Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File:                     SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier:          uKzDHKLaG0xf+GSjPzF7pgyGC8X7HzIvVsmmM076+mM=
Subject key identifier:   8D:EB:55:90:D9:8C:A2:E4:A6:85:5E:5D:36:31:50:E3:E7:4C:BF:4F
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer:       /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial:       019D273AF7B3C2B3B615C47068CB96AD5742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 23:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:08 +0000
Files and hashes:         1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: U9nfNy7y2ICJZuq7hzf9BQR1B2KnWj3DqGRi+ICQ63U=)
                          2: hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa (hash: McwvJ1iO5xbO5tc5urCHd+wPP0AiWFFllzKeNdIvGeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:f7:b3:c2:b3:b6:15:c4:70:68:cb:96:ad:57:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
        Validity
            Not Before: Mar 25 23:01:08 2026 GMT
            Not After : Mar 26 23:01:08 2026 GMT
        Subject: CN=8deb5590d98ca2e4a6855e5d363150e3e74cbf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:66:4e:ac:c6:03:22:0c:5a:72:c9:67:1d:
                    04:27:52:43:18:dc:30:c9:13:4f:c4:8b:9a:56:3d:
                    6a:31:46:94:41:08:80:fa:9c:3b:79:25:14:ff:fd:
                    9d:67:be:e6:5f:ef:f0:1f:40:7d:96:f0:9e:63:ad:
                    10:8c:dd:50:70:3d:61:1c:4a:46:eb:96:b4:8c:94:
                    8a:10:cc:eb:7c:1c:0f:47:22:e7:14:d8:77:6f:a0:
                    0c:dc:b8:e0:18:0e:5c:59:64:0a:cb:9b:84:5b:ac:
                    9d:8f:f7:f5:58:51:97:a1:a7:b3:49:8b:7f:ae:65:
                    2a:cb:19:c2:42:1d:bb:e1:43:9b:a0:3a:dc:0e:e7:
                    e3:5d:ed:c6:61:f3:25:d4:e7:96:a1:73:81:6e:73:
                    30:4c:a0:23:17:12:9d:fd:a0:eb:b0:44:e7:75:89:
                    b0:d4:a0:7c:c8:c4:eb:39:98:10:85:c2:7c:d3:f2:
                    46:5b:42:6c:b2:99:23:bf:8d:87:37:52:55:26:67:
                    2e:c3:0f:34:6e:c5:5e:ec:fb:78:0d:01:d6:70:96:
                    ba:c6:f9:b5:56:a6:bd:19:f4:54:b5:e0:a3:ce:ca:
                    f1:98:69:04:1c:29:0f:b6:45:2a:c1:b1:6e:cf:f9:
                    7b:38:d9:32:fb:18:93:f2:4a:2b:e3:54:59:20:8a:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EB:55:90:D9:8C:A2:E4:A6:85:5E:5D:36:31:50:E3:E7:4C:BF:4F
            X509v3 Authority Key Identifier:
                keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:45:21:3a:81:c7:cc:33:3d:38:9f:12:c1:d8:05:f1:70:6d:
         b0:e6:e8:09:51:50:65:ad:79:b1:f9:31:61:cc:49:64:e9:a4:
         8f:ec:a1:35:3e:69:ba:c1:fd:3d:82:ec:38:6b:09:b4:1d:50:
         0a:18:f3:7c:6f:f9:f6:3f:6f:02:f5:ee:cd:6e:d3:8b:7b:a9:
         61:e3:d3:d7:84:07:45:14:9a:3f:52:e0:f1:05:ba:4d:15:7f:
         1c:ef:2c:33:4f:e6:7a:e9:25:f4:a1:fc:25:fc:21:2d:c2:25:
         19:d7:6b:4a:94:12:19:55:a3:65:a6:fe:c5:94:4f:0c:47:9c:
         d8:8a:23:96:1d:6b:c2:95:5d:04:ad:92:d3:ec:ff:0d:e1:61:
         32:b4:3d:39:24:a4:78:f5:17:69:79:96:19:50:90:e7:15:d9:
         b3:b2:95:aa:a1:b1:32:66:82:75:07:86:ad:a9:f9:a4:2e:81:
         a4:1a:08:13:7c:e0:1a:f2:db:61:1d:1d:d8:34:38:d6:d2:72:
         d5:6b:b0:6d:35:8b:79:f3:39:e0:22:08:ed:ae:b1:33:52:f2:
         4a:d4:4e:eb:35:ed:1a:ef:95:99:df:77:aa:bb:af:2e:18:35:
         8c:07:81:76:21:d4:0d:de:ca:d1:82:f1:67:d3:95:d9:8f:9a:
         ab:19:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:36 2026 by rpki-client