Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File:                     tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier:          O4VZXOjXsHq92Qx17dnT7ImNtJWnNWYuG9qZ0mK/TI0=
Subject key identifier:   5D:55:1E:BC:C8:96:31:88:B8:60:39:91:0B:9F:0C:C1:58:A3:27:1C
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       019D284DEEAD467AEBD0E01DEFE1F5BD9352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number:          1283
Signing time:             Thu 26 Mar 2026 04:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:29 +0000
Files and hashes:         1: KK_vhx-Jl1M2bFbv57SyFM6Oy1Y.roa (hash: zVj3lj20TcX9NC6Ya6/FsxhHDDRzLpQa23Y4dZIhMtI=)
                          2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: FQ3eG6qQqLj4B8FJoSfvg/IJyJI/Lgrgs89EAjfp9T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:ee:ad:46:7a:eb:d0:e0:1d:ef:e1:f5:bd:93:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Mar 26 04:01:29 2026 GMT
            Not After : Mar 27 04:01:29 2026 GMT
        Subject: CN=5d551ebcc8963188b86039910b9f0cc158a3271c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:6e:d4:4d:84:5f:d2:5f:94:dd:d6:77:67:
                    24:74:c4:ea:0c:2b:86:67:12:16:87:0a:dd:fa:9e:
                    f1:ae:ec:76:50:27:0e:ed:26:55:2f:0b:31:33:d1:
                    06:6a:63:51:04:4e:2b:8a:be:64:b9:cc:6f:a7:a8:
                    56:7e:77:bc:99:bc:4e:09:ca:e3:90:4a:48:25:6e:
                    cb:9e:af:74:3d:1d:19:f8:fc:6d:f0:a4:2d:aa:ae:
                    24:bf:53:70:c6:9b:bb:f1:31:45:19:c5:9b:d6:ad:
                    32:b8:0c:13:5d:bf:41:5e:ef:8b:5b:20:09:b0:5b:
                    95:bf:46:31:b5:a7:6a:67:0c:88:52:33:d6:f9:e1:
                    0d:17:4d:14:cd:df:fe:8e:4c:70:6b:b3:09:16:cc:
                    75:5f:de:d6:3f:cc:0a:7b:6d:c1:5f:b7:d4:d7:6c:
                    c5:1e:0e:49:ed:3b:26:00:fd:61:87:6e:2d:26:88:
                    49:88:42:71:0f:57:75:45:53:b7:48:1e:e5:3d:5b:
                    cb:31:bc:9b:89:90:b5:b3:74:1c:05:f4:76:a4:ac:
                    54:39:a9:be:85:a8:6d:a7:c7:74:c7:e1:1a:0f:70:
                    f7:20:85:8c:94:90:88:c9:a1:a4:78:27:8d:01:2d:
                    97:61:f7:99:e0:39:73:3a:52:df:95:99:a0:41:ee:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:1E:BC:C8:96:31:88:B8:60:39:91:0B:9F:0C:C1:58:A3:27:1C
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f7:73:89:fb:4d:cf:c8:cc:6d:6b:d0:05:83:2c:8c:3f:a5:
         0e:79:55:d0:6e:8e:24:ed:f0:70:af:01:cb:b0:cc:37:1d:c2:
         b6:75:02:c4:fd:a0:67:f5:f6:eb:60:5a:8a:70:bf:81:d6:48:
         a9:31:d1:5e:a3:70:6b:e4:e3:3b:6b:64:27:0c:9e:86:24:69:
         7a:d6:d0:39:07:ca:bc:57:fb:a8:9c:97:2b:e9:de:fa:5c:a7:
         da:42:0e:c2:a1:5d:a6:5c:75:10:58:5d:4f:75:a5:aa:77:d8:
         63:bb:d9:84:31:33:69:e7:1f:36:e9:d9:2e:2d:37:88:ba:15:
         4c:02:b4:2c:79:ee:80:1e:40:50:03:15:e8:4e:57:2a:4f:b5:
         42:78:f8:eb:c0:b0:96:f0:4a:54:06:5b:71:83:26:9c:1f:81:
         96:fd:96:fc:d9:15:2b:99:4c:f8:36:58:80:99:7e:d5:c8:19:
         b4:01:cf:d3:b1:52:dc:4c:a9:83:e2:ff:29:48:1b:92:72:e6:
         e1:b0:cd:03:f0:36:3c:62:49:6f:06:78:a8:b0:a1:07:74:cb:
         22:d4:c3:89:a4:c3:ab:2b:41:c0:f3:c2:3d:4c:c6:53:f2:c6:
         48:3a:0e:1b:58:f9:63:e0:02:5d:e8:3c:6f:a4:3b:a0:74:01:
         81:81:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:22 2026 by rpki-client