Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          dkBaWSd56J1e8wAvpaO78kTaGgRYplDA4cCi5rb0LuA=
Subject key identifier:   79:BF:ED:50:76:C0:87:DB:E1:E8:B2:BA:93:B7:22:D4:F0:95:BB:20
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       019D265F5AA4A4F41DDE8622DF4D135F480D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          1190
Signing time:             Wed 25 Mar 2026 19:01:16 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:16 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:16 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: JDW97eUJIsYTy1qyt7cBaXpMNAbVKEDNG9i4CilWf9A=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:5a:a4:a4:f4:1d:de:86:22:df:4d:13:5f:48:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Mar 25 19:01:16 2026 GMT
            Not After : Mar 26 19:01:16 2026 GMT
        Subject: CN=79bfed5076c087dbe1e8b2ba93b722d4f095bb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:9a:98:d0:cb:98:dd:7a:73:da:45:94:35:
                    0e:c0:d8:49:a6:72:5e:49:92:6e:c1:bb:de:cf:77:
                    0a:5b:40:92:36:d1:8e:94:fe:00:3b:66:65:19:dc:
                    35:b7:4f:a6:65:b7:d8:80:f2:b0:a3:bc:1b:37:54:
                    8f:52:fe:b5:a4:30:74:f0:73:8e:a4:2f:7b:78:01:
                    90:23:41:95:d4:ba:65:4b:51:59:fc:54:1a:96:8a:
                    d0:e1:97:19:bb:7e:bd:57:28:fc:8a:25:3f:cf:35:
                    6c:12:16:d3:51:d3:9c:92:b2:26:45:4a:fe:58:bb:
                    33:be:23:7a:ae:fc:b5:47:c9:0f:c9:cc:e4:f0:4f:
                    af:20:cb:ee:98:59:39:e8:b0:dc:e4:dc:04:0f:19:
                    ef:2d:c1:4c:37:81:4c:68:32:0e:37:be:3e:7b:61:
                    4a:85:f4:6c:2c:9a:95:76:b0:32:14:fa:bf:32:af:
                    8b:ea:36:4a:1b:66:bf:3d:ca:db:a3:8b:2d:ae:ab:
                    95:f5:fe:3b:eb:fa:1c:a6:be:64:56:74:a8:97:56:
                    2f:c1:f2:8e:dc:69:71:37:1f:77:3f:ac:ae:a6:38:
                    9c:06:0a:d7:56:5b:d0:e7:36:81:ae:28:fc:06:c4:
                    00:10:72:0e:db:61:4b:d9:f1:90:7a:6b:32:77:b7:
                    91:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:ED:50:76:C0:87:DB:E1:E8:B2:BA:93:B7:22:D4:F0:95:BB:20
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:94:86:6e:30:f5:44:cc:50:38:a6:0a:f4:25:fd:c8:e8:13:
         a1:67:53:47:de:bc:7b:7a:1c:ae:af:c6:2f:8f:80:0d:2a:e9:
         42:43:d1:4c:b2:5d:ff:ae:4b:48:ff:28:ad:a9:da:9b:6a:04:
         7c:c7:1f:85:f9:77:61:64:eb:85:b8:ac:bc:c3:1c:4a:6b:2f:
         6b:14:d2:47:f5:e5:1d:e9:00:14:ec:74:c8:5a:a0:da:cb:ed:
         c2:7f:33:06:c5:38:f8:59:e2:0d:e1:a7:84:ae:6d:a4:f5:a7:
         4f:a7:a5:5f:f6:de:04:0f:0d:29:a8:b0:ef:a0:9d:8d:c8:33:
         f2:9c:8a:76:52:3d:c5:c4:7a:63:e3:c7:da:6c:e8:f7:67:36:
         12:11:12:78:92:af:d2:75:94:ae:36:58:f6:b4:6f:65:31:f3:
         b9:89:f2:49:d3:32:ca:fd:f5:b2:a3:6c:5c:1b:d5:f7:2f:6d:
         b6:4b:fc:45:81:f1:ce:e4:af:1d:f3:9b:de:d3:ca:29:f7:31:
         bb:e2:49:d5:31:75:ca:ea:ae:9c:98:bc:0b:20:7a:e8:31:56:
         6b:54:22:e5:24:82:48:af:9f:59:d7:1d:64:1e:9d:ac:15:53:
         5e:b7:2d:d1:d3:7b:91:2d:c7:cf:25:33:0a:4f:7e:69:a7:fd:
         b2:5b:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:36 2026 by rpki-client