Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          KUycGXQxZE7fq5VjwIDIuz5yz8/FjDSqEkclQHOZQjc=
Subject key identifier:   9D:CC:6F:27:F4:E1:F8:AA:AA:41:35:97:CC:A0:AC:0F:95:88:AC:41
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019D2961B9E66458591435F4768DC9451508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          1897
Signing time:             Thu 26 Mar 2026 09:02:43 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:43 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:43 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: r5ilpbTXYnMdpJj0zaNDSQciwdqJz5cSZxzYKXYI++0=)
                          2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
                          3: KINZYIE6_XaYNki6NUivcoprCUw.roa (hash: qhCfbFIbX14JzdD9PrKyC8S6QJj73yUa2umRc8K8fPw=)
                          4: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
                          5: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:b9:e6:64:58:59:14:35:f4:76:8d:c9:45:15:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Mar 26 09:02:43 2026 GMT
            Not After : Mar 27 09:02:43 2026 GMT
        Subject: CN=9dcc6f27f4e1f8aaaa413597cca0ac0f9588ac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:3a:df:7e:6a:d2:44:d4:14:1f:8b:af:36:
                    24:74:bc:4a:5f:08:ec:10:18:62:c7:67:fd:92:0c:
                    8b:f9:c7:cf:56:c1:05:10:5f:11:7b:64:14:cd:73:
                    28:4e:ce:54:68:2d:c5:8a:8a:d2:fc:e2:33:ed:d0:
                    ba:29:cc:f6:57:93:a6:2a:b0:b1:38:e9:6f:73:8a:
                    6d:44:78:40:94:18:79:b9:86:a7:84:c4:bc:67:0a:
                    7f:19:d2:d4:89:5c:28:d4:d5:f2:a7:00:cc:0c:b0:
                    11:23:7f:be:1f:3e:74:4d:34:2b:fc:87:e9:74:8b:
                    38:c6:01:d6:5a:56:f4:71:0c:e3:59:bc:b6:24:56:
                    98:77:92:40:05:3b:a7:65:34:6f:fe:9f:54:f2:40:
                    84:3e:bf:31:de:48:84:48:ca:ed:4b:5e:ee:6d:bf:
                    88:2e:6a:00:b9:4f:23:3c:90:2c:c0:ad:85:76:48:
                    35:4f:c2:83:b7:5c:21:b5:16:b8:85:aa:16:a5:a3:
                    28:e0:c6:45:2c:2f:05:6e:41:5d:ae:9d:5f:af:84:
                    76:0e:2a:a5:34:10:0b:b8:e5:85:f8:65:7f:d4:73:
                    d6:26:a1:ca:1a:b6:de:35:de:b0:15:ab:3b:4f:23:
                    b8:e2:21:5a:eb:ce:ad:93:71:1b:40:50:e7:78:44:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CC:6F:27:F4:E1:F8:AA:AA:41:35:97:CC:A0:AC:0F:95:88:AC:41
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:d6:8b:ff:31:f7:79:36:3b:10:ef:40:70:46:75:1e:89:
         85:db:c8:ba:f8:20:be:83:6c:f8:dc:30:7d:f4:d1:35:fa:2a:
         22:ec:1e:b0:53:cb:c7:30:b2:27:ad:75:4a:d6:df:e5:fe:0f:
         3f:b3:c9:ce:69:11:a7:17:b8:7d:18:e4:58:c4:00:18:4a:11:
         95:65:f7:ba:2a:f2:cb:0b:d6:b0:45:e6:6f:1f:75:1d:9d:bf:
         66:09:35:af:3a:63:4e:59:45:f2:c1:f4:27:0d:7e:db:e2:6c:
         ad:76:40:62:c0:d0:18:15:b4:4f:1c:e0:2b:41:85:a4:d8:a8:
         b5:df:b9:00:76:1c:6c:fd:c2:a3:c7:24:88:6f:9c:90:38:e1:
         dc:f4:99:93:90:2b:34:2a:11:a6:c2:26:17:11:ac:30:6e:92:
         91:72:6c:2c:c2:6b:f6:00:ba:5f:6b:6c:f8:93:f3:1e:a0:41:
         0c:73:b3:ab:34:ca:cd:b4:55:d8:30:e2:75:7c:f9:f6:f0:a1:
         57:b1:2b:dd:7f:fa:8f:de:04:f7:90:0d:e1:73:73:3c:9f:4c:
         d8:69:15:3e:d3:35:8a:78:57:0d:30:12:94:34:3f:57:86:a2:
         99:86:6e:1b:46:00:0c:e3:3b:b3:99:91:19:e5:d2:b8:1a:6a:
         ad:c3:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:55:02 2026 by rpki-client