Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          a1mRPaEb+2LhIAtp16UqlV0Q9pdEGMAi0TuDIGwFB64=
Subject key identifier:   94:50:F6:DF:06:A9:3D:5F:D8:97:7A:81:E7:5E:00:79:89:E9:C6:E1
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       019D29CE7AB1AC188204075CA47C5E90639D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0E15
Signing time:             Thu 26 Mar 2026 11:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:30 +0000
Files and hashes:         1: RTCwtH7ZWIYWogG8SzF47UbA26A.roa (hash: cp0ZS5qVAjMrv/xO5fzJ4jhrguG1YkL8kQ9RzgIwSl4=)
                          2: T2785FZtezCL_6MGZVNWjJWLkV4.roa (hash: vLx5BTbQ5gwqNSQW0r0QpCkolwPmMCxbInfB7uOoJt8=)
                          3: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: HUrcIXxsEkknMye6cjaaP5MmINaEwyFwx1k+2mcPNbY=)
                          4: tIO_Frmyb630hOFMV5X9t-LFjlM.roa (hash: A+6xfI16vy2Eu1vSrt6AeJ63kgJErM2gSoHCauuaBDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:7a:b1:ac:18:82:04:07:5c:a4:7c:5e:90:63:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Mar 26 11:01:30 2026 GMT
            Not After : Mar 27 11:01:30 2026 GMT
        Subject: CN=9450f6df06a93d5fd8977a81e75e007989e9c6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:d1:bb:03:26:a5:db:61:4f:07:be:96:c7:
                    83:85:64:08:1a:62:f0:50:09:df:e4:61:ae:0e:74:
                    a6:ed:21:25:b4:e1:e1:58:18:e2:88:a4:b6:43:46:
                    ef:c7:be:ce:48:11:41:3c:cd:0c:a5:b7:3a:98:78:
                    94:60:ca:11:f0:41:7c:50:c3:f7:2d:5d:f6:b1:6f:
                    ec:b0:8e:55:9b:2c:12:42:30:ad:cb:10:30:cf:f9:
                    40:37:4e:10:eb:56:72:43:78:a0:3f:6d:32:ff:60:
                    c7:ba:0a:a5:3d:c0:9b:9f:d3:da:0e:a2:7e:55:99:
                    a6:d9:c6:e5:8c:9a:c8:81:14:bf:e0:39:0a:49:a9:
                    66:57:1f:3c:43:e8:7f:d3:fa:1e:a9:3a:86:e9:bd:
                    94:11:dd:e8:37:b2:9d:ca:7a:f0:97:6b:33:c8:4f:
                    3b:82:65:b1:17:69:18:28:ac:a1:57:72:f2:73:a4:
                    47:25:2d:c4:5e:84:3d:38:03:8d:c5:18:e0:c7:fd:
                    30:7a:35:04:5e:13:5b:16:fd:4d:bc:11:ed:73:4b:
                    37:ba:6b:a5:f5:7a:24:ec:e3:3b:34:b4:ff:85:0e:
                    4c:77:4e:ef:ed:01:83:ee:aa:56:39:23:6b:b1:7c:
                    70:35:97:2a:c5:b6:92:f0:e5:52:71:0c:ac:64:27:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:50:F6:DF:06:A9:3D:5F:D8:97:7A:81:E7:5E:00:79:89:E9:C6:E1
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:50:c7:2c:53:20:04:ca:fe:09:1d:83:4b:01:74:c9:8b:
         08:7d:aa:73:60:c9:68:5e:be:f6:b4:d9:10:4a:64:a6:2d:d5:
         0d:35:fc:69:02:04:86:af:00:3f:e4:4e:77:18:c2:70:5c:25:
         e2:bd:3b:e4:83:1e:fd:f1:0f:96:46:25:c7:3f:f0:1c:45:d3:
         69:ed:5b:ee:40:51:1e:42:73:d1:95:7b:ba:d9:3f:2f:6c:8e:
         9d:77:04:c3:9e:22:a3:6d:4b:01:b3:78:5c:b4:18:a5:43:21:
         c9:1a:26:c6:f1:74:79:74:7a:22:41:0a:bd:1d:0e:e3:3b:f2:
         5c:30:79:88:fc:5a:62:85:ae:a0:62:e9:37:c1:d4:e7:8d:b8:
         e6:7c:38:fc:58:73:0a:a0:a0:3f:1c:6f:2c:ba:8b:6b:99:ac:
         09:db:e5:8c:6f:14:6f:7b:59:28:40:07:60:74:87:8b:fd:de:
         f2:5c:b6:49:67:34:32:5d:92:e5:5f:18:fa:c4:24:be:2b:d2:
         f6:a0:2f:d7:69:d2:39:a5:a3:7d:db:ac:ba:b1:92:ca:af:4d:
         95:ba:23:c8:eb:51:91:07:51:20:6f:7a:86:ea:16:46:f4:e4:
         06:be:f0:54:72:e4:5b:0c:69:4d:71:f3:6f:65:7c:88:0c:50:
         10:e7:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:30 2026 by rpki-client