Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File:                     _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier:          I3o2L7HW3TM+u1Gkd89H5gB66IztCy8i8m9/Z1JV2Mg=
Subject key identifier:   5A:D3:E9:E3:38:89:47:89:78:75:27:CC:55:B1:5E:1D:83:E1:F0:4C
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer:       /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial:       019D265FFA5C82A0E3AC85677E162912C90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 19:01:57 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:57 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:57 +0000
Files and hashes:         1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
                          2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: veI39eP6OEZySIX4eSWfEMm7vCDvYrGPAZNe3LGqyVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:fa:5c:82:a0:e3:ac:85:67:7e:16:29:12:c9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
        Validity
            Not Before: Mar 25 19:01:57 2026 GMT
            Not After : Mar 26 19:01:57 2026 GMT
        Subject: CN=5ad3e9e338894789787527cc55b15e1d83e1f04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:ec:24:54:3b:a0:02:35:b2:11:97:ea:b0:
                    8b:43:e8:0e:5c:67:5c:b3:14:a1:ec:cb:db:8d:ea:
                    c6:8d:41:3f:70:b8:47:40:66:54:c2:6f:11:4b:50:
                    d6:b6:61:7a:83:32:e3:9e:c5:a5:dc:5a:a5:27:cf:
                    31:2d:b9:51:ba:04:c0:4f:6c:82:98:cd:2a:bf:92:
                    50:ec:30:f1:73:f2:12:c7:98:56:15:64:12:b1:dc:
                    e8:de:a0:de:47:c8:c0:67:34:65:20:05:85:f6:0f:
                    e7:cd:62:1d:16:f9:52:35:58:3a:ec:28:4f:98:cc:
                    9f:7c:1e:9b:e0:8c:bf:e3:c4:2a:3f:f0:18:d2:38:
                    4a:d1:39:34:85:58:4d:09:62:f0:cc:01:fc:f6:9d:
                    1c:ae:bd:66:f8:f6:e8:8b:f6:42:0e:0f:b3:65:11:
                    6d:62:3d:50:d3:5e:e5:ea:47:9d:b9:a1:e4:82:1c:
                    15:d7:98:bc:16:4a:d8:57:b1:d2:6e:b0:51:71:93:
                    7a:17:bc:d0:e1:4c:dc:c0:97:d3:5a:fb:dd:d2:c7:
                    d9:b2:68:1e:01:bc:14:c0:61:80:10:9f:79:8b:89:
                    2d:ce:62:24:98:49:f4:b5:bc:5a:29:0c:97:5c:4f:
                    a9:a2:8d:53:7c:d9:c4:62:2d:5e:54:ef:43:d5:57:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:E9:E3:38:89:47:89:78:75:27:CC:55:B1:5E:1D:83:E1:F0:4C
            X509v3 Authority Key Identifier:
                keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3a:5f:7e:19:05:6d:b4:a4:d3:14:e9:46:4b:75:70:ef:e5:
         ae:d8:3c:6b:8f:44:99:89:fd:98:78:8d:6f:c8:cc:3c:5a:a1:
         29:b3:51:0c:cf:d0:cd:ea:79:11:c7:7c:6b:e4:4b:3b:96:b4:
         53:51:b6:83:9a:27:5d:f0:58:ee:66:27:ae:17:45:b0:54:55:
         82:22:e2:a7:92:c6:f9:c7:57:05:75:96:9f:8a:b5:05:c0:c4:
         39:37:17:12:ef:2e:e5:cd:70:d3:59:50:20:ee:2f:a3:37:59:
         3d:a6:41:dc:c4:a2:7d:3c:af:93:bf:d1:6c:74:32:bf:92:5d:
         85:39:93:17:a3:85:87:05:f4:6d:d1:9a:6d:50:80:6a:7a:62:
         3a:fd:06:ac:ca:a8:44:5a:2b:d0:f3:d5:a5:86:cf:cf:3d:2e:
         ad:c6:54:8d:bf:3f:b3:0e:48:cb:0e:5a:cc:aa:63:68:26:9f:
         a8:f5:c0:3f:70:f7:b8:9f:ad:a3:06:b4:42:f5:55:3d:bd:f1:
         78:76:d8:ad:a7:f9:6a:dd:1c:5d:e0:82:5e:b6:a4:e5:4d:5a:
         ba:9d:07:99:89:ab:6f:e8:13:5f:b8:53:61:4e:84:7c:e0:17:
         c6:91:a8:e1:ff:9e:e4:c9:e8:b0:97:a6:c0:08:12:32:db:9c:
         e1:6b:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:51 2026 by rpki-client