Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          0UwDFCx/Uqp+ORFPECnQh2yakamh4jNx758OF8PoAQA=
Subject key identifier:   8E:F4:A3:EA:1B:7D:9C:4A:8E:18:76:F5:23:33:E3:CA:A9:91:94:04
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       019D25F12DCDE3802FFF18293D7B783CAF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          1459
Signing time:             Wed 25 Mar 2026 17:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:56 +0000
Files and hashes:         1: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: xuVRgnFzaM+WcVRym8+k9CHH1BnUBNpXho4QGsXfJUo=)
                          2: 8umYqKkmet5xd-0fIbeiYVgQ7FA.roa (hash: v/CUAHtjhSU0aoLwfnOz3uF4/xB1kAd8kz1X1QEYG8w=)
                          3: IQZgisUvqq6AOXyb4Rxfqw_msJ8.roa (hash: 4T4CN7TKv+CMYzGbaTe2HA/gr50fscRLXntOxAqEXZQ=)
                          4: QjniU9JKY3uxyaTTaMZxDIsoq0g.roa (hash: 3apOmupnDVjN1GZ9mnQi2/rmvUPEGD+OAOsFa+YiBwY=)
                          5: Y29egXPiMsW9V8mMeno5f1i_DA0.roa (hash: nkloI1U6cBcEsHKtfEkrQxaSlfy9yDL70Etn0mEQzrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:2d:cd:e3:80:2f:ff:18:29:3d:7b:78:3c:af:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Mar 25 17:00:56 2026 GMT
            Not After : Mar 26 17:00:56 2026 GMT
        Subject: CN=8ef4a3ea1b7d9c4a8e1876f52333e3caa9919404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:1e:4c:d6:3a:32:3a:be:e4:43:70:c2:61:
                    8e:83:ab:17:22:86:d8:fa:ea:65:90:b5:87:7c:55:
                    86:bf:fa:92:1b:58:60:fb:03:aa:1d:f9:88:32:22:
                    f5:b2:1b:69:98:27:b9:f4:3e:6f:46:47:18:b5:b8:
                    20:b6:3e:86:a3:96:3d:4e:0e:c2:c0:60:69:5d:08:
                    3e:8f:8c:a4:a9:e2:53:05:2c:f5:25:08:98:b2:25:
                    62:8f:6d:97:3d:72:c4:65:dc:26:a4:12:a2:f8:81:
                    58:e9:65:39:ca:b7:a6:23:da:f5:32:33:6b:ea:1c:
                    cc:43:c9:cb:e8:08:d8:96:76:04:64:cf:66:14:51:
                    15:34:25:0c:d6:d9:8d:9e:e6:21:94:f3:a3:a0:6a:
                    98:10:48:1e:d2:c3:f7:76:c2:83:24:07:2a:d3:89:
                    ef:4c:a5:cd:19:cf:d2:3e:4d:ff:b2:74:c5:9b:68:
                    e5:21:b1:48:37:79:83:08:fa:e2:87:85:a4:12:e2:
                    17:5f:32:c6:0a:52:c1:06:3d:73:ab:08:36:84:a0:
                    85:91:a6:69:71:49:6c:d2:a4:c7:14:a6:a5:6a:71:
                    0e:1f:cc:f1:01:77:d8:cc:38:84:6c:41:86:6d:1f:
                    00:26:4e:02:f2:dc:9b:a6:b5:e5:6e:bb:35:b4:74:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F4:A3:EA:1B:7D:9C:4A:8E:18:76:F5:23:33:E3:CA:A9:91:94:04
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:1a:3a:3a:23:6a:2c:7d:7d:03:36:9d:0f:1f:9d:34:54:
         3a:be:b7:58:bc:96:68:5f:e1:de:57:7a:d1:e7:a1:00:9e:08:
         f9:14:02:dd:57:bc:05:8f:e2:93:d2:6e:23:ad:8b:be:96:03:
         e8:de:46:1b:1f:14:e9:c1:c9:e7:5a:73:12:f9:be:71:b4:2a:
         52:df:bf:4c:cd:58:4d:79:d3:9e:f1:e2:c6:4e:73:57:8c:e3:
         e3:b4:e9:4f:d8:82:00:5e:83:45:6a:42:27:0d:86:20:0a:9d:
         58:df:8e:0c:56:00:64:0a:d9:30:2a:03:d7:ce:98:df:4a:d5:
         c6:99:5c:be:9d:88:1e:3a:4b:d6:4d:d8:a0:03:97:0a:a0:eb:
         50:c7:0e:40:6b:c9:3f:53:52:ce:96:b5:f6:2c:1d:29:ac:22:
         22:13:58:94:e3:a6:bd:ca:09:75:e0:fb:81:b9:a5:31:26:9d:
         f8:73:72:5e:b6:02:1c:f9:f6:04:32:ff:69:aa:16:7b:78:02:
         59:1b:a7:a3:bf:5d:80:21:a9:0c:16:02:16:64:af:b5:6c:e7:
         45:44:60:84:bc:66:dd:5d:cd:d2:81:b8:f7:99:a2:23:66:7e:
         15:5a:73:46:92:26:09:c0:13:5d:e3:ab:84:b9:f4:3d:38:af:
         31:e2:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:24 2026 by rpki-client