Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File:                     rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier:          BIOzGIkKJaGoNVMGYfxLX88OSBxEJ+dvXMSz95u3UnA=
Subject key identifier:   F2:69:E6:3B:F9:D5:BA:44:00:13:F3:80:7E:08:03:CA:08:39:4E:53
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer:       /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial:       019D265FC570ABD0EC4DEE42B9FCD6563510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 19:01:43 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:43 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:43 +0000
Files and hashes:         1: TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa (hash: YzLzlBSzxjBcEeB8/fSR9TVjgk9aSxEfekBZqcoz880=)
                          2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: MHKlTFkJW8fCQfGQ3FV3cMDuHegxTEyVpwjskTl+Z1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:c5:70:ab:d0:ec:4d:ee:42:b9:fc:d6:56:35:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
        Validity
            Not Before: Mar 25 19:01:43 2026 GMT
            Not After : Mar 26 19:01:43 2026 GMT
        Subject: CN=f269e63bf9d5ba440013f3807e0803ca08394e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:ae:ac:b2:fe:00:5c:98:b5:0d:4a:89:1e:
                    ad:3b:18:7b:2d:c1:45:ac:fe:f6:17:7d:f9:23:94:
                    05:66:e6:c0:ac:fe:99:08:7f:73:ae:a4:43:25:30:
                    da:e8:4e:02:2c:0d:ed:08:62:ab:93:8f:e1:aa:c8:
                    f6:60:a0:d3:b1:0c:5b:1d:1e:1e:01:fe:ad:bc:01:
                    d2:78:ff:0f:ec:55:12:da:dd:4c:0e:d6:e2:ca:01:
                    27:15:88:d6:4c:01:d9:9a:47:e9:08:31:d4:f5:55:
                    df:07:47:e5:88:8f:df:09:18:5c:f9:68:ab:bf:26:
                    ba:05:9f:e6:5b:51:78:5e:27:ab:9c:ad:82:a3:b7:
                    1e:fd:06:ab:e8:63:e5:3c:8d:40:96:73:4e:a6:34:
                    58:e5:fc:79:60:dd:63:d9:c6:9d:95:63:d1:18:10:
                    10:1a:21:9f:b9:8a:36:7c:b0:ea:ae:7b:5b:9f:11:
                    ea:22:e8:23:83:00:61:48:e1:65:4f:7f:4b:42:b5:
                    b6:78:f9:06:d3:46:a7:5c:72:f3:0c:d7:10:f8:49:
                    05:8a:f0:37:8d:d2:51:0c:be:69:9b:b7:9b:0a:97:
                    f2:16:de:44:d3:c9:ef:06:10:19:72:c0:cb:c0:17:
                    f1:99:55:62:97:4f:52:16:2a:84:dd:9f:73:cf:f3:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:69:E6:3B:F9:D5:BA:44:00:13:F3:80:7E:08:03:CA:08:39:4E:53
            X509v3 Authority Key Identifier:
                keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:a3:90:6e:53:23:d3:78:bf:ab:5b:db:38:63:90:f6:98:
         00:0e:94:4e:cd:f5:af:d6:a8:cc:f8:be:7b:20:38:58:0d:88:
         c8:c6:b7:79:e8:d7:f4:28:f3:d8:c1:42:d4:70:e5:a0:60:9c:
         4c:bb:41:16:38:5d:80:1e:9b:f8:8b:d4:65:f3:60:c5:27:02:
         94:59:29:9b:9f:fe:be:03:07:fe:ce:9d:7f:c2:f6:12:fa:44:
         ee:24:8d:17:7b:e0:42:a4:c7:8e:1f:34:67:7b:f6:ae:29:fa:
         eb:02:4c:c1:7e:7c:8b:ae:63:0f:ec:ea:31:a3:fc:95:4b:ea:
         ab:51:bd:de:e3:cf:af:02:e3:5a:53:4e:13:51:29:bf:f9:b1:
         e6:21:70:25:61:d3:ba:b2:36:42:10:6c:37:4f:e8:27:ad:79:
         e3:0e:c9:98:58:e6:1d:f5:a4:fd:93:e1:16:d6:d6:d9:09:13:
         f7:86:cd:a1:02:54:b7:11:5a:a0:37:67:87:36:70:9f:59:01:
         08:a7:94:76:b9:b3:71:b1:03:b4:f6:5d:dc:27:8f:03:f1:31:
         93:ca:0a:af:a6:1b:e5:6b:2e:26:32:2c:42:3b:97:45:b2:0e:
         f7:1b:d1:b5:72:15:9b:b6:66:9e:8f:28:21:20:5e:ed:f8:aa:
         fe:89:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:44 2026 by rpki-client