Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File:                     4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier:          bJo1XAPPrcIJ+rHjv/M7jEqgzQW+6PVwzpaGwkeZnOM=
Subject key identifier:   DF:F3:10:EA:04:CB:68:9D:72:19:C4:AC:1B:88:CA:79:AA:C4:22:A7
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer:       /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial:       019D2B855C6BC2977E2D546A7F9112371D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number:          1320
Signing time:             Thu 26 Mar 2026 19:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 19:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 19:00:53 +0000
Files and hashes:         1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: Ts6A8L7tujc5Y5dgCvdh/aNVXOFZ0NFjFyWsBareQ7s=)
                          2: VO0q4nWrfOStAkTKpUu6a9s4iXM.roa (hash: RO1KxuAMQb5sndGW2US++WYwHmd5hwNX7clvLvt34WI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:5c:6b:c2:97:7e:2d:54:6a:7f:91:12:37:1d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
        Validity
            Not Before: Mar 26 19:00:53 2026 GMT
            Not After : Mar 27 19:00:53 2026 GMT
        Subject: CN=dff310ea04cb689d7219c4ac1b88ca79aac422a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:7c:7c:20:bb:d4:35:47:83:84:d7:25:12:
                    02:37:7b:53:8f:47:bc:9e:e6:10:f4:1b:ae:55:5c:
                    0b:39:93:07:f9:3b:2b:e9:97:03:7d:85:35:c9:80:
                    16:86:e9:14:37:89:d4:b3:af:6d:dd:35:61:12:21:
                    a3:5b:4f:5b:0e:1b:fe:55:05:2b:41:0c:eb:7c:2b:
                    8e:72:f9:b1:5b:e7:04:d8:0f:2d:d2:6d:d8:4d:05:
                    fc:c1:cb:bb:33:08:9e:3a:80:58:41:18:2c:4b:6f:
                    b3:07:56:5f:55:9b:59:c1:49:aa:82:6d:4e:6b:24:
                    c4:02:44:4f:d2:ca:1a:e2:f8:a9:3a:7c:4e:e7:9c:
                    ab:95:de:50:22:ba:71:d4:ff:05:2a:d8:76:23:4a:
                    1e:97:dd:b3:72:a1:b0:fb:02:61:87:5d:35:5c:c3:
                    7c:5d:ec:b7:29:0a:49:b4:bd:1e:b2:ce:f2:c4:11:
                    b5:85:17:a1:1c:d8:84:a5:b4:0d:93:ba:b7:56:66:
                    57:68:e3:73:f2:70:ef:5a:5d:f7:da:41:da:bc:a9:
                    5f:10:6a:de:d3:73:0a:95:ca:0f:c3:31:ac:f2:02:
                    15:e2:e4:ee:28:54:03:4f:96:8f:1f:63:d5:fd:70:
                    e6:57:8e:91:59:bb:da:5b:eb:7e:27:a3:db:e4:5f:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F3:10:EA:04:CB:68:9D:72:19:C4:AC:1B:88:CA:79:AA:C4:22:A7
            X509v3 Authority Key Identifier:
                keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:91:54:1d:ce:7c:82:13:3c:8a:89:05:8f:58:ee:7f:80:
         0b:12:e7:95:74:e2:a9:a0:f5:b7:eb:0e:3a:f7:67:b5:3e:f1:
         6a:99:9a:95:c1:9b:c2:19:ae:a8:a3:03:fc:09:ab:2f:2e:03:
         49:1e:9a:1b:a9:77:94:87:9a:b7:f4:60:96:0f:f1:c5:f2:ec:
         c9:ae:46:b4:09:c0:a2:69:01:aa:ed:54:ed:b9:ff:9d:8f:68:
         7c:af:a5:b8:ba:74:cc:ed:ac:64:d9:90:85:a1:4a:e5:1b:02:
         46:c7:3a:7d:9c:52:3e:c6:2c:c9:40:32:e6:b3:bd:c8:5f:5e:
         62:ba:3f:99:76:45:2c:e4:81:f4:6a:7d:96:f5:b3:4b:ef:81:
         85:d5:b8:16:a9:12:c9:e9:d1:c9:8b:a6:2f:1e:4d:c8:a6:a8:
         01:9c:44:94:6d:6a:dc:27:c5:08:6f:70:ab:cf:0c:f4:52:df:
         8d:9c:6c:fd:6c:91:24:b0:8e:9a:8a:bf:5f:09:c4:f1:08:2e:
         df:42:86:24:eb:62:3f:30:1e:b0:8c:fd:e7:d8:80:30:b1:0e:
         07:17:9f:3b:90:91:6f:fa:7d:3a:1c:4b:ea:80:b6:95:d5:9f:
         f8:6d:ed:2d:be:90:39:3d:8c:37:1d:a3:ec:2d:b3:fa:0c:c4:
         5d:1a:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:22 2026 by rpki-client