Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File:                     DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier:          5oAup4mTFtTAos0ekCBlr6Ojh7eMEOYHGt+Qz5HAFqw=
Subject key identifier:   18:B3:7E:E2:26:67:47:69:2B:AD:BE:02:3C:F5:C8:DE:90:70:F5:74
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer:       /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial:       019D27DFEF7E73196EBE8840A9346A022AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 02:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:20 +0000
Files and hashes:         1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
                          2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: HBO+gfjFhAU2wFOzCi8TWjx07mASmGsnw7+FEKUAO9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:ef:7e:73:19:6e:be:88:40:a9:34:6a:02:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
        Validity
            Not Before: Mar 26 02:01:20 2026 GMT
            Not After : Mar 27 02:01:20 2026 GMT
        Subject: CN=18b37ee2266747692badbe023cf5c8de9070f574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:77:ae:14:43:dc:53:f2:2b:38:0c:bc:01:
                    17:a1:8d:f0:55:a8:42:d1:d1:16:93:c6:c2:01:0e:
                    e7:84:b0:4e:ca:4e:08:57:b9:b7:00:35:0c:8c:8c:
                    fb:8a:df:b1:52:ad:de:8f:e1:f1:ba:85:95:55:86:
                    0b:d5:54:8e:0a:de:d5:2d:66:fb:a2:c6:16:e0:7b:
                    a5:7f:6b:5d:49:35:86:b3:a7:c0:12:56:4f:56:4d:
                    9f:bd:d5:7c:7b:98:7e:64:01:a0:24:ff:a7:bb:34:
                    82:78:9f:1a:08:44:98:46:51:ea:50:3e:6d:1a:c0:
                    4e:4a:a2:26:44:2d:7f:93:43:2e:b6:37:e9:9b:7e:
                    fd:3c:9b:0a:58:63:9c:78:b5:55:44:a4:a4:d7:a6:
                    ec:c1:43:6d:fb:7f:8a:4e:ba:eb:64:f0:ea:c5:6c:
                    6d:f2:a0:4f:38:84:eb:e5:f5:bd:3c:34:33:48:ca:
                    db:99:c1:86:53:d1:ab:a4:42:73:18:9e:25:6f:16:
                    ef:39:10:7f:0f:e2:af:e1:e0:ee:cd:45:25:02:36:
                    8e:ee:c1:d5:aa:8e:fa:0e:d3:d2:e0:55:f6:78:99:
                    d7:12:2d:13:48:64:07:e2:b4:7b:28:0f:dd:5d:e6:
                    d4:70:76:29:66:5d:a4:27:95:4e:3f:66:3d:1c:1c:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:7E:E2:26:67:47:69:2B:AD:BE:02:3C:F5:C8:DE:90:70:F5:74
            X509v3 Authority Key Identifier:
                keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:72:fa:b0:fa:04:55:5c:02:f5:0a:34:90:cd:58:f9:e4:16:
         98:5a:c4:53:5f:28:bd:ec:51:a5:60:da:f0:ea:9f:22:6b:7a:
         82:65:2d:8a:93:eb:1b:5c:d3:b9:63:c0:cc:9e:f6:40:d9:0b:
         fb:18:3a:5a:3b:a5:31:bc:8e:ad:31:c2:f5:6a:88:42:72:a4:
         a3:b6:80:73:59:38:48:80:b7:0c:73:e4:0e:c4:9a:ad:53:e3:
         cd:8d:1a:23:77:aa:72:cf:a9:4d:66:97:2d:1c:69:6f:8e:f6:
         a4:b3:0b:88:c6:08:0a:bc:0e:44:a7:4b:73:f6:89:cc:2a:f0:
         44:67:bb:ad:a9:82:c1:a8:81:8b:df:4b:c3:e5:f7:aa:aa:22:
         99:85:08:0f:72:46:5d:87:4d:83:e1:75:9a:49:c3:89:5a:f0:
         24:db:00:de:cb:b7:bc:4d:8e:74:e6:1f:e0:fe:4f:14:ff:f9:
         48:58:9b:ab:e2:b3:d7:61:b5:91:4f:19:50:e6:7e:fd:20:32:
         b7:5c:d0:8a:d3:6b:37:6e:2b:0e:37:07:55:3c:b3:0c:98:cd:
         6d:0e:4c:4b:77:6e:db:54:e9:d4:1d:e0:19:1e:d4:e2:38:58:
         0d:0a:88:a0:b7:6a:97:55:47:31:f6:fc:8f:88:48:00:a9:3d:
         99:6f:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:40 2026 by rpki-client