Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          KeahcbFyqDf+jeEMMr73ik4U/OIEQdzporcYS3YjHw0=
Subject key identifier:   D2:20:4E:59:19:19:20:7D:FA:2F:B3:DA:00:FE:CF:BE:42:C7:C1:51
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       019D2A047596983D831F5FA6D6CA9318E721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          09DF
Signing time:             Thu 26 Mar 2026 12:00:28 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:28 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:28 +0000
Files and hashes:         1: 5xcULEXJhAck2X3qSP8xz7T9G-o.roa (hash: L1vo/nUKyB+0yUrl8+pdC9ZQEzyHlRxVr24n4uul9bE=)
                          2: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: NmtV3VxdtS+31HyDx4/jf2d3voL5i7J5POPMBcRaYxw=)
                          3: dApPkRCoN-4Urelwm8bwQW1vX9s.roa (hash: 7RPQ25TwZLmclWDefX866Q2Hh9AqUtARbcj7dGOX/SY=)
                          4: idnfdrhgXtDVR1aINwgs1pF-5Z0.roa (hash: Zsu78wjZemkpbnYJp/D0qkjG+mU9xm9vmrGoqAJVwMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:75:96:98:3d:83:1f:5f:a6:d6:ca:93:18:e7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Mar 26 12:00:28 2026 GMT
            Not After : Mar 27 12:00:28 2026 GMT
        Subject: CN=d2204e591919207dfa2fb3da00fecfbe42c7c151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:07:e6:10:ee:76:2b:e9:41:10:12:51:83:
                    de:31:15:4a:be:8c:f5:6f:ca:10:cc:e0:f3:9e:c4:
                    15:88:d5:db:eb:a1:c1:26:22:4f:47:46:0b:5b:d2:
                    39:eb:eb:ba:0e:2b:9f:cc:be:48:3d:ae:7a:1f:c8:
                    5c:0e:13:bc:8c:cb:78:31:2e:52:6f:44:13:fd:07:
                    62:21:26:be:0a:89:5d:65:f8:49:58:21:33:b3:1e:
                    45:9d:2a:c1:ed:2c:ca:c3:56:4a:4f:19:ad:12:1c:
                    57:e9:bb:8e:f3:45:31:8b:70:a8:4c:95:08:02:cb:
                    3a:c0:a3:a1:f8:0f:6f:4d:36:c4:09:cd:48:8a:6b:
                    a4:30:d1:43:ca:41:f5:2d:00:ca:02:8d:43:77:78:
                    69:98:f3:df:92:38:b0:6d:dc:3b:73:17:23:89:41:
                    fd:45:14:7e:e5:e8:43:95:9a:82:89:6c:27:87:7c:
                    0c:4f:75:dd:8d:76:6b:ef:b5:72:aa:35:b6:d0:74:
                    51:11:a7:92:63:52:da:aa:09:3c:75:bd:f1:7e:4a:
                    17:68:87:bc:4d:41:92:5c:e3:14:af:d3:35:d5:24:
                    42:c2:ad:ac:18:8e:29:ef:d1:11:32:de:e6:68:ff:
                    8b:45:86:8d:f6:31:76:45:46:28:0a:ee:83:92:29:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:4E:59:19:19:20:7D:FA:2F:B3:DA:00:FE:CF:BE:42:C7:C1:51
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9d:8f:0d:b6:6d:e9:4e:2f:7c:de:13:41:a4:7d:2e:da:9c:
         03:3a:6d:61:8f:68:a3:1d:85:db:34:44:ff:6e:cd:95:be:9b:
         51:e3:40:d9:d8:ba:5f:0b:d6:ea:37:f0:79:c0:eb:0b:c9:9e:
         cd:71:bc:44:1e:58:5e:c2:73:54:fa:86:93:e3:63:33:23:b0:
         49:cd:eb:6d:62:34:ad:55:e1:76:54:ba:03:a9:45:ee:af:6d:
         25:2a:b2:8a:d7:35:56:e7:56:d8:7a:3d:4d:35:c0:0e:a6:4c:
         49:8d:83:3f:58:c8:f6:5c:85:bf:76:a4:61:71:35:b5:cc:f2:
         91:62:55:02:90:dc:da:4e:d9:02:55:4a:37:c2:69:93:21:43:
         9a:d8:ec:71:10:ba:38:1c:ff:7e:74:c4:6b:cd:f6:08:e3:56:
         04:bd:8d:21:65:14:95:d0:04:bf:49:c4:52:6b:db:0d:2f:ce:
         7c:f9:3c:e8:14:e5:8f:f7:70:e9:20:07:d8:48:c7:7f:fb:1a:
         b7:be:29:ed:46:4e:9f:f9:da:a9:ed:d2:60:58:82:c2:a7:07:
         c5:91:20:c1:3f:9e:fc:ad:c6:0e:39:d5:2e:a7:44:0c:70:ec:
         e6:90:03:c3:cd:cc:bd:87:eb:5f:4e:39:c0:3f:75:f6:d9:25:
         51:50:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:38 2026 by rpki-client