Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          1v8w2C5A2HKasBj7Mb/Eojj5YjIyQVGdZuktKkEN/qA=
Subject key identifier:   6F:34:AD:A2:E6:EA:4E:CD:7C:1F:5E:52:7E:8D:A3:12:EA:74:6E:59
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       019D28BB8EEA9AA09C081F8E0530695A70A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          1398
Signing time:             Thu 26 Mar 2026 06:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:13 +0000
Files and hashes:         1: Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa (hash: PF/ed+k7gtadd5HsxTcEuV0PkSMYqzIOsEkgaO30wiM=)
                          2: M3kEZhwNAZH2MoRits4PT4v1XYY.roa (hash: 9BRevnCxVw2l/jCPOd7XDBAI+hID2up62MsIMKdFJLE=)
                          3: Ugs1R72eLpNOvqQLq80_hJnxxCs.roa (hash: HAAX/DAdp/HiBc6dDbGVPO1NxsuLn8+Z1EDMvgnvFTM=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: rP0DGdCG2C3Ibrf1M2xROkS/fMrwj/zEGtk15mExnHg=)
                          5: d1DdXgc0G77dhrd6ZdfdSd_hf70.roa (hash: VPxYVo5tR4ALJMz9uvC5RMlfofG9QR9Ag17Z6g94IPk=)
                          6: ldHMEOJiE59-H0cOPRmvSFACx0s.roa (hash: mOMIPtr1abOjWcrfM5eKbECfrNaucrP77WVejoM6ds4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:8e:ea:9a:a0:9c:08:1f:8e:05:30:69:5a:70:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Mar 26 06:01:13 2026 GMT
            Not After : Mar 27 06:01:13 2026 GMT
        Subject: CN=6f34ada2e6ea4ecd7c1f5e527e8da312ea746e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:e8:e6:bd:a6:82:45:f2:2e:f2:18:2b:49:
                    17:80:55:34:cb:e8:a1:32:84:ba:73:d8:e3:dd:6f:
                    09:ad:34:56:22:89:fd:ba:fc:db:6c:dd:bc:9a:2b:
                    4e:38:87:7d:97:49:65:b5:41:cf:00:61:b2:1e:7e:
                    cb:33:b1:d9:3b:97:93:b0:94:40:a7:86:45:68:75:
                    53:c8:ce:51:ed:87:7a:58:ac:3a:25:83:95:fa:91:
                    19:b8:a7:0d:5f:cf:c2:46:64:27:81:6b:10:d6:45:
                    1f:92:11:b7:61:de:0d:c3:70:6d:e7:81:92:5b:27:
                    49:3e:4a:a8:d2:25:b2:32:1c:61:b3:5f:c0:83:7e:
                    56:82:96:77:ea:0b:cc:2a:5f:1c:1b:52:d3:3f:57:
                    52:2e:86:f6:b7:55:80:e7:3a:b0:d9:39:c5:c4:83:
                    0c:a4:4b:da:ab:19:df:1f:4e:22:25:b8:89:96:06:
                    08:ce:c1:f2:e4:65:af:87:f9:1d:c5:fa:b4:db:17:
                    95:88:06:24:e1:be:c7:06:3f:7b:b0:2c:67:15:b0:
                    19:b8:aa:3e:22:91:32:7f:97:4e:85:0d:6d:ce:2c:
                    b7:98:ca:59:0c:4e:d4:83:c1:56:a6:c3:9e:da:5e:
                    33:82:47:0a:69:31:e9:f6:0b:30:ea:b8:57:a3:d8:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:34:AD:A2:E6:EA:4E:CD:7C:1F:5E:52:7E:8D:A3:12:EA:74:6E:59
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:01:92:e7:2a:4b:75:1e:d5:70:c9:e1:22:f3:25:35:7e:d6:
         f8:72:27:96:7e:9a:1b:b1:8c:b5:02:1a:2c:8d:08:e0:8f:a3:
         49:ba:a3:f0:72:60:15:53:b2:1a:84:a6:16:97:55:9e:68:25:
         c0:8a:93:30:9b:38:50:38:7f:5f:1d:fc:61:1f:28:1a:8d:3b:
         ee:cf:98:18:c8:26:68:bf:20:6a:a4:e9:e1:e0:98:29:dc:11:
         11:af:9b:ad:ef:d9:c3:af:e2:64:bc:79:7f:c3:a8:b0:90:31:
         93:35:a7:22:cf:5a:ad:76:f0:9a:18:2e:26:ca:56:d3:5a:92:
         aa:9d:4d:86:da:57:d3:7c:06:02:de:74:03:4c:27:ab:e1:ff:
         f9:18:ef:9d:10:39:1f:af:84:be:b9:e9:2b:bf:74:4f:69:d8:
         51:55:19:61:59:e4:70:9a:0c:13:68:bd:c5:4c:c1:85:58:ff:
         ec:e6:17:2b:72:b9:62:a4:c4:bc:a5:51:89:d1:c0:c5:19:f9:
         68:63:42:06:eb:1c:59:ab:29:ec:1a:37:15:65:47:26:c4:b9:
         d0:ea:c6:56:18:62:4a:20:bf:74:5c:23:f7:38:78:65:0e:65:
         a3:40:27:27:6d:a7:fb:dd:45:35:41:bd:5e:79:af:a3:6b:93:
         26:4a:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:31 2026 by rpki-client