Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File:                     3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier:          WGYVquoCSRfP6c4yC2OYp+Sg51f5nTqhjOoJ3YeEyGA=
Subject key identifier:   B1:30:41:3C:FC:E2:5D:EF:21:51:52:B4:05:00:C8:26:DC:D0:8D:AB
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer:       /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial:       019D27A8FCC954DE7AD9C0025116294AF288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 01:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:19 +0000
Files and hashes:         1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: LRvSv54uLdoqoKRsdRCBDogBjW5CZW1/RR8Kw1Cc0Rc=)
                          2: gF9egdIcd91P1OP4RPz2DkEHDD8.roa (hash: JDz8GS+aZf4wXrBiyWB1Bck1IR0dmoeHU/KEMVi1Ghc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:fc:c9:54:de:7a:d9:c0:02:51:16:29:4a:f2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
        Validity
            Not Before: Mar 26 01:01:19 2026 GMT
            Not After : Mar 27 01:01:19 2026 GMT
        Subject: CN=b130413cfce25def215152b40500c826dcd08dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:51:fc:2b:e2:6d:e2:3b:50:bc:51:97:84:
                    a4:34:01:ed:23:1c:b5:fd:f3:52:79:75:eb:bd:f5:
                    75:fe:1e:95:4b:e1:3a:c4:3a:42:62:e4:f0:05:66:
                    08:f8:43:dc:24:e7:e4:6b:68:8c:f7:d6:71:0a:b7:
                    13:38:0e:31:14:6c:43:48:33:14:a3:52:7d:0f:86:
                    49:00:d2:14:02:3c:0c:5e:1f:f2:24:c6:f0:fc:86:
                    13:fa:fd:02:f7:8e:bd:9d:b7:66:6c:88:65:3c:17:
                    1a:71:34:a9:0c:d9:f9:13:96:db:66:6b:88:8e:af:
                    93:c2:88:f4:6d:d3:82:ca:ed:7e:8c:13:c5:05:4e:
                    36:5b:84:27:41:f6:99:d7:bf:bd:14:be:8f:47:54:
                    f6:47:5c:3e:37:9e:17:e1:fd:b0:83:8c:b0:40:16:
                    31:1f:40:10:c9:a4:03:ee:d6:a3:07:9e:35:8a:83:
                    3f:f0:0f:57:06:19:ba:c9:d8:6d:cc:6e:59:62:57:
                    8d:46:24:12:fc:57:03:09:ab:aa:ba:eb:4a:86:7a:
                    e1:8d:a0:ab:58:bd:e5:eb:99:42:cd:7e:83:db:e9:
                    08:6d:db:66:08:48:c0:b0:b2:13:18:aa:e1:90:a2:
                    6d:2c:de:4d:80:25:d6:30:4f:fd:79:95:64:b4:44:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:41:3C:FC:E2:5D:EF:21:51:52:B4:05:00:C8:26:DC:D0:8D:AB
            X509v3 Authority Key Identifier:
                keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:64:64:ee:ac:8e:16:63:65:a6:60:61:a8:fb:1b:25:8f:ef:
         5a:8a:9a:4e:f2:3e:73:09:65:4e:60:35:47:5c:e1:73:37:1f:
         d9:0e:fe:e7:db:70:fc:e0:69:b5:f9:81:ae:6b:77:32:e0:01:
         94:5e:75:99:25:28:e4:15:e3:37:06:7a:42:df:62:b2:ce:16:
         d8:10:8b:94:2f:44:74:68:a9:80:2d:04:ed:f7:c9:89:6a:f9:
         3f:09:5a:33:8d:6d:60:31:6f:06:78:63:58:86:b6:65:da:8b:
         bd:93:ab:4c:da:63:25:67:89:23:40:1b:12:ae:85:d1:22:b3:
         be:d3:a5:46:68:c7:6e:44:1c:f4:1a:3f:11:6f:b8:8e:c6:9c:
         e7:a8:c8:b3:27:c4:9f:8c:c5:5d:db:c1:bc:72:41:5b:0c:b7:
         69:78:ed:0a:10:20:97:8b:45:90:d9:1e:93:33:82:25:3e:38:
         57:9d:e6:b1:00:0e:6b:4f:bc:76:a3:69:95:52:83:cd:a5:a7:
         60:c8:d6:3c:ad:c5:0b:a9:f6:74:cd:07:21:24:85:f9:70:75:
         61:4a:5b:8d:ec:ad:9c:ba:c9:6d:71:2d:d5:66:2c:db:68:bf:
         92:e1:61:fc:e9:61:e8:ab:95:c9:2f:8d:9c:42:af:de:92:63:
         8a:e6:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:30 2026 by rpki-client