Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File:                     oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier:          zYnpXsR9AH/UZFHPi6DGm8InGx32n3DYahz/BFdFLQc=
Subject key identifier:   18:F1:C7:5F:C0:3C:2A:C5:4C:12:B9:4F:CB:D7:0B:87:DD:78:52:6A
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer:       /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial:       019D284D4D013867A4998DB0AB06E1441E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 04:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:47 +0000
Files and hashes:         1: 7YFanazp_Hk_jwwFignJKO3DKAI.roa (hash: nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=)
                          2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: UAiEeASJgTEtb7bhEK4KR2/cda7BuMFlhHH1xXMno7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:4d:01:38:67:a4:99:8d:b0:ab:06:e1:44:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
        Validity
            Not Before: Mar 26 04:00:47 2026 GMT
            Not After : Mar 27 04:00:47 2026 GMT
        Subject: CN=18f1c75fc03c2ac54c12b94fcbd70b87dd78526a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:fb:8b:80:6d:67:28:10:e2:a1:0a:d9:37:
                    4e:5c:6e:77:f9:3a:6b:38:f5:cc:0b:68:70:da:18:
                    22:78:bb:34:0d:95:f4:f2:9f:22:e3:ad:9f:c6:8e:
                    fb:f9:47:01:23:c0:b2:f0:16:46:47:f6:2a:f2:f8:
                    05:ea:81:a5:78:7c:02:8c:26:74:0a:c3:3f:a9:d7:
                    77:fa:a7:1a:c4:e8:a5:25:28:28:fa:e1:15:d8:7b:
                    d3:ec:96:80:a7:f1:27:4e:ba:bb:fc:79:9f:ae:50:
                    a7:d8:3e:09:6f:eb:fb:89:0c:50:ca:d8:92:a5:cf:
                    53:32:e9:9d:26:47:d6:77:c5:3c:63:4c:83:a9:9b:
                    02:a5:f0:c6:f2:4b:56:ce:fe:f6:02:be:8b:39:a1:
                    d1:a1:d4:bd:ed:4d:64:ab:ec:ed:74:3d:10:45:90:
                    cd:9f:01:73:af:93:ec:6b:08:3d:9d:ff:41:3c:f2:
                    90:7e:5f:aa:f4:f0:df:70:e4:86:88:15:8d:64:f7:
                    4c:67:cd:2c:f0:06:df:3d:2a:c1:03:2a:b2:a6:5a:
                    d0:d1:b6:7b:4b:9b:f1:c9:69:de:69:bd:6c:fb:9b:
                    a4:0c:5b:c7:fa:5c:57:51:5d:39:ff:77:d7:8e:fc:
                    ad:4e:3b:f9:5a:c9:6c:ac:68:7f:27:46:ad:c1:f9:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F1:C7:5F:C0:3C:2A:C5:4C:12:B9:4F:CB:D7:0B:87:DD:78:52:6A
            X509v3 Authority Key Identifier:
                keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:3c:f4:9a:7d:0f:f7:67:61:dc:7f:bb:6b:8c:30:b5:8e:
         fe:22:ae:2d:39:4d:36:6b:23:cd:59:b0:81:8a:49:a2:32:61:
         99:78:3b:73:c2:6f:77:02:4f:ae:49:5d:ea:8e:12:09:23:a8:
         e4:8e:b7:aa:6d:c8:c1:96:57:83:b7:e9:86:d7:84:5c:3a:1b:
         21:7a:c4:7f:ee:f5:73:2f:05:ae:76:39:d9:b2:84:0b:e8:4b:
         61:08:97:8e:35:93:ea:29:be:88:a7:43:4e:79:9f:08:c9:8d:
         0d:b0:36:a3:d6:9d:19:b5:3b:73:4d:a5:10:59:09:e4:26:44:
         9c:b4:cb:1c:92:d3:64:61:58:50:15:ba:cc:62:b2:fd:73:98:
         59:a4:54:27:97:a6:fd:86:47:8e:ba:2b:74:ac:09:23:64:9f:
         92:8f:5d:94:9f:47:09:f4:c8:ed:a9:25:b9:45:88:84:09:a9:
         92:8f:c9:d5:1d:f1:f3:2e:14:fb:54:d4:e4:3e:61:b5:23:11:
         b3:1f:26:e7:79:69:e7:13:b7:a3:95:cb:36:c8:fb:4f:55:57:
         51:05:fe:68:74:31:c9:76:0f:1c:10:d9:e7:55:45:4b:16:13:
         82:c3:90:4d:4f:36:04:7d:a0:a9:db:34:14:fd:0c:2c:dd:00:
         1e:94:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:43 2026 by rpki-client