Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File:                     sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier:          77WdwCGMT9JNeTnofpkYkEBLCQwvBYFQrVa3W1Ay4qo=
Subject key identifier:   CA:04:19:AE:26:1A:0D:78:8F:C5:01:FA:D5:88:B1:FE:2E:7B:CC:2D
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer:       /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial:       019D273AE12106F05CF99E7AF327C5FE0135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 23:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:03 +0000
Files and hashes:         1: qLJSTzTBMdJIikbxRR_u5Z_U3GY.roa (hash: iJfkw1OmyUQC6ekqyi7may7oFP/+ECL2L9/K1hz0sgo=)
                          2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: ngi+Z2wninQHfg4LZ2McSSFRBOQ0LFsPyJS2ENNXUY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:e1:21:06:f0:5c:f9:9e:7a:f3:27:c5:fe:01:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
        Validity
            Not Before: Mar 25 23:01:03 2026 GMT
            Not After : Mar 26 23:01:03 2026 GMT
        Subject: CN=ca0419ae261a0d788fc501fad588b1fe2e7bcc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:6f:1b:f1:47:3f:ca:cc:00:da:33:8b:4c:
                    93:b1:e0:35:2e:ba:4e:32:3e:d1:5c:41:d8:84:4f:
                    cf:b4:17:7d:4b:b7:08:49:79:90:60:5d:46:41:50:
                    56:15:66:db:43:b3:9c:9d:5c:9b:b5:f1:c8:ce:3e:
                    83:63:0f:72:5c:b6:0b:25:49:c4:5f:46:64:af:bb:
                    76:f2:94:da:06:32:e7:3f:f3:8a:dc:25:a6:09:37:
                    96:d3:7b:10:23:8e:33:0d:83:73:e9:f5:99:29:31:
                    f6:c7:7e:d0:43:b9:ef:9e:7f:3b:9d:cb:09:2b:69:
                    94:50:5f:b2:30:6f:fb:52:48:bd:ca:36:2b:4a:d0:
                    0c:8b:5c:7f:91:b1:aa:13:0c:cb:ad:ed:15:d5:73:
                    e9:60:13:02:33:2f:2c:5b:91:27:7c:b9:cc:46:dd:
                    5d:3a:f2:13:da:ac:91:a8:ba:f4:34:ba:0e:fe:77:
                    ed:02:29:b7:b4:2e:19:b1:06:ec:78:14:83:b7:c5:
                    cb:82:d1:d2:a5:84:2e:1b:32:5b:57:bb:34:f2:95:
                    ee:3f:7b:2a:fa:a1:4f:28:d3:6b:ad:aa:52:d9:1f:
                    45:0c:48:bc:8e:e0:f6:ac:89:94:4a:3e:bb:87:28:
                    17:f3:e8:b8:d6:35:99:b1:4e:43:ba:48:95:7d:63:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:04:19:AE:26:1A:0D:78:8F:C5:01:FA:D5:88:B1:FE:2E:7B:CC:2D
            X509v3 Authority Key Identifier:
                keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:98:a5:5a:5b:0e:e3:fa:57:94:40:47:bc:32:fb:d0:38:
         ab:a5:8d:81:06:d2:d1:5f:36:1a:a8:43:4e:7b:52:4d:c3:e0:
         31:9b:44:c2:39:d0:7d:da:0c:ff:34:60:a4:1e:65:95:ca:6d:
         07:15:a8:75:5f:9d:cc:58:ed:e4:fe:89:8f:72:20:a9:8e:71:
         a4:01:f8:a0:77:4f:dd:ba:17:02:84:1c:87:85:a8:56:8c:2f:
         b4:66:b5:32:bb:59:d9:18:e7:5d:d2:a5:da:1b:d6:98:e3:2a:
         a9:59:66:e6:3c:8d:fe:76:d1:67:70:91:81:fe:67:39:73:00:
         ee:67:dd:95:a2:37:61:42:e1:aa:d8:3c:ff:20:1b:c7:ae:c9:
         7d:8d:d7:6d:57:2a:be:f9:13:d6:1b:e1:d4:6f:ed:1b:5b:83:
         e4:3a:83:97:85:ad:92:2c:e7:6f:9e:2b:a8:34:2f:88:9c:af:
         9b:b0:c7:6b:c2:3c:60:f2:21:df:bb:0c:f7:eb:78:d2:e6:82:
         f0:3b:03:8b:3e:5d:3b:e9:52:91:5e:7d:b8:9d:94:65:f2:05:
         e1:14:0b:75:15:a6:ec:e8:8d:d5:0c:91:55:9c:e9:08:20:68:
         41:ef:66:b2:56:22:8f:65:fd:7d:db:be:a2:5f:f1:5f:9d:b5:
         b6:73:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:14 2026 by rpki-client