Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File:                     dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier:          Ly2pFrDIQONlarBpOY79Qz8jVXAenON/U7ylhtqpgBA=
Subject key identifier:   22:C0:91:84:E5:1F:F1:10:16:3F:51:96:42:F9:67:96:71:4B:0A:35
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer:       /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial:       019D27E04887D3A71C033CE75F4F9CA080EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 02:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:43 +0000
Files and hashes:         1: ScsWRL_Mu43RcB7Q3E8exZ3sAxE.roa (hash: a2qscDdrl/I7FMbIlIwybQ9A1yL+THmCfW/+aGHZ230=)
                          2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: hNxP/gkjlFtaV6E0F9we/bW5zi6rHpKur032r+EIlAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:48:87:d3:a7:1c:03:3c:e7:5f:4f:9c:a0:80:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
        Validity
            Not Before: Mar 26 02:01:43 2026 GMT
            Not After : Mar 27 02:01:43 2026 GMT
        Subject: CN=22c09184e51ff110163f519642f96796714b0a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:4c:c8:f1:ad:6f:1f:81:a3:65:ce:89:cc:
                    6d:56:ba:da:d0:96:de:18:65:ec:95:b2:f9:64:e4:
                    6f:6a:a6:93:fe:7d:ec:ed:98:a1:3c:08:9b:dd:b2:
                    62:87:8b:e4:c2:5e:0f:08:90:6e:c6:3a:bf:ff:3c:
                    04:34:6e:f6:73:7b:4e:84:1b:ee:96:71:0e:79:ca:
                    9f:c9:13:fe:67:04:09:1d:c1:be:f0:3f:72:fe:5e:
                    d2:de:c6:3b:4d:e0:8c:30:1b:bc:43:9f:76:dc:21:
                    aa:79:0b:9d:a7:3f:b0:07:00:40:11:bb:7d:92:f8:
                    1c:3d:7a:fd:c7:4f:5d:0d:6a:9f:5f:12:85:4a:5f:
                    4b:a8:ed:c0:28:d5:58:08:43:bf:c2:36:e8:31:5c:
                    ec:90:b3:1c:a8:e5:df:02:1c:30:d2:54:d3:34:ee:
                    fb:9e:86:d4:85:b5:ed:07:9b:0e:e1:13:1d:e7:09:
                    f5:8e:82:74:42:b1:c9:c9:16:1d:36:d5:e8:ea:f6:
                    92:dc:e4:48:ed:e2:48:ec:cc:ad:21:98:4e:11:ca:
                    46:15:00:95:45:f0:4b:40:c0:b0:ef:78:f3:9e:93:
                    f2:ca:aa:90:33:d8:57:4f:c6:04:15:eb:82:56:9d:
                    1e:c4:77:3d:ca:e1:43:b9:e9:0e:54:ee:26:d8:80:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C0:91:84:E5:1F:F1:10:16:3F:51:96:42:F9:67:96:71:4B:0A:35
            X509v3 Authority Key Identifier:
                keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:57:90:05:57:6f:cc:4b:a0:56:3e:be:09:e6:f2:46:f1:
         f7:16:ef:2c:b6:60:85:ef:24:04:a4:36:e4:cc:d9:8c:e8:98:
         5b:92:1f:6d:26:bc:6d:9e:71:86:ee:e7:80:22:8d:5a:64:ea:
         2c:a2:4a:43:1e:8d:ea:57:5a:3c:e0:af:0d:2c:ff:ca:cd:4a:
         a1:43:6e:48:ec:48:66:c4:c0:57:4b:80:02:6f:34:20:6f:6c:
         fa:fb:60:c8:09:55:83:da:fa:de:b5:c1:c7:24:3b:7f:52:6f:
         9b:d1:da:dc:9c:a0:16:cc:a1:d8:dd:4e:35:9b:87:de:58:a2:
         cf:43:8f:a2:63:77:3b:46:28:4d:16:25:db:7a:a1:51:c8:86:
         88:fc:a2:9c:f7:28:f8:bf:eb:c6:46:df:63:89:28:04:f7:a5:
         12:7c:eb:c9:8f:e2:52:83:90:08:87:02:36:fd:70:b0:91:83:
         99:03:d8:e4:34:fa:e3:ec:7d:b8:bd:c3:ad:d2:75:65:d1:74:
         2c:dc:81:68:de:08:66:03:b0:f5:0a:0d:df:9d:cc:24:4b:8f:
         9f:ce:55:59:2d:9b:79:73:63:67:fa:59:44:b5:5a:87:62:75:
         f7:cb:c3:1d:27:bf:11:79:3e:a2:ff:bc:22:b7:37:c2:08:78:
         a5:87:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:25 2026 by rpki-client