Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          iHGVcE4jCZV6+ARcSZIivZKjppzIFDy+FMVD2TSGOs4=
Subject key identifier:   78:96:76:BD:72:73:40:D1:64:B5:41:77:F5:26:54:25:73:A8:F0:D4
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       019D2771F83F184212978806A8085A9FB67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          1175
Signing time:             Thu 26 Mar 2026 00:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:13 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: OxADYqk7/iqDpdARIu8fwt/HDD6bHSTb/9C/ny1OS8c=)
                          2: A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa (hash: ZJ8TUlGdBNBoCbzk5y55t6BbjVatJaYuCVCQyVMAmI0=)
                          3: Z03CvgZnFdZytl33-YciJtYTgkU.roa (hash: QAeqd5R10qGg/87fO27tsqGhGaG/xmcTXnHVP0UeCmo=)
                          4: mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa (hash: M+cnkCbpwUSVeDkZOpqH/x6dTTigBQw7I8bx8zhShTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:f8:3f:18:42:12:97:88:06:a8:08:5a:9f:b6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Mar 26 00:01:13 2026 GMT
            Not After : Mar 27 00:01:13 2026 GMT
        Subject: CN=789676bd727340d164b54177f526542573a8f0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:50:f1:96:4e:dd:e6:38:88:3e:7f:8d:37:
                    22:42:0d:56:58:1f:27:a7:da:94:17:32:9b:ae:7f:
                    34:3c:2b:f0:40:3a:6c:d4:ce:03:a9:0f:e4:25:44:
                    01:65:b8:de:39:5c:13:6d:a0:c4:8f:6e:af:62:ed:
                    d2:83:12:a5:78:c0:3d:30:1c:18:72:4c:67:de:c3:
                    fc:b1:5c:43:e0:4f:35:8a:5c:5a:a4:8e:9c:a1:3e:
                    97:a7:35:ff:4a:fb:2a:b5:ce:95:00:5b:9f:34:9f:
                    bb:15:41:92:34:82:ce:06:9c:25:4b:fe:46:c2:76:
                    3a:c7:84:66:a3:c7:71:89:ed:e8:d5:a0:9d:11:27:
                    c6:f8:28:c4:61:32:5b:46:8d:03:d9:ce:a1:7d:59:
                    f6:82:19:04:e1:d0:1a:b1:c2:31:df:41:08:a6:1c:
                    a5:ef:4f:8e:b3:9a:35:f7:3e:99:77:db:fe:13:b7:
                    36:19:95:ef:44:5b:c5:6c:5a:9c:d8:c1:20:fa:56:
                    4d:0b:a2:e6:d8:55:ae:fc:19:1e:c2:0b:c1:be:65:
                    32:b9:f4:c3:8e:bd:68:97:33:1b:cc:16:9a:11:bc:
                    3c:41:63:2c:e9:01:e4:0f:0e:8b:e3:6f:6b:ab:5a:
                    4b:66:8f:50:50:8f:b3:ee:a3:7b:54:db:41:e4:a3:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:76:BD:72:73:40:D1:64:B5:41:77:F5:26:54:25:73:A8:F0:D4
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:87:ee:6f:11:f2:2e:59:56:fa:7d:3a:62:d0:57:7c:5d:1f:
         54:ca:41:90:33:be:8e:8e:d1:36:d6:57:23:ca:1b:8b:c7:28:
         dd:18:82:4c:47:57:71:45:a8:aa:74:02:ff:f7:79:a0:03:af:
         69:35:72:51:be:7b:d4:c0:28:48:ee:a7:14:24:b7:9f:aa:4b:
         90:5a:31:cc:81:44:17:b6:3a:04:9b:59:96:01:2d:a0:1e:24:
         3f:d5:11:a2:50:6a:ac:b8:41:bc:14:d9:6c:8f:fc:5e:7d:79:
         b8:d5:44:28:3f:c7:5d:d8:1c:57:96:02:fb:cd:06:d3:0e:65:
         1b:0b:32:72:43:39:94:d8:28:4a:25:41:03:c0:8b:05:7f:3c:
         2d:d1:fd:51:e1:23:47:d2:3b:55:52:df:cf:64:57:d3:9e:f1:
         c2:d0:5f:a6:d3:d6:35:b7:1f:15:3c:22:3b:9e:4b:28:78:bf:
         1a:6e:20:2b:b6:6b:50:7a:f2:53:03:3c:9f:17:21:fd:4a:7a:
         30:83:fd:54:ea:72:56:dc:8e:e5:bb:13:e6:17:7c:27:a3:48:
         b2:6e:c4:ad:c5:39:e9:20:3d:9d:c4:2a:7d:62:4f:97:28:27:
         f5:7f:53:63:68:a3:47:c5:17:de:06:09:d5:4f:7e:86:8a:6c:
         a1:bd:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:43 2026 by rpki-client