Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File:                     t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier:          MYT6cVXoGfyra27de5u+OlKxFTujjFeC6uBBC9qHJZE=
Subject key identifier:   02:AE:92:B5:5E:5A:80:87:80:28:3B:A5:E1:E2:47:21:CD:96:19:63
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer:       /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial:       019D273B28FD1C3D498F270842153128D7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number:          0C29
Signing time:             Wed 25 Mar 2026 23:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:21 +0000
Files and hashes:         1: 05V7aSJJ1574Uj3BMJbyX1CU_Ks.roa (hash: W1ncaFZ2XrRWuQQ6O9v0I+g6Zq1amGJBP+gX3AlUnTA=)
                          2: qBJbZnYV1KV7wH9ev9pGNSEQh6E.roa (hash: VGKLyWCJAQaeOmHD9SkgJRFIt3cHdxbsxgp1SXLcvmY=)
                          3: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: SVRQMOgSaqigEhKlJaoN3ws0fOrvKs7AAUDOu0J3PQw=)
                          4: wr64Qkyhhg94kKtHi11AmFA9j-0.roa (hash: Mf2dT8r50MOCzgq5UCOMg4z4yEZJfDirWvZn2rKZ9bM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:28:fd:1c:3d:49:8f:27:08:42:15:31:28:d7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
        Validity
            Not Before: Mar 25 23:01:21 2026 GMT
            Not After : Mar 26 23:01:21 2026 GMT
        Subject: CN=02ae92b55e5a808780283ba5e1e24721cd961963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:8e:f5:57:51:0b:da:fb:b9:58:7c:92:58:
                    7c:5d:cd:b1:48:76:3e:d0:55:9f:a5:6f:b1:db:7d:
                    03:c6:c8:fd:21:38:e0:7c:20:1c:7d:5d:01:31:ca:
                    6e:1b:3b:ed:bd:ad:2d:b6:41:1c:6d:b2:fb:76:97:
                    49:19:ea:67:fd:fb:2b:54:fd:27:55:15:31:66:5f:
                    57:53:e9:ea:62:06:e2:f4:49:35:70:79:7f:75:fd:
                    0a:81:18:4d:75:ac:26:71:ac:c6:2e:06:50:8c:61:
                    e5:a6:ff:e9:eb:c3:14:f8:d1:de:ab:52:d7:ef:42:
                    38:7b:80:0b:38:48:7a:b3:37:56:7c:58:e1:03:93:
                    9d:84:dc:0e:5b:56:6c:d6:13:f7:e1:1c:76:9c:11:
                    48:2c:72:d2:98:fc:8e:03:a2:e3:cc:34:94:c2:9d:
                    87:36:5a:e1:1c:de:0f:73:f0:c3:d1:b1:c2:02:74:
                    75:c8:2b:4b:4f:d4:c5:08:7d:de:94:a7:10:fb:e3:
                    86:54:ec:bb:1a:13:74:68:3e:80:fa:a9:0e:66:83:
                    94:dc:39:18:e0:3c:b2:e7:1e:bf:ed:47:88:94:b0:
                    aa:1b:ab:6c:81:d3:2a:2f:68:2c:6b:9d:0d:70:ac:
                    5f:d5:64:cc:6e:cd:20:1f:8c:c9:dd:4f:8e:76:08:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:92:B5:5E:5A:80:87:80:28:3B:A5:E1:E2:47:21:CD:96:19:63
            X509v3 Authority Key Identifier:
                keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:dd:e0:d1:9d:43:c3:75:66:14:8b:db:c2:fb:8d:01:97:71:
         8d:03:a0:68:16:77:c6:f5:57:7e:85:3e:a1:75:78:92:e6:1d:
         de:f2:f0:50:77:36:11:b8:60:76:8f:16:f6:bb:44:39:c9:56:
         e3:79:d2:66:bf:92:32:70:5a:12:50:58:ee:00:5f:96:a9:f1:
         60:e7:a0:db:6b:3b:de:44:ef:9e:6e:8e:ed:68:29:c2:3a:78:
         eb:ef:0a:b7:5d:ed:cd:84:e4:58:c4:a5:92:ab:33:5f:e1:d0:
         7a:39:99:db:38:22:fd:bb:9a:bb:d2:8c:c8:20:c7:62:d2:b9:
         03:3a:50:80:06:32:5f:e5:bd:6a:a0:e3:ff:01:db:3a:4d:f8:
         40:43:cc:75:61:97:65:c1:4e:e3:cb:57:f4:68:2b:91:89:65:
         55:a4:0d:9c:32:f8:1b:e4:63:87:c3:7e:f0:4a:1e:4f:86:3c:
         d0:f5:4f:f8:c4:10:70:53:da:50:1a:c2:42:c8:eb:03:f8:26:
         d4:bb:eb:57:1c:35:50:49:07:9c:bf:e6:dc:c9:4c:ed:81:76:
         f6:5c:42:eb:75:77:4f:b8:47:8c:80:4f:64:fe:8a:b5:82:93:
         f0:1f:4a:0a:14:5c:6a:3e:db:f8:a8:04:af:f4:4f:6e:35:a5:
         44:46:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:02:30 2026 by rpki-client