Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          uTAbmv50Vnw04nWWdikuSPM7ZX9K0IXfgslu+vNwd5I=
Subject key identifier:   5C:66:50:F0:BC:CC:0C:04:12:82:BA:86:EF:00:83:F4:1D:E1:9C:77
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       019D2A045D963B3A9C6598DC01CB0B5037C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0D35
Signing time:             Thu 26 Mar 2026 12:00:22 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:22 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:22 +0000
Files and hashes:         1: RvemEYu6d9uXP0B24R0lC57HD8g.roa (hash: 9b4V5juxcrPJgnNUjLn/7LskPGWZqz+b2M3iYcgQ1TU=)
                          2: Te7hhMphvQ5EXJGUARJ2QmuB9is.roa (hash: VThy3BxGB0l0YexK6a3YlAdq8VXpKxHqVaWw46D49bE=)
                          3: alPF32vcZlTUO2FjOCdnGpcccJI.roa (hash: qcVlGmcJPOUYfeL5XleLKcxk84wFFFeO1Uoc+U/JJPs=)
                          4: fYCn4v8iFHoElnhPm0C9SUJygw0.roa (hash: NaE7YkLP9K4FMPCq8fK6cLrMNnOJGZccxSrQ3P0JIpA=)
                          5: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: EBjxIkkbdMAlcZe7iwvRcbdfSBA9fP6irOZvmFadEsU=)
                          6: ntmmZtCvWH1KgnK0mtBoZQdJAjE.roa (hash: 4hpauTiGCt/CjAVeMXrvC/dDlvUsOGjOLsKwSRTfhvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:5d:96:3b:3a:9c:65:98:dc:01:cb:0b:50:37:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Mar 26 12:00:22 2026 GMT
            Not After : Mar 27 12:00:22 2026 GMT
        Subject: CN=5c6650f0bccc0c041282ba86ef0083f41de19c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:8d:ca:04:78:34:05:b8:04:ca:68:20:64:
                    72:52:04:15:e4:03:ee:3a:a9:0e:93:78:2d:25:73:
                    e5:cb:d8:c1:1f:b3:df:dd:bd:0d:47:28:5b:eb:71:
                    7f:1f:65:17:0f:19:ec:f8:16:29:bb:28:5b:e0:88:
                    45:8d:00:45:00:e5:a0:2d:ec:73:49:39:31:5b:d3:
                    8f:e7:b1:40:5e:ca:7c:17:f8:17:27:b5:86:b1:1d:
                    41:cd:0f:1c:67:56:07:ef:c9:d5:f6:99:b3:66:bb:
                    99:7a:ec:0d:0b:9c:8c:30:94:4f:99:b2:0e:be:28:
                    62:4e:6b:20:35:06:15:70:c2:27:c3:dc:eb:7d:d9:
                    43:e9:7a:17:e0:4f:63:f2:2e:6e:13:90:b3:10:88:
                    93:cb:15:05:91:e6:d6:cb:57:fa:b8:2c:cb:1d:8d:
                    85:87:bf:a9:d5:e6:1a:42:71:20:f0:b7:81:a9:88:
                    7f:05:f1:e5:07:51:2f:83:91:93:ef:06:ba:7d:c2:
                    94:16:47:ab:fe:38:ac:df:fe:53:16:07:2d:04:25:
                    a7:e2:b8:ae:ba:8f:21:56:6b:3a:03:8f:20:25:4b:
                    58:83:aa:1b:eb:7f:79:05:36:5c:77:39:3a:ab:af:
                    a4:c0:2e:49:88:87:84:9d:97:55:3f:2b:7d:e4:d7:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:66:50:F0:BC:CC:0C:04:12:82:BA:86:EF:00:83:F4:1D:E1:9C:77
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:de:3d:ce:c2:a1:bd:8d:a0:8a:61:83:36:02:7d:68:7a:a7:
         36:13:b2:bc:db:d9:a2:91:e8:ff:78:70:0b:c3:5b:a5:54:cf:
         1f:cf:37:64:d2:65:4a:cb:03:41:4f:dd:1e:4d:17:89:25:d5:
         da:b9:1a:7b:1c:64:9d:73:c5:c0:c9:74:14:6f:29:d4:ec:13:
         16:a9:5b:05:e7:a4:c7:6a:f0:1b:44:9f:d8:26:91:f5:1b:75:
         87:68:ee:51:80:1b:6c:63:ad:46:19:4d:23:67:da:e9:f1:79:
         5a:bb:80:be:0f:1c:29:66:6e:86:89:98:5e:3d:b6:bc:0b:a2:
         00:f0:cd:61:c4:b5:b8:ae:5b:84:79:6a:b5:2a:c4:ac:df:77:
         43:37:64:a6:3a:f4:27:b7:e4:95:a7:7a:9c:13:63:99:0f:26:
         e0:e3:80:dd:44:81:98:3c:7e:73:64:4f:9e:90:97:07:70:3b:
         d2:7b:af:d3:0c:02:9e:31:72:9a:99:4a:ab:26:bd:e5:e2:0b:
         52:91:f8:4d:1e:4f:7d:b4:3c:ba:60:90:92:1b:90:98:d2:b8:
         bc:f3:65:53:dd:58:89:7d:f5:16:35:90:72:26:47:f4:be:ab:
         a6:6c:19:c2:06:24:9d:84:19:fe:41:ea:0d:ad:73:68:10:8b:
         3a:2b:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:29 2026 by rpki-client