Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          f52jJcZNJc9pUCelrIDgYrlSnQJ7m7aAJyuMHSq4I60=
Subject key identifier:   A2:7D:63:6A:6E:4D:44:40:EA:A2:CA:90:D6:AF:4E:71:E1:E1:32:3E
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       019D29618EB91D961AA6D4829DAEFE222CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          1898
Signing time:             Thu 26 Mar 2026 09:02:32 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:32 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:32 +0000
Files and hashes:         1: 2RbqMRULp-QNoJeRuz3DuXb82SY.roa (hash: vkQ1ietSun4egH0TCTbvv8l/0HXrnZiF/HLYLQxFwJA=)
                          2: IQ2oYAGI7FrbtQw-njklceThbc4.roa (hash: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw=)
                          3: SVczDT9Xfgd978coimjrauYBi54.roa (hash: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: zYXJdMYO6FPaDZ7VoB09PkJSzDCjcosb0BgTzc3SMPQ=)
                          5: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (hash: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:8e:b9:1d:96:1a:a6:d4:82:9d:ae:fe:22:2c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Mar 26 09:02:32 2026 GMT
            Not After : Mar 27 09:02:32 2026 GMT
        Subject: CN=a27d636a6e4d4440eaa2ca90d6af4e71e1e1323e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:da:c9:ab:ec:38:83:67:08:88:fb:ae:87:
                    71:b3:62:1d:76:04:fa:b6:63:9d:ef:87:93:60:2c:
                    8a:6d:5a:ab:22:22:9e:9d:f6:13:82:74:e3:ab:fc:
                    c0:f7:89:5b:6f:ac:4e:a3:ce:42:5c:f3:68:f4:6b:
                    c4:5a:f8:22:2e:e4:eb:70:4b:ad:eb:63:0b:83:1e:
                    eb:98:2b:83:95:cf:98:a0:3c:1b:f7:86:b5:76:63:
                    fc:81:ca:85:b8:35:9e:1e:55:0e:cc:27:a6:51:bb:
                    49:d1:ba:dd:26:77:e3:08:36:43:88:b5:53:d5:90:
                    46:ae:46:91:3b:c4:5c:94:02:2e:20:8b:ac:09:fe:
                    75:13:d7:d4:36:f0:0b:89:05:e1:80:09:a2:90:dd:
                    15:4f:76:0f:ed:db:50:54:1b:2c:2c:b1:3b:66:c8:
                    3f:6d:1e:9b:96:fb:0a:5f:b9:97:60:4d:5b:0f:96:
                    d8:cf:dd:90:90:36:f1:c8:d7:b4:97:b9:bb:38:c7:
                    7e:98:bb:0e:25:78:2e:d6:e4:cd:51:c2:ba:04:52:
                    30:3b:c8:bb:a0:d2:6f:f1:57:51:17:4d:a7:6b:f7:
                    79:ac:e7:3f:c7:14:18:24:2f:4e:5f:bb:4f:fa:b0:
                    01:a7:b2:7f:ae:10:38:d4:df:01:eb:52:a7:be:e1:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7D:63:6A:6E:4D:44:40:EA:A2:CA:90:D6:AF:4E:71:E1:E1:32:3E
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:96:3e:5d:f6:64:99:c9:b0:32:6e:20:76:05:aa:e3:52:09:
         c3:16:87:f4:dc:59:f0:5e:b5:67:55:c1:4c:4e:54:c0:2d:c7:
         e5:9d:da:2e:11:3c:15:16:76:0c:a7:10:04:81:15:b7:26:49:
         ee:03:02:1f:7c:b7:41:a7:6f:f0:6d:c5:d2:46:d3:5e:71:0b:
         e3:cd:f8:fe:19:e7:f8:6a:65:da:0f:63:01:20:cc:b4:7a:0b:
         cf:9a:6a:af:d9:0c:a8:08:6c:9c:19:18:22:43:a2:50:ba:c3:
         7a:87:ee:7f:2e:38:6f:dc:75:a1:54:a5:28:f6:d8:9e:62:6e:
         dd:51:85:fc:bf:67:b2:85:fd:8c:8c:10:06:a5:d0:0f:75:a9:
         a6:a1:de:58:bd:f6:bb:55:49:58:ad:c5:7b:6e:a2:30:ee:48:
         38:e8:b0:df:1b:69:33:4d:74:37:a0:66:fb:19:54:91:c7:1f:
         65:4e:1f:81:39:de:79:c1:da:ff:ff:69:d8:0d:59:a0:ac:32:
         30:7e:63:ee:eb:b8:d6:92:bb:11:e4:ef:fc:a0:2e:6d:25:70:
         59:52:fd:68:80:c5:4c:11:5d:25:35:56:bb:b7:cb:df:c4:22:
         78:8d:86:37:a3:71:74:4c:69:e4:a0:58:e7:0e:ff:4c:de:74:
         ce:78:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:07 2026 by rpki-client