Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
File:                     svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json)
Hash identifier:          yqGvW8u+x6ZZ19/yHXLLmKY9YWIuTE/wLHw2PLURDzc=
Subject key identifier:   16:D7:8E:DA:94:22:6A:A6:76:36:80:2F:19:1A:A2:F0:C8:37:7B:CA
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Certificate issuer:       /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial:       019D32D100C57FD2569BE27C82FFFB4CCA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
Manifest number:          1220
Signing time:             Sat 28 Mar 2026 05:00:51 +0000
Manifest this update:     Sat 28 Mar 2026 05:00:51 +0000
Manifest next update:     Sun 29 Mar 2026 05:00:51 +0000
Files and hashes:         1: gz48DT8yvVXU6Q0Ihpo8uWF9ZyY.roa (hash: uFF29kwOP7JuhrlKM9SjwTrWnoX0uyBEFJr7qMFIhn0=)
                          2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: gcssaFU87hEBx4AsIB8C1embuT3+etVj2LdM8WrXpag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:d1:00:c5:7f:d2:56:9b:e2:7c:82:ff:fb:4c:ca:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
        Validity
            Not Before: Mar 28 05:00:51 2026 GMT
            Not After : Mar 29 05:00:51 2026 GMT
        Subject: CN=16d78eda94226aa67636802f191aa2f0c8377bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:ed:ce:b6:15:8a:c4:e6:db:76:03:ff:7d:
                    25:bc:92:38:ab:c2:a7:7a:d5:4f:b9:e0:fd:9d:b9:
                    af:94:51:29:f2:b2:ed:d7:54:43:3b:b7:6b:de:8c:
                    d7:ec:e3:21:7d:1c:b5:cb:b7:24:c2:70:74:61:9b:
                    7e:4e:ee:45:cb:38:23:6f:50:c9:f1:10:be:59:89:
                    1f:83:87:81:fb:17:e6:5c:28:5a:86:86:34:5d:34:
                    ec:5e:29:8e:d3:16:d7:44:35:8f:68:39:d0:e9:3d:
                    c2:1f:e7:18:42:f7:14:e6:9e:b7:af:5d:6a:62:b6:
                    42:a9:38:43:ed:94:1b:59:a9:04:fa:33:50:4f:b4:
                    5e:f4:bf:b9:03:ff:53:a6:58:99:24:a0:00:33:e2:
                    f8:7d:ee:07:9e:0c:58:40:8e:cd:fc:c4:85:50:07:
                    a6:8c:60:d2:c0:14:24:db:38:83:76:3d:c9:2e:a6:
                    bf:1b:6f:a0:df:f3:ee:a9:54:fe:a1:24:fc:6d:44:
                    b7:0f:de:2f:4d:e2:94:17:89:35:6b:ec:df:34:e6:
                    62:48:33:d0:fa:98:6e:f0:f8:49:31:3b:ea:55:36:
                    d1:91:6f:01:7a:81:ac:15:3b:5c:59:76:13:94:3d:
                    83:7a:8b:4b:bf:df:26:56:a0:35:8c:78:2b:88:d0:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D7:8E:DA:94:22:6A:A6:76:36:80:2F:19:1A:A2:F0:C8:37:7B:CA
            X509v3 Authority Key Identifier:
                keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:22:90:7a:63:4d:85:2e:85:45:eb:1d:86:f5:15:9f:ec:4d:
         ff:09:dd:53:f9:f0:5d:b6:25:d6:56:7e:73:51:7e:1f:40:13:
         77:01:36:74:c7:a6:f6:b5:a4:ef:cf:59:0f:98:e8:9c:2f:10:
         dd:5f:3e:ec:7e:b4:aa:ee:23:e8:9f:53:0f:bc:c8:6f:78:8f:
         c0:89:05:9d:3a:0b:f4:3a:05:ac:48:84:a0:4b:4f:69:94:2e:
         13:72:65:dc:6d:dd:9c:93:33:d2:e5:9b:72:89:00:54:26:06:
         a3:6f:25:7b:3a:c9:ff:a0:ba:51:11:77:47:f8:46:a5:3c:64:
         f9:ad:fb:27:6b:5e:c1:12:9a:27:66:40:06:53:be:cf:4d:08:
         2f:33:85:d7:21:ec:fb:8d:6f:05:c7:2e:15:3c:75:4d:1f:f4:
         c2:fd:1f:71:95:9d:e0:2b:46:a5:36:91:47:04:25:31:22:bc:
         73:1b:89:d7:40:bc:24:e4:47:5c:24:c3:c0:72:03:2d:d6:9b:
         05:1f:03:be:8f:1d:8a:11:fb:40:27:5e:1d:d3:a0:6c:d5:21:
         00:7e:44:fa:04:0a:0c:67:7b:40:4e:82:6b:46:b4:6c:41:a6:
         d1:0e:7f:e2:5b:b3:89:aa:03:cb:c1:17:35:7a:00:fd:09:bf:
         cb:a2:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:21 2026 by rpki-client