Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
File:                     9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft (raw, json)
Hash identifier:          6OOqjNWjjWrQG8/Tqy282kRAwgtonPpKhITM0/iwPdQ=
Subject key identifier:   C0:DB:8F:BD:44:A6:D0:2F:60:47:AF:6D:98:AF:94:FA:CA:97:99:4A
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Certificate issuer:       /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial:       019D2A7266E8CD8F5413111941E94F1539EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 14:00:33 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:33 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:33 +0000
Files and hashes:         1: 751KubgOS7HBCPWTQZK8_c0bJh8.roa (hash: pZSYTS5FX+8pRizhyqk288Z4lPS//MEroPNU3XHK8IQ=)
                          2: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl (hash: dr7ylRXo51jKH6iuXsMUsbba8B1xIR4dmJI9aM4yOPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:66:e8:cd:8f:54:13:11:19:41:e9:4f:15:39:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
        Validity
            Not Before: Mar 26 14:00:33 2026 GMT
            Not After : Mar 27 14:00:33 2026 GMT
        Subject: CN=c0db8fbd44a6d02f6047af6d98af94faca97994a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:fa:4a:46:c3:b6:1c:2f:39:c6:90:c1:a4:
                    f8:3b:ae:c9:be:41:f3:89:43:8b:cf:b0:34:31:4f:
                    cc:0a:26:2d:db:bb:26:c7:dd:f1:30:9e:12:97:63:
                    9a:b4:16:22:c2:a5:71:d1:df:4b:50:2c:06:52:0f:
                    bf:5a:b6:2d:22:82:b7:c1:5b:ad:e6:54:d0:4b:db:
                    a8:6e:db:4b:64:11:5b:df:0b:33:ff:b7:c9:c3:99:
                    ea:1e:a5:c0:6b:40:83:3a:55:22:c1:a1:88:c4:90:
                    38:ea:c3:94:50:87:93:4b:a6:92:49:e9:83:97:9c:
                    9f:60:22:91:05:c4:af:d9:e8:a8:c3:4f:4a:31:d9:
                    e0:49:05:b3:c1:99:8e:14:20:1e:5f:3c:80:4e:07:
                    8f:54:72:e5:8b:05:30:ad:e5:f7:b3:25:b7:f2:cd:
                    3b:4d:ae:5b:78:a4:7d:e3:98:1b:a2:39:c4:c7:44:
                    12:b0:89:c8:39:12:4e:4c:64:43:0a:30:6c:07:71:
                    b2:c2:cb:25:95:63:c7:71:f3:c3:88:45:d2:7b:0d:
                    12:c5:de:97:62:b2:27:b9:a3:4e:99:68:06:c4:56:
                    5d:3d:6d:93:09:36:9c:a8:ba:15:62:d4:fa:56:87:
                    4e:38:df:1d:c7:64:6e:b4:60:b4:21:5d:77:82:a8:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DB:8F:BD:44:A6:D0:2F:60:47:AF:6D:98:AF:94:FA:CA:97:99:4A
            X509v3 Authority Key Identifier:
                keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:23:6a:d4:3c:37:2b:c2:e1:e2:16:62:87:0f:25:ac:3e:
         b5:3f:5d:2c:f7:12:a2:ac:54:e4:b5:8b:39:dc:68:fc:24:7e:
         c5:ab:48:48:02:da:cc:4f:3a:c9:e9:da:7e:09:2a:97:1a:04:
         82:b9:07:ee:2d:68:24:47:cf:d3:6e:51:a0:ba:a6:38:7b:3c:
         4c:05:f1:a1:d6:f8:05:b0:b1:66:d0:a9:c6:b0:0f:f8:23:fd:
         cd:06:da:6a:fe:d8:47:79:83:37:a1:50:2f:29:a8:f7:42:45:
         d5:45:15:fc:49:63:1b:f8:17:c9:b7:c7:69:47:ad:24:29:5c:
         4a:95:51:9e:a6:fe:df:4a:01:ce:cc:7c:db:fc:94:67:23:1b:
         b9:72:ed:62:a0:a5:c8:7f:8b:1e:1c:80:dd:f7:fb:64:47:9c:
         48:75:85:df:d2:7c:30:e3:cf:93:3b:28:95:47:e0:cb:00:84:
         df:42:ff:37:ae:54:8e:20:d4:4f:ca:35:f6:71:2a:d9:73:f9:
         77:52:c6:63:98:a1:37:3e:1b:1f:43:4e:6a:94:b6:cd:a4:9c:
         a4:62:5c:1e:1f:99:56:ff:08:44:7a:8c:e3:d8:22:c0:03:85:
         cd:c8:ac:5b:57:36:78:56:ed:7a:e6:5a:32:e2:41:56:2f:7c:
         2d:1b:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:22 2026 by rpki-client