Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File:                     VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier:          kPHoig/Ctht5Yf1fQsEuA63/cy8TJ1JnLjAuKm/e/M4=
Subject key identifier:   5B:14:BA:63:8F:B3:85:D9:7A:DE:2D:EA:5C:34:11:99:59:B3:F0:06
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer:       /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial:       019D26CCE05FB798CD32B9723DA859CA748E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number:          1097
Signing time:             Wed 25 Mar 2026 21:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:54 +0000
Files and hashes:         1: GIExINokhwcbg0OUeNgfE09HShI.roa (hash: FQuoVhp9XDWSdYuRnvbaCGvu+1RkTk51gm85GviSXHo=)
                          2: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: ELnv99c0uaUG9Q+xf/ztJUQQcMB4ReW/PstMhCCpnQA=)
                          3: gwHt4E7Ep8A91X1uo64vmWMV_Bg.roa (hash: 9MbU3wiUehhHQEqRcUY/evQP0v+IWUVGHo3/lIKPhtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:e0:5f:b7:98:cd:32:b9:72:3d:a8:59:ca:74:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
        Validity
            Not Before: Mar 25 21:00:54 2026 GMT
            Not After : Mar 26 21:00:54 2026 GMT
        Subject: CN=5b14ba638fb385d97ade2dea5c34119959b3f006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:b8:04:c6:56:b0:38:bf:4e:d4:0a:3f:93:
                    15:b6:e5:44:43:c2:89:fc:12:1f:a4:3b:02:cf:f2:
                    bd:33:61:68:11:12:bc:e9:d2:64:e1:ac:f3:02:c0:
                    8a:fa:88:23:e5:d5:c0:3d:2f:ff:16:32:b0:28:75:
                    60:c0:20:f0:51:ab:ee:30:aa:a1:1d:01:fd:be:99:
                    f4:78:74:e9:b7:9a:4b:23:9f:86:09:48:a8:7b:05:
                    62:dc:2b:4e:7c:fb:87:6f:73:5e:e3:f9:d3:ca:9c:
                    13:7b:32:ef:55:f6:96:29:f9:72:27:0f:de:33:09:
                    2e:2a:8c:54:95:60:19:9e:ee:45:81:97:e8:ff:5e:
                    4a:d6:3a:a1:43:38:94:b3:9a:7c:11:e7:b4:01:02:
                    09:c3:52:b1:83:ad:a0:24:57:2e:70:ce:2c:48:a1:
                    ba:06:e5:fe:85:ec:f1:bb:b0:3f:9e:fd:cd:6c:c4:
                    39:ee:14:8e:68:17:3f:ae:20:85:ad:8b:58:d5:90:
                    d3:52:14:83:50:83:d0:d7:ed:18:2b:66:01:cb:bd:
                    25:e7:fe:eb:33:2e:eb:f6:b2:92:4b:51:06:08:33:
                    ef:58:6e:6f:cc:a8:a6:50:85:2d:af:24:c4:1e:c3:
                    6f:66:8a:65:90:1b:79:77:a9:a0:67:aa:66:b6:fd:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:14:BA:63:8F:B3:85:D9:7A:DE:2D:EA:5C:34:11:99:59:B3:F0:06
            X509v3 Authority Key Identifier:
                keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:b0:f3:86:ad:d8:1f:75:35:6c:27:cf:57:ea:b8:69:2f:
         e6:83:23:23:3b:94:6c:46:d5:8e:d0:47:e3:76:f4:25:33:2c:
         46:4e:cb:9d:43:4e:c1:5c:f6:21:b3:15:62:b3:8a:0d:28:4e:
         84:ab:32:fe:78:f1:1f:6d:2d:d4:25:e5:ae:af:9e:82:ad:a1:
         5d:69:0a:94:3c:e2:30:fa:cf:f8:a5:38:06:41:ea:8e:1a:56:
         76:75:38:a3:4c:ed:6d:11:3a:ce:8a:ee:4e:01:18:b3:63:ab:
         b2:d1:73:df:c3:d3:c0:f6:79:e2:b5:aa:20:63:02:78:20:bd:
         e6:de:0d:d8:31:df:25:f3:2e:0a:76:06:94:77:82:1c:c7:1e:
         b4:f4:a1:94:e5:e9:c3:92:9a:94:ea:20:a2:e3:1d:59:b7:19:
         bc:58:a9:b1:bf:1b:ce:aa:02:20:50:e2:1d:44:c2:85:f9:28:
         d8:ae:3a:42:85:92:41:90:57:28:96:b3:af:82:2c:20:21:f0:
         d5:15:23:64:60:80:e9:fe:ef:45:18:4f:d7:8c:75:6a:53:de:
         7d:8a:65:60:29:ad:de:b9:2c:35:4a:cf:38:22:b5:42:d6:5d:
         ad:f5:91:44:68:48:a3:5e:1c:71:d9:bc:62:43:2c:96:76:a6:
         ad:5a:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:04 2026 by rpki-client