Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File:                     SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier:          XJQThSRNwKqk3y/1SaYoDeF0tv17zoTzXYgzv1y9FA8=
Subject key identifier:   21:B4:67:20:84:41:83:85:2E:44:80:40:85:9B:28:B6:76:5F:C4:8B
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer:       /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial:       019D2816DE153F5DAC9AEED47AF19A82E6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number:          0778
Signing time:             Thu 26 Mar 2026 03:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:20 +0000
Files and hashes:         1: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (hash: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4=)
                          2: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: 1q7vfr68W0i7LVV0fvl5D4yUB4XC2Nu3aYpD277y+nQ=)
                          3: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (hash: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:de:15:3f:5d:ac:9a:ee:d4:7a:f1:9a:82:e6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
        Validity
            Not Before: Mar 26 03:01:20 2026 GMT
            Not After : Mar 27 03:01:20 2026 GMT
        Subject: CN=21b46720844183852e448040859b28b6765fc48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:ec:68:31:5f:ff:9e:0e:5b:8c:24:37:c1:
                    e5:83:88:52:cd:19:17:04:9e:79:42:f8:a9:33:04:
                    4d:e6:a1:04:79:b8:2a:2f:e9:eb:91:f0:8d:5d:d3:
                    a0:91:0a:07:60:e6:9e:95:37:f7:89:34:07:3a:ac:
                    31:7b:2b:44:53:b8:17:85:fa:61:b8:c4:68:5a:5b:
                    cc:1f:fe:bd:20:36:0f:5b:f0:37:83:c9:cb:1d:4f:
                    82:26:7c:b9:ac:92:a4:d3:df:3d:ed:2e:36:9d:20:
                    29:79:c2:4b:58:0b:31:a8:3c:08:68:37:bb:38:ff:
                    7d:41:cb:c8:eb:54:c7:0b:02:15:81:73:d6:dd:7a:
                    10:01:12:7c:31:ad:a7:89:8a:87:eb:58:c3:36:39:
                    1e:d1:b6:29:27:11:3e:df:38:fd:ab:a8:08:0e:e1:
                    db:14:bd:ea:85:0e:70:26:13:91:cc:9c:66:1a:dc:
                    54:61:bc:b6:03:ad:2c:00:6d:06:34:6e:97:c2:61:
                    e9:6e:2b:b0:45:2d:27:8d:5a:88:3c:0f:38:b2:f7:
                    d2:27:91:22:51:88:5b:7d:c9:5f:b8:86:46:06:ea:
                    e0:06:e6:c7:43:65:ab:e8:3d:a2:e0:a3:6b:e1:55:
                    20:18:a8:e0:ba:e4:c6:2e:1d:ce:49:5b:dd:33:f2:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B4:67:20:84:41:83:85:2E:44:80:40:85:9B:28:B6:76:5F:C4:8B
            X509v3 Authority Key Identifier:
                keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:32:2a:12:dc:8e:5b:ac:3b:35:8a:c4:92:bf:94:59:85:
         08:df:73:a6:1a:4c:7a:5d:19:d7:65:28:07:8d:98:82:9a:0c:
         cc:c1:11:e0:36:77:52:30:9c:00:d5:85:87:85:e1:ce:53:5d:
         c6:58:b6:ed:5e:98:09:eb:db:b3:45:1c:49:f3:94:44:24:84:
         e7:36:64:1d:a2:6e:fc:5c:0c:3b:04:4b:05:80:43:22:8e:4a:
         c2:88:69:db:d9:a6:24:dc:b8:d9:ea:1a:96:bb:6b:fe:7e:63:
         38:88:ef:3e:6e:44:29:eb:88:c4:3b:81:6b:6f:65:5c:af:b4:
         e5:2b:2d:c6:65:0e:a4:de:ef:54:99:ff:30:fa:56:14:30:e4:
         8e:88:7a:03:12:75:8e:bf:52:24:be:d5:fc:b2:8a:8b:39:72:
         00:cb:39:ae:5d:0b:0e:60:d0:35:bc:11:d0:43:28:fd:e3:5d:
         1a:2e:c6:af:28:a7:71:e1:95:97:4a:8d:f7:06:eb:8d:e0:e9:
         26:6b:c7:5b:ab:91:3d:fd:bf:db:e4:f5:83:4b:75:4f:66:a1:
         ff:46:81:c1:f7:f5:39:a2:ec:6c:bb:f7:d8:d9:11:bd:21:c2:
         19:e3:02:ed:b0:2d:cb:fd:b1:da:ee:0b:ad:bd:a9:b5:c9:56:
         31:66:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client