Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File:                     sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier:          usBU9scwttH3NaTqmK1RPN2muLFNqN2zoGtkpt/GCKQ=
Subject key identifier:   A1:55:92:50:0F:A4:66:BE:22:CC:F4:00:1E:C8:EC:99:B4:92:28:76
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer:       /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial:       019D296125E522C2CD3FEA9BA1570FC10D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 09:02:05 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:05 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:05 +0000
Files and hashes:         1: HKNvKNWPTS8CN6bgJcF5utIakEo.roa (hash: eSN9s7qGbERAlGNaTgQ/bC9Kz0HuoANi8MNnFyNF5ZA=)
                          2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: UyXAVL0+3pmTeU6fBUjZ7R9VpclW6aIodvc78sBKn7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:25:e5:22:c2:cd:3f:ea:9b:a1:57:0f:c1:0d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
        Validity
            Not Before: Mar 26 09:02:05 2026 GMT
            Not After : Mar 27 09:02:05 2026 GMT
        Subject: CN=a15592500fa466be22ccf4001ec8ec99b4922876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:5d:60:f1:e4:56:c2:6a:3b:16:0f:81:75:
                    fa:ce:22:89:4a:b1:75:a9:80:b0:dd:49:b2:bf:93:
                    40:89:71:a4:d8:84:da:be:68:ac:0c:2f:9b:bd:f1:
                    aa:61:1f:02:b8:d0:f7:48:d0:ce:c4:46:cf:85:e9:
                    3f:20:74:e3:33:4f:00:61:1a:a3:dd:7d:b7:94:bd:
                    a8:16:f7:ce:08:22:ca:9d:19:7c:39:52:2c:88:0e:
                    04:e7:83:da:ec:6b:8b:c3:83:ff:3b:89:dc:5a:94:
                    cd:8d:e5:62:e5:af:4f:ae:89:68:94:fa:39:75:9c:
                    5e:f4:b0:22:60:1e:5b:e6:dd:e0:20:86:22:d6:8f:
                    18:a4:5e:fe:31:dd:c3:c6:46:1e:f7:6c:6b:af:8a:
                    b6:b3:a0:af:63:3a:84:e8:6b:65:92:cd:0a:fe:50:
                    25:a1:4d:59:d9:45:11:f6:a0:df:9e:b6:99:4d:02:
                    80:f7:50:75:d2:28:8c:75:6b:71:8f:1f:5f:67:e0:
                    98:06:09:8e:8d:8f:f3:b4:bc:cc:5d:40:c0:0e:35:
                    8f:41:2c:54:d3:2d:0e:2b:55:11:60:bb:5d:30:cb:
                    13:55:76:70:92:de:7b:b3:c1:0f:da:43:17:ea:6f:
                    2f:7a:90:f8:39:0e:74:b2:13:0b:6e:60:dc:58:66:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:55:92:50:0F:A4:66:BE:22:CC:F4:00:1E:C8:EC:99:B4:92:28:76
            X509v3 Authority Key Identifier:
                keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:27:58:3c:93:df:e0:8a:f0:c7:00:b8:c8:12:e5:d1:9c:58:
         42:42:9b:31:77:e1:e4:35:78:83:88:ef:77:b1:f3:f1:f8:29:
         06:dc:ab:89:c4:b9:ae:dd:8d:34:a7:2c:e4:68:8d:d4:0b:5b:
         04:cf:18:60:7b:e1:04:60:f5:02:57:9c:dd:62:ff:93:73:3c:
         84:15:cb:71:1c:94:df:83:77:c5:2b:ed:44:45:7c:44:3e:85:
         5b:d9:95:4d:e0:d0:e0:d5:5e:3d:37:72:43:de:b0:ce:a0:33:
         d6:a3:f9:97:a6:54:18:8d:48:d4:ee:1c:17:9b:60:e4:fe:57:
         3b:24:4f:4a:a8:8f:f1:2f:22:53:61:1d:d8:74:23:f0:70:ab:
         8c:06:66:14:db:96:2e:a0:ab:d2:cf:e6:ae:b7:ce:4d:9a:27:
         6f:4c:d3:f7:a4:c7:55:2c:0c:ee:21:a7:75:bc:dc:9e:45:7e:
         0d:fa:5e:d8:6b:7e:87:a1:89:8b:be:2b:ca:2d:60:ff:4f:0e:
         13:2e:b1:a5:0b:87:39:bb:7f:bd:76:4a:7d:b1:a4:40:47:08:
         5d:e9:2b:77:11:2d:e8:db:a5:8e:6c:26:29:cc:1d:81:3d:96:
         c9:66:55:53:2b:06:59:4f:d4:34:f9:26:a1:fa:f3:03:76:d8:
         67:b2:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:31 2026 by rpki-client