Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File:                     4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier:          u0mAIyzdlbo2RTUwzN3WoUDvCOarRoKXGkNZ3b77vRc=
Subject key identifier:   09:0A:02:EF:FA:13:C4:9B:B1:23:6F:28:6D:79:A2:56:E8:A3:9F:4F
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer:       /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial:       019D292914738F5A92FF46CCFC4E31DCB7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number:          1173
Signing time:             Thu 26 Mar 2026 08:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:50 +0000
Files and hashes:         1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: a4x5HCY+gfVfH1TbZ1hFsUVNKyhjSY0IQpY/VrPEux0=)
                          2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:14:73:8f:5a:92:ff:46:cc:fc:4e:31:dc:b7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
        Validity
            Not Before: Mar 26 08:00:50 2026 GMT
            Not After : Mar 27 08:00:50 2026 GMT
        Subject: CN=090a02effa13c49bb1236f286d79a256e8a39f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:17:86:f2:29:f2:e5:8c:fd:0b:61:66:b4:
                    65:28:92:6f:e5:a4:22:6e:03:74:4d:91:b9:35:c6:
                    e3:16:3b:cd:ae:f6:3c:4d:52:49:8a:ac:c6:c7:f2:
                    d1:d6:07:81:1c:1b:fb:5a:1a:3b:03:34:02:9e:23:
                    90:da:a8:66:f2:f9:da:a7:a9:21:14:ab:e6:25:11:
                    7c:2c:62:7b:ca:d0:3d:1d:5e:50:3a:7c:80:2c:c6:
                    09:82:e6:59:9d:ef:3e:fc:54:41:39:6e:55:56:ef:
                    cb:9b:07:9a:3b:2e:8c:d8:0c:ab:0f:9f:ee:89:7c:
                    9c:e9:88:ab:f8:3b:7a:da:0e:88:a8:ae:5f:69:34:
                    ff:53:f3:f7:fd:7b:c8:7e:1a:bc:96:95:ed:46:f2:
                    7e:5a:e0:66:87:c4:9e:f9:5a:57:6e:2f:94:09:61:
                    a0:30:ba:9b:43:4f:33:56:44:3f:9f:ef:69:f2:8e:
                    ed:0e:dc:30:1a:a6:aa:b3:64:33:59:95:71:c5:3d:
                    bb:0e:84:91:ce:69:e2:63:11:69:26:24:08:15:17:
                    58:8b:38:e3:29:09:f1:5c:45:c5:a2:99:f5:f2:2e:
                    c9:cb:26:12:5d:25:09:3c:8e:4e:7e:67:0a:9d:df:
                    02:50:7a:56:2f:92:a7:41:d7:81:22:b4:01:3d:7a:
                    d0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0A:02:EF:FA:13:C4:9B:B1:23:6F:28:6D:79:A2:56:E8:A3:9F:4F
            X509v3 Authority Key Identifier:
                keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:4b:80:1f:fb:3c:c1:4a:6a:b7:a5:ae:65:6f:1b:6e:cc:
         04:2d:95:db:ba:3f:11:1e:c0:45:d0:61:b5:f7:d3:ae:8c:1e:
         c2:de:c0:22:8a:a9:57:19:8f:c4:38:a7:ed:6d:d8:bc:7a:70:
         fb:76:a9:c1:6e:b0:c1:fc:4a:ef:e7:bd:8d:13:0b:c5:a1:6c:
         a4:a5:df:89:d0:8e:3a:bd:ad:1c:1a:05:74:8e:ff:b5:04:dc:
         e6:29:ca:84:6a:d4:44:f1:a1:8a:e0:30:d0:62:22:cc:a1:5f:
         a3:8d:ac:bc:c2:4a:f3:d3:70:d3:ac:54:b7:e3:0e:26:4a:57:
         06:b0:cb:7d:8e:b9:74:6a:b2:60:18:94:4d:16:78:f9:ca:14:
         20:c9:4e:70:b8:d1:fd:c5:37:0f:70:9d:35:90:c3:19:db:56:
         eb:b2:03:e7:03:64:a7:dd:03:b3:d6:59:dd:4d:0a:57:23:a5:
         c3:65:56:e4:0c:11:d3:78:81:10:d6:7b:1e:27:20:0b:df:af:
         57:cf:d7:74:d4:34:b7:95:de:94:dd:97:e6:bd:bd:e0:a5:b0:
         8b:a7:b4:ef:9a:18:0b:77:b5:1e:ef:53:92:6d:d6:06:da:a0:
         56:21:5d:af:2d:4f:e8:b6:4f:4f:0c:62:85:ad:dc:f8:38:64:
         8e:58:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:56 2026 by rpki-client