Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          psCixsi4gik+RrK1ulQYXMGhGdY48zAm93WHKD1aIhs=
Subject key identifier:   48:14:12:D1:EE:82:94:5E:F2:DD:34:67:08:88:E7:57:6D:BA:EA:E1
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       019D26967019A8AD98E3D33946D5CEBA8B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0D26
Signing time:             Wed 25 Mar 2026 20:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:26 +0000
Files and hashes:         1: UCdBL2cD1nASc373rfpJddfKBRk.roa (hash: lFmC2crxbHri6/LBkNCkhFFRFW/esHZK/bXeT9XM8CQ=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: RGLuqaJnE7Op+VDbn5tpHTJ3IY/pocXBATSuXRsMSxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:70:19:a8:ad:98:e3:d3:39:46:d5:ce:ba:8b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: Mar 25 20:01:26 2026 GMT
            Not After : Mar 26 20:01:26 2026 GMT
        Subject: CN=481412d1ee82945ef2dd34670888e7576dbaeae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:33:a5:c5:62:7d:3f:d0:8e:2b:95:a7:16:
                    97:98:7e:1c:3e:33:db:62:12:73:84:92:b7:5a:66:
                    0b:92:12:b2:da:ed:8b:96:60:05:6a:fc:a4:43:c6:
                    ec:ce:0b:46:5a:94:4c:f3:d1:42:6c:8f:82:74:b2:
                    86:3b:75:6f:d6:29:0d:b3:7b:ca:44:45:bf:d4:24:
                    86:5b:20:d2:70:30:24:e7:c2:0f:06:58:80:69:d0:
                    58:eb:a4:c7:00:36:a8:c1:09:73:29:a6:85:ab:ed:
                    b8:bb:d5:eb:7a:40:21:bc:5e:2a:92:e7:3d:d1:d3:
                    fd:af:58:cd:44:b5:06:5d:26:f5:e7:2c:40:1c:ca:
                    7b:c1:d1:2a:c6:ea:8b:49:37:be:28:bd:50:59:9a:
                    fd:87:f1:ca:3e:fe:46:94:1a:ab:1b:83:fe:f8:fd:
                    8a:50:7e:98:b1:0b:8e:8a:e6:6d:db:37:b0:67:ba:
                    ab:64:37:c4:70:fd:90:5f:e5:97:8c:fb:9e:00:9d:
                    76:5f:88:c4:6c:28:b8:ad:b7:d7:9b:8e:9f:62:cd:
                    f9:52:c5:80:61:a2:f8:32:3a:7e:1c:87:da:bf:10:
                    4d:67:36:45:af:2e:7e:94:e6:9a:18:54:5e:c8:00:
                    c3:31:25:2b:fd:ba:4f:56:8e:ca:d1:d2:ab:ce:20:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:14:12:D1:EE:82:94:5E:F2:DD:34:67:08:88:E7:57:6D:BA:EA:E1
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:a2:4e:25:38:d3:b1:4c:86:8a:cf:f6:95:3e:f5:16:fd:
         d7:89:7b:44:d7:1b:38:0b:fb:86:5b:bd:78:f8:c2:42:d3:93:
         42:44:7d:57:d8:8f:c6:ce:93:ae:3b:e9:d0:34:b1:1b:2a:29:
         b8:6b:e6:e5:a9:92:c3:1e:93:03:48:aa:7c:4a:b1:c9:ac:d5:
         e7:e2:55:76:2b:83:5a:40:ea:d5:9b:4e:d3:fb:0d:7c:07:4c:
         d3:cc:d1:fb:40:fe:ca:67:fc:e8:f0:16:43:6a:2b:99:25:36:
         9e:d8:17:f8:e4:93:32:97:ed:2c:eb:ae:8a:57:61:48:82:0c:
         fd:53:3e:3c:9d:08:70:a2:dc:cf:6a:de:b2:bb:5f:6b:74:11:
         f4:16:0f:3a:58:a3:1a:ed:8f:88:fd:5a:bb:be:64:ed:88:18:
         17:ca:a3:f8:31:ee:59:78:a6:84:67:47:2a:88:78:56:19:8c:
         e5:3a:80:cc:40:02:95:4b:17:6a:0e:7d:76:2d:1f:16:61:f0:
         ba:72:29:52:9f:d2:6b:f9:71:06:f0:56:52:3a:4b:67:e2:5b:
         49:17:ec:81:d3:32:d8:f0:62:0f:a2:24:9a:a5:7a:1b:17:5a:
         8e:f9:62:18:f7:19:cf:9b:32:5e:86:58:ea:dd:07:a2:b6:b0:
         fa:50:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:46 2026 by rpki-client