Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File:                     RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier:          Mtmn3Dmfd1t4WCXPCDwKqf1pxvQY65gKLE1FleCGZGU=
Subject key identifier:   EB:C5:53:31:4C:CB:7D:1B:EA:1D:2F:81:87:50:CC:2B:10:4F:C3:76
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       019D29292F70C9D826B8CB6389F2AC37C23D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number:          1819
Signing time:             Thu 26 Mar 2026 08:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:58 +0000
Files and hashes:         1: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: jR+HWD4U3ZN2V9/wqE8BshO1r1DZlTbAeYaOO/EC4dg=)
                          2: eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (hash: OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:2f:70:c9:d8:26:b8:cb:63:89:f2:ac:37:c2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: Mar 26 08:00:58 2026 GMT
            Not After : Mar 27 08:00:58 2026 GMT
        Subject: CN=ebc553314ccb7d1bea1d2f818750cc2b104fc376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:92:3b:11:36:ae:73:65:81:4e:84:f7:d1:
                    de:07:94:57:74:27:21:6c:a8:e0:4d:fb:9d:0e:d9:
                    4a:79:4c:4d:43:ce:42:d9:c4:b9:3f:72:22:48:cb:
                    2d:99:cd:0f:82:ac:d9:6a:8e:c1:42:6e:b1:92:1a:
                    8b:9f:b6:7d:85:ee:a1:63:ab:25:7a:a4:7b:eb:f5:
                    2d:e5:11:59:96:97:c6:d5:51:2b:77:51:96:1c:20:
                    ab:76:59:b9:42:28:62:ae:ec:be:0e:df:79:d1:a8:
                    b0:2c:da:6f:15:6b:87:5b:43:6c:05:3c:b4:25:4e:
                    0c:c4:da:a9:ea:22:eb:ee:b3:3b:52:77:97:c8:f2:
                    a0:0e:5d:d7:57:24:21:e1:38:ea:db:b0:d6:19:dd:
                    eb:ac:f9:26:9e:51:ae:9d:4f:a5:af:4a:a9:bb:21:
                    53:06:b9:35:80:1f:bd:6f:d4:38:cd:d3:eb:08:ef:
                    10:8b:c5:1e:b1:98:fa:bc:47:a1:11:4b:a3:19:cf:
                    7c:b9:f0:cc:aa:3e:11:91:de:35:f1:7e:88:0a:c1:
                    32:dc:f0:57:99:c1:95:e6:94:01:d0:11:0b:b6:27:
                    e8:ad:8b:fa:09:9b:07:85:b2:cf:e5:ad:7c:80:00:
                    e2:3a:e2:a6:fc:f6:08:73:44:78:12:c7:ef:5c:34:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C5:53:31:4C:CB:7D:1B:EA:1D:2F:81:87:50:CC:2B:10:4F:C3:76
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:80:6c:61:1e:f3:f7:79:8d:c0:9f:5a:21:d4:7a:44:d5:ca:
         13:ff:9e:4c:9b:7e:43:d3:af:17:72:fe:71:17:29:dc:2c:f4:
         68:fb:36:c7:ec:f4:24:e2:ec:96:f1:31:cb:d8:6c:fb:cb:b1:
         e9:3b:0f:55:b0:b7:f9:db:ad:76:fc:93:82:f8:33:5c:fc:65:
         4f:8b:72:6f:e7:62:69:f1:1c:f7:f6:70:e2:05:c8:d2:bb:0d:
         d1:2c:7a:bc:4f:51:a1:09:2b:3a:9d:c0:c4:f9:da:43:2d:0e:
         34:aa:8d:06:d9:47:d5:82:4b:d6:71:4d:5b:cc:ea:62:59:eb:
         85:db:b2:5d:a1:c6:bc:2a:ae:f6:55:88:87:5b:eb:09:b2:0e:
         8b:46:c0:48:2a:d7:29:75:15:e5:d7:5b:e9:b3:de:44:e1:2f:
         3b:1a:e2:dc:b0:48:9e:10:79:b1:28:ec:07:47:3c:4f:a6:f3:
         23:69:e6:ac:d3:56:80:f3:59:77:c5:56:7d:bc:7c:61:76:93:
         d1:14:9a:48:8d:5f:cc:13:ae:a5:e3:11:3d:c3:0b:07:b8:90:
         a0:36:bd:b0:13:cc:36:8b:d8:d2:96:13:16:01:f6:45:07:80:
         a7:28:67:ac:16:c6:8e:5c:f4:aa:14:9f:1f:d3:42:1e:56:f6:
         3f:78:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:33 2026 by rpki-client