Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File:                     2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier:          jz9oEbBeuEZbqAb1YmLipDTW9aw+ZSIFIS2e+QC8Dzk=
Subject key identifier:   C4:87:39:17:AE:C9:A8:57:4C:13:DB:B9:35:32:D1:CA:2B:2C:7B:3D
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer:       /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial:       019D27728DCB1E3F84275CA221C33C523003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number:          0AD5
Signing time:             Thu 26 Mar 2026 00:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:51 +0000
Files and hashes:         1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: rD8oJU7QIAtLgPPQi1GRMxlNH9VaBZBddA32InlSY/M=)
                          2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
                          3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:8d:cb:1e:3f:84:27:5c:a2:21:c3:3c:52:30:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
        Validity
            Not Before: Mar 26 00:01:51 2026 GMT
            Not After : Mar 27 00:01:51 2026 GMT
        Subject: CN=c4873917aec9a8574c13dbb93532d1ca2b2c7b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:c8:49:8a:ae:24:80:07:c6:94:65:01:c0:
                    c3:17:70:1c:34:d1:8a:d4:57:52:a1:07:c7:c3:df:
                    46:79:60:8f:4d:6f:a0:f3:3e:80:14:ef:24:97:0b:
                    67:e9:95:85:b5:76:47:6c:ac:cf:cf:18:41:75:00:
                    49:70:95:d0:b0:d6:e8:9a:1f:6b:75:fc:63:41:d7:
                    2b:ac:51:ff:a5:a1:16:11:b8:74:1e:9a:ad:fb:52:
                    f6:b7:0c:79:1b:95:17:a8:4f:86:c0:a8:b2:a0:c5:
                    23:bb:d7:62:6b:8c:25:47:7c:df:c4:d6:2e:8f:0d:
                    17:83:32:f1:6d:99:c9:d2:76:e2:5a:51:ad:b6:1e:
                    89:5e:e8:e0:90:0b:ad:0c:6e:41:8d:8b:76:f7:27:
                    3e:c6:8e:8b:9f:e6:2b:06:59:10:83:9a:6b:de:24:
                    53:32:e6:96:43:97:4b:89:1c:bd:9e:3f:f4:a2:c9:
                    0b:b3:c0:d6:98:8e:2c:11:e7:76:ba:4e:8e:77:68:
                    bb:df:66:44:70:11:20:f5:20:ac:b6:ec:99:69:a9:
                    6f:f9:dd:68:bf:68:b8:d4:e2:86:dc:1c:97:0b:2b:
                    fd:00:23:3a:90:d0:1a:9b:5e:57:6d:3d:21:c6:b1:
                    00:5f:b5:46:01:d9:97:a0:0d:a3:9c:04:07:20:bb:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:39:17:AE:C9:A8:57:4C:13:DB:B9:35:32:D1:CA:2B:2C:7B:3D
            X509v3 Authority Key Identifier:
                keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:83:7b:cc:20:a1:e0:8f:b9:fc:8c:1b:d5:74:5b:e9:8c:
         a5:e1:7c:e3:d4:62:ca:f1:24:77:f3:0c:a8:bc:d8:a1:16:98:
         9a:de:9f:b1:14:d8:9b:32:04:d9:75:d2:e8:06:18:84:13:65:
         96:45:46:bc:f0:d3:a2:b9:37:ab:16:a4:a5:cc:38:42:c3:60:
         2f:07:90:6c:d0:b0:26:2a:7e:fc:7d:26:0f:81:ca:43:37:39:
         e1:5a:fa:f6:db:78:79:d0:b9:f1:1b:31:78:e5:bd:04:12:d8:
         94:c9:31:87:ff:62:c7:4e:18:aa:11:91:26:55:1d:31:1f:c5:
         51:84:af:20:02:a0:2c:65:53:56:92:f3:c7:ac:f0:7c:dd:d7:
         12:94:b8:5e:4e:1e:dc:e6:80:e9:72:7c:88:51:5f:b9:40:46:
         8a:e5:e8:42:42:b7:7a:83:92:d3:f3:3e:59:49:04:b2:94:d3:
         b3:89:2d:48:20:7c:01:1f:ec:c3:47:b9:c7:b2:14:d4:da:0b:
         30:ad:b6:d7:96:81:fb:b4:31:60:8c:8a:3a:a5:d6:80:f2:dc:
         ae:14:2f:33:00:32:87:d9:cf:d8:33:6d:df:ff:2a:28:56:f6:
         39:e9:b7:e1:81:21:9f:ed:f0:dd:91:4c:a0:b3:40:f1:64:da:
         2a:d1:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:27 2026 by rpki-client