1:b4:80:c0:f8:34:2e:10:
         7e:5d:fb:45:2b:19:e6:28:11:a0:d8:f1:1c:c5:4c:8b:a0:59:
         01:1f:39:d7:d4:7f:a4:3c:f7:9f:45:1d:a1:11:58:d8:a5:27:
         d8:c6:38:10:9c:f0:7b:a5:7e:cf:93:d4:96:13:7f:00:fe:b7:
         7f:a9:2b:00:98:2d:90:28:97:ca:da:19:c1:03:2a:7b:67:77:
         82:bc:81:e5:84:a4:a2:de:5e:eb:55:37:19:57:c8:7c:84:b6:
         39:77:7b:51:3a:5d:05:0c:05:05:93:6c:b3:38:9c:b3:c8:f3:
         76:f8:4e:4a:01:db:e2:c8:07:5d:c6:1b:d9:79:44:6f:9a:c4:
         8b:62:89:e7:e5:78:39:b9:4a:97:19:1f:fa:99:be:4e:fe:da:
         55:f1:b8:bb:2f:54:54:3f:e8:22:bf:d3:52:97:4d:e3:2b:f4:
         33:82:92:fb:ae:58:57:0a:7d:60:33:65:6b:4e:d7:60:45:4a:
         b7:79:91:42:11:a6:a4:8a:fc:cb:bb:02:c3:8a:64:19:d8:25:
         77:d9:81:32:86:ff:2d:13:48:a7:ad:cf:a7:65:29:7c:7f:8f:
         fc:6f:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:34 2026 by rpki-client