Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File:                     phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier:          9PXAmKNaVh9WAppVnDLvvMF/k2aL5NYRTiCHqEafR5k=
Subject key identifier:   E4:49:8C:D7:41:E5:8B:FF:01:40:32:7A:5D:7E:22:64:B4:50:EC:E3
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer:       /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial:       019D299762EACCA9DAF9E2A2AEBC04F1CD4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 10:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:20 +0000
Files and hashes:         1: LV26UXUBiDjM_ESrnKwXDTyygek.roa (hash: O948YaLP3CB1Q1B0DwS4vZdURPuBNeFKJeoag3bjmCo=)
                          2: eSJ9M3YRMULj0vRUBV74lXf_M64.roa (hash: UuL1eC7zK/jssD2ClTL9pItbGfU98/yXUav7BdprTQk=)
                          3: k7az-_BtbKLYLi41aEKLRIvNmoc.roa (hash: B7UITnspL1Od2jE72rx43sMNx/qWRzT0FVRuVA3nuP8=)
                          4: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: kPOOxLVP1yQ4/VT0nIRGjbynBRFYlqghA655Bj31qRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:62:ea:cc:a9:da:f9:e2:a2:ae:bc:04:f1:cd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
        Validity
            Not Before: Mar 26 10:01:20 2026 GMT
            Not After : Mar 27 10:01:20 2026 GMT
        Subject: CN=e4498cd741e58bff0140327a5d7e2264b450ece3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:5a:4c:0b:b3:64:4d:0a:ca:03:5d:cd:7e:
                    08:d0:59:b1:c0:ad:8e:66:4a:ef:5e:ad:dc:d3:06:
                    35:61:78:0a:4c:00:f4:da:e6:82:62:c1:6b:5b:8b:
                    e7:89:7f:44:5d:0b:7f:7e:70:be:d2:a0:5f:74:59:
                    7d:11:4d:1a:17:0c:7d:85:31:0b:b0:e1:cc:4d:95:
                    ac:01:05:c7:1c:be:21:38:03:4e:58:bd:f1:53:88:
                    ce:a7:94:e7:70:d1:3a:76:b8:5d:ce:65:10:bd:64:
                    8c:73:7c:56:a5:11:99:bb:be:31:5d:cd:5e:42:82:
                    66:24:44:26:c7:68:02:7a:d7:93:fd:41:5b:2e:94:
                    89:1f:03:5d:eb:ce:04:9f:7c:d5:0a:05:92:e1:f0:
                    67:22:fc:d5:79:b2:a3:53:20:0c:c6:e2:75:a7:c5:
                    53:8c:7e:f6:cd:63:7b:f9:d2:03:ff:ff:96:0b:21:
                    ae:64:b1:68:7c:40:d5:70:3c:8a:06:eb:24:5e:40:
                    89:ae:ba:d2:f7:8e:01:27:cb:10:78:7d:29:f6:7d:
                    5a:10:9e:2f:5a:c8:89:0f:55:06:6e:f2:89:3e:84:
                    41:d1:97:6c:6b:9e:e0:a3:a4:0d:c2:3b:cb:92:82:
                    26:66:09:d3:57:85:5e:f5:65:b2:5d:bf:64:93:23:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:8C:D7:41:E5:8B:FF:01:40:32:7A:5D:7E:22:64:B4:50:EC:E3
            X509v3 Authority Key Identifier:
                keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:af:40:08:0c:b7:93:fa:fa:cf:fb:34:66:3a:91:a3:95:9b:
         e8:aa:9f:71:69:42:98:57:aa:2e:75:ee:ec:cb:3c:0d:cb:6b:
         0f:7c:d0:d7:65:d3:99:40:5d:1f:a5:6e:35:1f:ae:b1:27:0e:
         27:ab:1f:38:f0:11:f3:ad:48:d3:41:e8:eb:36:ba:dc:37:0b:
         8d:6b:5a:57:0a:00:91:7a:3b:d7:29:46:13:28:0f:4b:48:97:
         ff:ce:4d:7c:76:cc:f5:62:11:35:73:e7:fd:81:4a:f9:73:69:
         50:62:81:dd:07:42:ff:ad:37:ad:e3:6c:e5:f4:fa:26:26:33:
         b8:8f:4f:12:56:5c:09:6b:a4:fa:91:8d:df:2c:70:a2:d3:31:
         42:21:21:14:13:76:1a:84:3d:0b:73:9f:a3:e5:f0:96:44:3e:
         b4:cc:19:ab:c4:7a:05:99:93:29:c0:a7:07:71:8e:c3:f5:0b:
         c9:1c:2c:a2:64:90:0c:b5:1a:ea:01:89:e8:17:df:24:41:c3:
         7d:96:76:ae:d5:80:21:42:91:b7:7e:72:f7:94:bd:47:eb:a1:
         40:e2:48:99:da:25:51:bb:36:40:e3:63:e9:f0:90:b9:98:7e:
         7d:e2:58:08:64:1e:bb:85:44:18:11:9c:8b:b9:ed:9e:89:e4:
         7d:93:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:34 2026 by rpki-client