Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          YAcN/mMwSBLXqScrhamDSbVwwq223iC2DSsCEfU0vtw=
Subject key identifier:   FC:6A:B4:E3:4F:CB:16:1F:44:31:F7:8E:80:5B:1F:E4:5C:0C:44:26
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       019D29292858CE7056877AACD2183281E5B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          05AF
Signing time:             Thu 26 Mar 2026 08:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:56 +0000
Files and hashes:         1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
                          2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
                          3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
                          4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: Fnl/rlGDnKEbDUOF4AQP0bzdg4oj8oPcPRrg2JMprF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:28:58:ce:70:56:87:7a:ac:d2:18:32:81:e5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: Mar 26 08:00:56 2026 GMT
            Not After : Mar 27 08:00:56 2026 GMT
        Subject: CN=fc6ab4e34fcb161f4431f78e805b1fe45c0c4426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:e4:ee:02:2e:9d:08:52:d8:84:2f:09:85:
                    a7:c0:36:92:6e:d9:fa:8b:1e:95:21:0e:d9:12:f0:
                    2e:87:54:54:43:78:32:3f:08:31:2b:bc:39:96:c3:
                    89:61:a2:40:bd:b9:60:bd:a4:ef:3b:32:66:f3:04:
                    49:36:0b:2d:ab:14:5f:34:a7:c9:0d:eb:1f:f6:74:
                    83:44:13:8a:eb:88:97:a4:ac:47:61:94:68:81:7a:
                    ec:db:43:4e:26:ec:b9:cd:b0:53:a5:4e:cc:1e:fa:
                    2c:87:84:c9:ae:c4:38:b3:0b:b3:1c:69:b7:06:54:
                    b7:2c:cd:9a:ee:88:b6:0c:37:ec:f7:28:5f:42:70:
                    34:da:70:6d:c0:88:21:6c:16:1f:45:64:8b:1f:46:
                    c5:11:71:ad:ca:da:dd:b7:6f:85:f5:d2:bb:c5:cf:
                    fc:04:c9:a6:77:dd:f2:a5:fc:f2:35:7b:d4:e8:95:
                    d6:c4:6a:57:49:38:47:f7:9e:5e:1a:87:ba:35:08:
                    87:b3:ae:75:ee:07:27:c4:ab:9f:80:77:af:41:65:
                    60:e5:78:34:9b:6f:cb:4f:24:36:5b:09:2f:4d:f7:
                    db:97:fb:a5:cb:32:6b:1c:6e:0d:b1:6e:5c:43:5f:
                    be:b8:d6:9b:c2:ad:3a:51:73:d2:44:da:7c:2b:6a:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:B4:E3:4F:CB:16:1F:44:31:F7:8E:80:5B:1F:E4:5C:0C:44:26
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:57:8a:f0:d4:41:08:f2:31:91:26:bd:cf:4e:ee:76:f7:
         5c:28:71:c8:19:70:5f:79:7f:30:41:af:98:00:83:2b:78:f2:
         3f:84:9c:a0:90:71:cd:d9:fd:51:94:42:85:d7:dd:4d:14:00:
         47:37:47:5a:59:a1:e3:65:60:dc:11:28:bb:0d:de:de:13:62:
         9e:fa:f5:30:25:0a:9b:52:8b:ea:98:28:9c:ee:d4:36:d6:81:
         c2:7f:8c:2b:b1:6b:32:ef:24:ec:62:15:68:1b:ac:22:03:62:
         3c:22:02:b9:10:c8:07:41:8f:41:f8:cf:d4:24:0c:c5:60:c1:
         48:60:73:fe:8e:5b:13:a8:47:dd:22:e6:11:ef:f3:04:6a:03:
         86:29:9f:5e:66:a0:ce:3b:de:e8:37:19:82:6d:8d:56:7f:07:
         6c:5a:f5:42:2b:01:44:fa:6d:dc:80:97:e4:d8:9b:4d:7e:49:
         12:a4:e9:8e:cc:22:9b:cf:b8:88:c5:90:6c:2a:1c:08:df:35:
         ce:2c:2f:ae:0e:97:18:bc:e3:7e:2e:21:91:00:0e:78:d7:c0:
         a9:1b:79:54:62:09:ac:60:7b:b4:46:a2:10:26:6b:64:0e:d8:
         b4:4d:ce:f9:d0:6f:68:db:20:4b:59:23:90:5a:f0:a3:9e:6d:
         68:d3:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:06 2026 by rpki-client