Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
File:                     b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json)
Hash identifier:          aHsiyQZUjpEYoghb+qh4555O/xllwDxYdnJczfeknCk=
Subject key identifier:   A9:99:5D:6F:55:6D:E4:42:BE:00:0F:B2:F4:B7:F6:24:63:8F:E4:A7
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       019D2961010CE3B119FE64EA1B0461F91F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
Manifest number:          1538
Signing time:             Thu 26 Mar 2026 09:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:56 +0000
Files and hashes:         1: 3fWLsk06GP4BDeD7I0N3OoV6xTw.roa (hash: pdVTz/7WIOLzoIyarAvcs4qjKDmV1F3cGRb5yOzIYZg=)
                          2: 9iFdSaW-rEOH9BsaDgdEkFOe_l8.roa (hash: Sa6vsHQLj+q1saewkNEM/Z5+Wij0qrX7tBjQg8hQ5RU=)
                          3: P5IKvyQTo66CbRnN3JS3_C3lAgs.roa (hash: walX3Gp4Gcedyo8ng/52EHxjgKFp90vyv+qcgsHKx/o=)
                          4: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: ufsKT7Fn3M/iGA+SzmnuPTBgcrHaWJyzRBvfmVHTXeA=)
                          5: coqQltyEL6s_AV_ScSxVWwobaYM.roa (hash: 1OsXtHor/Ia/1YUpRgS+ibS0BUNIKccOCNCjONnFINc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:01:0c:e3:b1:19:fe:64:ea:1b:04:61:f9:1f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: Mar 26 09:01:56 2026 GMT
            Not After : Mar 27 09:01:56 2026 GMT
        Subject: CN=a9995d6f556de442be000fb2f4b7f624638fe4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:ff:3b:1b:45:16:37:ef:c8:58:9b:5d:d3:
                    b5:8f:a7:6c:2f:23:43:58:fe:96:d6:ed:a3:5e:94:
                    38:3b:f6:a9:b7:e7:1a:cf:a9:e2:8b:08:62:f3:c7:
                    10:0f:88:70:33:8e:0c:e6:f9:77:ac:0c:a0:06:0a:
                    ed:39:72:2e:8e:b5:0a:d7:f9:9a:50:08:f4:89:79:
                    ff:9f:91:75:48:dd:8f:2b:a5:1f:f1:04:74:69:c8:
                    83:54:3c:a3:9c:81:f5:af:52:64:b8:8a:55:cf:af:
                    6c:c3:ba:e1:36:52:f8:53:7b:a6:e8:6d:9b:d4:7c:
                    8d:88:c1:ff:f1:81:71:6d:e0:56:bf:7b:5a:f0:33:
                    fa:c8:fa:cc:40:2e:42:1a:2c:0c:e6:4e:3d:d5:9b:
                    ce:88:76:d3:57:7d:29:bd:2d:3d:a6:46:84:03:55:
                    eb:f9:6f:b2:0a:3e:ad:04:47:93:b7:1c:6b:a9:f4:
                    a4:a9:50:89:44:e5:55:34:3b:41:61:6d:16:06:d4:
                    2c:10:30:3a:e1:6b:bd:35:81:61:71:34:8c:7d:45:
                    be:97:e2:c9:75:58:fb:0f:f5:6d:f2:7e:f4:28:39:
                    50:7c:77:a2:e0:4a:4c:57:e4:b8:2f:43:b3:c9:60:
                    9e:f0:97:11:ba:2d:b5:99:d1:78:e3:59:28:3c:17:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:99:5D:6F:55:6D:E4:42:BE:00:0F:B2:F4:B7:F6:24:63:8F:E4:A7
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1f:43:55:ea:a3:6c:28:94:59:e6:4e:91:c5:15:e9:e0:92:
         fb:ba:c9:b1:82:e0:29:4d:4f:3a:2c:75:20:7c:01:cb:5a:b8:
         fd:45:1a:fc:51:cb:20:8c:44:44:79:eb:dc:46:22:48:f6:b7:
         07:62:e9:94:64:12:34:16:4c:f2:07:0d:cd:6a:f0:96:49:fc:
         d3:13:6e:b4:76:44:59:e9:fd:6f:40:1e:88:05:c2:3e:b8:20:
         5e:88:9a:a9:2f:70:d7:3a:2b:b3:ec:4b:01:cc:3b:58:9c:ee:
         de:98:33:c6:28:13:2a:29:ed:8d:de:1f:5e:83:67:5b:b8:8a:
         96:aa:0d:3a:88:12:38:93:ed:41:07:3a:1f:39:f3:ef:3d:a3:
         d8:f1:15:85:6d:a1:80:e8:89:fa:2e:a0:50:83:61:ba:14:f5:
         c0:ce:1c:e1:22:06:6c:86:b0:10:93:eb:e8:db:09:c9:3d:5c:
         ce:41:f8:de:c7:ad:21:aa:be:18:2b:4c:e4:36:8a:ba:cc:29:
         13:b0:36:22:58:0c:4d:21:7b:d9:b6:e6:ad:90:59:18:d9:9a:
         81:be:bd:a7:61:07:2f:9d:f3:c8:05:de:84:a4:21:b6:6b:99:
         bc:cd:f4:85:14:26:35:3c:fc:20:69:57:4a:46:7c:1c:f4:1c:
         b9:1b:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:33 2026 by rpki-client