Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File:                     SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier:          mMywNiSTV3Mi+9K5uLHOjy1RzrN5QEWMU8m2Qr0Ta/o=
Subject key identifier:   D7:E0:20:D0:B1:93:F8:B5:08:68:9E:88:F6:02:08:89:3B:0E:90:75
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer:       /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial:       019D2960C7BEA6FFF2C71A97F58997793BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number:          050C
Signing time:             Thu 26 Mar 2026 09:01:41 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:41 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:41 +0000
Files and hashes:         1: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (hash: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=)
                          2: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (hash: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks=)
                          3: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: 6/MVDQ/x/sea3YoQ3p4uV24frcdBNkrn8+rSfnRggNM=)
                          4: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (hash: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:c7:be:a6:ff:f2:c7:1a:97:f5:89:97:79:3b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
        Validity
            Not Before: Mar 26 09:01:41 2026 GMT
            Not After : Mar 27 09:01:41 2026 GMT
        Subject: CN=d7e020d0b193f8b508689e88f60208893b0e9075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:58:c1:72:98:54:58:d5:1b:40:5b:d9:01:
                    b3:ad:cd:b3:9f:91:4d:5e:c2:57:87:10:07:96:c0:
                    4d:2c:ef:72:c2:8f:b5:4d:07:9b:f4:b2:19:42:a5:
                    9e:94:5c:ae:fd:0f:1e:0d:f6:06:24:ec:66:6e:6e:
                    13:55:ec:98:2e:e1:fc:54:b0:87:65:a5:55:cd:67:
                    03:e3:91:81:f4:8c:2f:06:47:b6:53:bb:bc:f8:60:
                    7a:8d:bb:fc:55:7c:17:58:86:0c:a9:de:a6:e8:d6:
                    f8:2b:1a:4f:35:72:4f:13:ec:8b:63:83:81:b4:cb:
                    50:f8:43:31:b8:cd:16:50:f0:ac:6a:e6:90:a7:00:
                    7a:51:d5:97:9b:8b:a6:52:3c:44:00:0d:53:97:18:
                    59:96:58:05:68:e3:f4:f9:a8:b5:7e:a5:fe:30:50:
                    d4:50:0d:0a:44:a7:40:60:52:00:ce:36:18:79:96:
                    81:36:ea:b5:d9:12:30:18:4a:c0:0f:d1:82:a0:ab:
                    31:54:62:7b:5c:b7:d6:0f:8a:31:e1:a3:17:46:66:
                    32:5c:af:a8:62:ff:1f:4f:da:92:24:e2:1b:48:36:
                    91:1d:32:da:2a:82:86:78:20:ab:f6:d6:b4:8e:47:
                    80:de:e7:b2:85:89:55:18:a6:69:dd:ba:93:b2:ae:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:20:D0:B1:93:F8:B5:08:68:9E:88:F6:02:08:89:3B:0E:90:75
            X509v3 Authority Key Identifier:
                keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9e:74:b9:b1:ca:6b:e8:18:1d:87:8f:40:f8:10:b0:33:cf:
         cc:6c:5c:8d:ef:68:2a:f7:54:88:85:da:16:3c:5a:c5:00:64:
         56:f9:93:fe:1c:b3:81:62:98:d5:0f:15:70:0a:bd:26:35:55:
         1f:09:65:56:ac:a4:54:89:ce:f9:36:c8:40:40:ba:68:ff:d1:
         10:da:1f:f7:69:3c:a1:67:27:1f:64:aa:34:ec:9f:fd:ee:82:
         40:33:ca:8d:f3:a2:3d:0a:72:61:17:89:93:ab:c5:c2:e2:46:
         a1:a7:d3:de:56:cd:65:70:2c:ac:14:db:eb:e8:c3:5d:b9:a7:
         b0:df:ab:ce:94:46:9d:4f:bf:db:bd:64:b3:3d:cd:12:92:f8:
         55:8a:17:53:0d:3f:50:9c:3f:3f:89:76:00:a8:a5:21:bd:0c:
         09:b1:77:43:68:4a:60:f9:c4:2f:11:0c:4f:09:c1:be:c4:b1:
         8d:3e:a4:74:85:26:fb:1a:b7:84:94:eb:0d:a2:ad:e3:60:01:
         ad:b6:80:42:47:1c:3e:90:85:65:5f:82:be:68:66:c0:8b:5c:
         a0:1b:85:5d:d5:3d:16:44:b2:c9:c1:27:87:48:1b:63:d4:2f:
         fb:9e:3b:25:39:95:27:4a:87:b4:17:f4:55:80:3a:87:f9:20:
         d4:de:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:36 2026 by rpki-client