Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File:                     dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier:          1GTfdPuk1/mpzAqxJbtwyOp10MQ05VFGd5wYKvf7i2s=
Subject key identifier:   67:33:61:CB:B6:E1:96:20:DE:E3:02:92:ED:8A:B8:D2:41:9E:E4:7D
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer:       /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial:       019D28F20BBABD04428988456B4D594525B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number:          184B
Signing time:             Thu 26 Mar 2026 07:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:44 +0000
Files and hashes:         1: QORmhi_9epbeW9LCcd6n0EGtUY8.roa (hash: yh8fGZBqg446G7IvQWeFZ53Dmb/4eGEcmhE71J/WqVg=)
                          2: VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa (hash: 31aRf+y4KMCXXKPf61vmEKuD5SrxcJx1XR4Sfcx1mPk=)
                          3: d1KZjcdpNHIYVpiceFKi35WBNOI.roa (hash: bhgrHFOFhyZ/ACw8GjeBW0aMegg7PL6RgkmabbugbK8=)
                          4: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: RRlVdwXGGWkmdk3T3066c2/rV7Z0uuxFAygeMYs63wA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:0b:ba:bd:04:42:89:88:45:6b:4d:59:45:25:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
        Validity
            Not Before: Mar 26 07:00:44 2026 GMT
            Not After : Mar 27 07:00:44 2026 GMT
        Subject: CN=673361cbb6e19620dee30292ed8ab8d2419ee47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:db:85:21:eb:ab:e1:84:8e:e9:d3:ed:63:
                    99:2d:4e:cc:10:38:b4:49:01:41:33:b2:26:d4:2a:
                    ac:d6:05:10:9e:ba:0d:d0:a0:b8:51:ad:72:bf:85:
                    c6:91:db:d4:70:7c:e9:b9:97:fd:88:6e:96:6a:99:
                    82:86:af:df:ee:df:33:79:98:f8:f5:63:61:7f:e1:
                    69:0b:44:fb:fe:c6:d3:69:7d:62:06:75:35:65:59:
                    5e:ee:ea:3a:cf:ac:bb:1e:5e:48:7a:61:0e:38:f7:
                    f7:65:26:87:4c:f0:cf:5a:70:8b:ca:05:b8:20:12:
                    ae:11:f6:b8:46:b8:c3:d2:76:fe:b6:c7:5c:f0:34:
                    a8:07:10:e8:99:34:f0:8c:85:d8:39:2b:78:7d:f3:
                    74:6c:58:0b:fb:d5:68:06:3e:f8:b0:a3:ed:e4:a9:
                    d2:7c:25:e0:d1:26:ef:21:58:ed:6f:1b:c2:dc:17:
                    08:b9:68:e4:69:b8:24:73:78:d3:9f:ab:90:fc:ee:
                    83:7c:2e:69:a2:d4:f0:61:33:69:c1:0c:d9:49:67:
                    db:5e:0c:11:d8:73:a0:83:42:16:77:9a:1c:09:17:
                    a4:83:37:26:8d:f9:9b:9a:5f:a1:ec:de:a1:37:dc:
                    ac:d8:86:72:9c:55:99:a1:1b:44:61:c2:38:bf:a7:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:33:61:CB:B6:E1:96:20:DE:E3:02:92:ED:8A:B8:D2:41:9E:E4:7D
            X509v3 Authority Key Identifier:
                keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:e6:e4:cc:d3:32:ca:4b:18:f1:7f:d9:df:58:d3:86:4f:
         ea:93:58:8d:66:a1:0f:e6:d6:2d:d5:ee:c5:ce:ea:ed:0a:96:
         6a:85:77:60:5e:e2:d2:26:eb:58:05:c5:18:08:0b:4b:87:08:
         93:ee:9d:1e:54:1b:2b:75:a1:af:88:99:3a:a1:d4:81:a3:08:
         d2:24:68:23:47:ca:c8:0e:da:c1:ec:bc:09:6b:ff:57:3b:e5:
         80:1c:b0:d6:69:e8:67:94:aa:d9:e8:74:b1:0d:8e:00:17:79:
         39:9d:e8:36:5e:31:8b:39:0a:4e:0a:7e:3f:8b:ca:16:10:f5:
         e1:34:3a:62:d7:10:5c:5e:e8:cd:6d:36:24:86:27:00:b3:3a:
         c1:77:95:a5:ac:0c:38:c5:84:a1:d2:37:0e:4c:80:63:8e:a3:
         7a:68:17:7b:f5:9a:37:38:1c:2f:2b:3e:2d:e8:5f:34:f3:ca:
         bc:8e:d0:fe:c4:57:e7:44:f1:ac:46:40:77:2a:08:26:ec:3f:
         66:1a:7f:53:9b:a0:be:52:01:f0:08:d4:27:bb:f7:9a:a8:e6:
         51:40:60:52:8c:1e:ea:87:62:1d:7a:aa:9c:d0:56:13:3c:d3:
         92:f9:ff:a3:40:b2:80:c5:ab:d1:2d:0b:d9:13:f8:1d:f6:07:
         c8:cf:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:05:32 2026 by rpki-client