Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
File:                     dvMR7xWBoA5DfNcEtigayGIa_FY.mft (raw, json)
Hash identifier:          8OrB0Wf43tC7UT1B+OqPZ1Cyarx55pwvIN+twJFncE8=
Subject key identifier:   E9:05:FB:91:F0:D5:33:E3:69:AE:FD:D2:C5:3B:5F:6F:BC:1A:2E:6D
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Certificate issuer:       /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial:       019D284D8D85DA88195C0D5EF62A256BB2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 04:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:04 +0000
Files and hashes:         1: EgjChhzCGWJh6V51f8ojCveMlfE.roa (hash: i4SrxX9zQ7sZ8KNvnrH9l0DYTEr6ZfYVUcw4c3JUaOg=)
                          2: dvMR7xWBoA5DfNcEtigayGIa_FY.crl (hash: 4l+EeYr9aGc/1R78BUjWDOY4M21Fa2DAsFI7VmQ4d34=)
                          3: ecxP7yyvs7CjkRo9KB8FI7T6FDs.roa (hash: 4i3J/7t1Nmd5wxQ9E88B1NzpAXYXfppM1pUv7/HsY1U=)
                          4: m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa (hash: CGzyhARdUayk5Rcj/oSQUQybGpjh4LHVdpnFc+0u73Y=)
                          5: vs9qa_eW2Cldpu5SYtJB_2StoHA.roa (hash: sQEg+HGHtbznkdfcmi0Loy8MM366S1BHj7BDrGmut4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:8d:85:da:88:19:5c:0d:5e:f6:2a:25:6b:b2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
        Validity
            Not Before: Mar 26 04:01:04 2026 GMT
            Not After : Mar 27 04:01:04 2026 GMT
        Subject: CN=e905fb91f0d533e369aefdd2c53b5f6fbc1a2e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:13:85:82:3d:97:25:db:f4:9b:68:9d:2c:
                    6c:f6:39:06:a2:02:9a:73:23:b6:01:06:77:88:af:
                    dd:99:ea:f2:47:d2:8b:67:5d:85:71:74:99:3c:cc:
                    40:16:f8:1f:d6:4d:ec:67:85:8f:94:73:ff:d3:92:
                    90:bd:18:db:84:ea:8f:dd:f2:30:6b:87:76:30:15:
                    6b:e6:67:7e:1e:45:19:b2:d5:fa:7f:1e:45:31:66:
                    f8:3a:39:54:a5:25:2d:37:97:58:65:7b:bb:ac:1a:
                    30:d6:8d:8a:0f:b6:24:b2:6d:a9:c5:91:36:8a:a7:
                    2e:00:dd:22:3c:0d:eb:4b:31:d6:50:7e:ab:d9:80:
                    c6:2f:1d:8e:76:b7:f7:15:a1:cb:0f:03:bf:f6:be:
                    cf:c3:e8:1b:db:68:7f:b4:a4:0c:fa:37:be:4c:0d:
                    13:33:e4:30:ac:60:c6:09:87:5f:1a:d3:cb:fd:3a:
                    06:a7:f1:d5:3c:07:55:8f:f6:fb:b0:34:a1:21:67:
                    7f:ee:4c:01:da:4b:4a:c0:bd:88:1e:6f:de:d6:14:
                    a3:f7:8e:b7:3f:ff:a2:53:65:52:6e:7d:b4:7b:a0:
                    57:ff:26:ba:72:6d:ca:a8:c9:01:cc:87:a4:3c:29:
                    a0:d8:d8:b3:af:7d:0e:78:00:63:b8:9f:05:58:39:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:05:FB:91:F0:D5:33:E3:69:AE:FD:D2:C5:3B:5F:6F:BC:1A:2E:6D
            X509v3 Authority Key Identifier:
                keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:4e:a7:79:e0:59:89:40:87:1d:9d:ed:83:7a:fa:f0:d1:
         2a:90:4c:3c:a1:2b:fe:e5:e6:15:be:52:7b:85:76:b0:8a:26:
         8f:f0:bf:aa:61:fc:d1:1c:de:ea:7e:31:d1:a1:9a:e7:62:c5:
         39:66:fc:97:ce:84:dd:76:64:b4:6d:52:d3:7f:e6:fa:31:6a:
         b8:f8:0a:c6:77:07:72:22:13:31:28:4d:dd:fe:f4:b4:2e:25:
         63:30:84:e8:3f:7f:31:14:57:29:a8:9b:70:23:7c:c9:2f:7b:
         92:46:a8:c3:fe:02:38:d5:34:cd:a6:b9:44:cc:85:ce:94:b1:
         46:cf:86:ac:b7:f4:66:fb:3f:f9:38:25:31:19:9a:55:82:8b:
         e0:99:0a:ab:d8:54:a0:4c:e2:db:e4:7d:b0:33:4b:28:15:bd:
         fb:87:13:10:10:8d:dc:d6:7a:32:ec:b8:0c:22:06:46:b0:50:
         36:4c:d8:e2:69:81:e7:0a:41:1e:a4:fe:10:fb:72:e7:45:5b:
         69:01:3e:1e:0a:f2:e0:88:a5:cc:31:82:be:c4:5f:4f:2b:28:
         fe:da:9c:7d:40:2e:98:aa:1e:a1:4e:c4:1b:1a:fb:ab:3a:2f:
         88:87:5e:7f:98:bd:a0:fc:ca:1b:57:df:0f:85:fe:cb:e5:19:
         1f:75:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:58 2026 by rpki-client