Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
File:                     mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json)
Hash identifier:          KN9XxWwXqFY5OELuwzEmcwXSRSba09laBYX8ZjVUu0c=
Subject key identifier:   4E:7A:8F:29:F9:7E:99:F6:2A:AC:C9:1F:B0:1C:31:D1:C4:48:3E:86
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Certificate issuer:       /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial:       019D27DFFA44A6DA1037039FEB77B14641AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 02:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:23 +0000
Files and hashes:         1: 5mevMZ6zfxkx-6wdz4bsftQO_GU.roa (hash: P9cZpqJMiI+LCnBsIg75xPvytqlb9VxBjd2D4dIOJhM=)
                          2: 6hi5SBPtuCCc_Ra34G-rijGpoCE.roa (hash: /JJ4SHMG/BtsEG8R3qP/R1q0vHL7SIp89pxXLWjsFg8=)
                          3: _N4R_5nFKyrUydAv5kfyq_YCjA0.roa (hash: yEWgrCGd25JxNB4GGLGD4iJWhDTz2tIiDjFlu5zF5t0=)
                          4: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: ZV2kUv3vX4rKJ5WqhNL64BNX+96ZRdcepcyherXMCQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:fa:44:a6:da:10:37:03:9f:eb:77:b1:46:41:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
        Validity
            Not Before: Mar 26 02:01:23 2026 GMT
            Not After : Mar 27 02:01:23 2026 GMT
        Subject: CN=4e7a8f29f97e99f62aacc91fb01c31d1c4483e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:ae:ca:2b:1a:d5:e6:19:a2:2c:52:a9:04:
                    09:44:40:c7:03:2c:b5:98:6a:e4:40:20:a4:b0:5d:
                    4c:c2:c8:09:7f:0e:12:b5:a1:ec:be:19:f2:29:c6:
                    18:c2:59:d9:a1:b3:b6:ed:12:79:c0:51:22:89:51:
                    2a:1e:63:83:75:01:6d:6f:51:3d:f3:03:3d:38:18:
                    de:0f:b2:86:ad:57:44:97:07:3b:87:f1:c3:30:13:
                    ab:05:46:1f:0a:b9:41:23:11:79:2f:6f:6d:98:81:
                    09:e9:47:55:76:80:7f:72:4d:ff:38:60:53:75:31:
                    87:ac:4c:f0:2d:b6:79:d7:15:c6:94:c8:c6:0e:99:
                    bc:79:4c:46:c5:ac:9c:09:6c:a4:aa:78:7c:f7:48:
                    8b:05:8e:49:dc:9d:4c:32:65:d8:f3:8e:97:0c:56:
                    20:ba:5e:30:a4:6b:2f:87:2b:67:b9:6d:d4:fe:57:
                    5b:67:e4:8d:f7:2f:c4:94:a4:5b:50:8b:81:9a:b4:
                    bc:f7:5e:2d:ae:1e:56:0e:76:de:af:27:a3:f2:22:
                    09:99:a2:c0:ee:47:e6:39:20:84:a1:e2:f8:db:d6:
                    df:97:aa:45:78:8c:18:d6:44:f8:a6:c2:3b:b5:65:
                    f6:86:36:67:17:07:0f:db:f1:13:95:cc:70:79:15:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7A:8F:29:F9:7E:99:F6:2A:AC:C9:1F:B0:1C:31:D1:C4:48:3E:86
            X509v3 Authority Key Identifier:
                keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:a8:0f:15:69:13:9e:06:78:8c:46:d1:2e:ae:eb:f5:90:
         10:0d:e6:2f:49:01:e6:14:66:03:78:91:4d:2f:9c:b3:93:1c:
         09:e6:74:cc:a6:43:2e:b8:67:3d:97:74:1f:17:ba:74:9a:20:
         88:19:2f:8a:38:a0:44:60:06:58:f9:f1:72:64:a3:d1:2c:92:
         c1:3e:d0:3d:6d:1b:c3:20:a6:4d:d3:c5:0a:bf:eb:1d:84:a2:
         13:ea:de:bc:09:5f:1c:38:c0:a3:ad:e7:0d:d9:30:24:ab:c6:
         0a:8d:7b:1a:d4:48:c8:8e:ff:4f:14:39:8b:cd:5b:d4:50:48:
         2b:6f:27:95:b2:ba:87:7f:de:a0:30:df:5e:2b:83:51:a2:db:
         9d:2b:58:69:12:4b:bf:6e:78:9d:0b:55:c6:fa:37:f3:80:b3:
         1d:a8:a0:5f:1f:cc:e4:79:f2:f8:f1:70:97:7e:f1:b1:df:5b:
         15:c6:8e:68:8b:35:79:da:6f:25:06:00:f8:e6:a9:7e:7b:63:
         2b:1a:1d:79:ab:b4:dd:e2:5a:37:c2:da:77:48:ea:0a:c3:85:
         f3:57:5d:0e:44:38:d5:08:c9:27:c4:03:ef:e8:b6:43:61:70:
         ed:0b:e5:41:c9:f7:71:d2:2b:70:d8:32:b6:ef:3c:5d:9a:cb:
         a8:2c:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:36 2026 by rpki-client