Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
File:                     dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json)
Hash identifier:          iL5BMBcX50IN/kX9NGBg4JAWlsDDj1e0TSn7MsJciSk=
Subject key identifier:   4D:F0:1B:C5:83:01:FC:D0:23:10:4C:02:17:8F:2D:65:E1:E4:68:AD
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Certificate issuer:       /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial:       019D254C7BB2A77B63E6A8DFEDCD349E246C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
Manifest number:          04F4
Signing time:             Wed 25 Mar 2026 14:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:02 +0000
Files and hashes:         1: RIKPxzN612TS7QdYx0yhnbfdgCk.roa (hash: 07oY6OiufBnwXNFc8F9BHYyCv8CtgRF58yYSOyMr920=)
                          2: SLrQ1knzFhgHD__1U04Q5GQJX3U.roa (hash: AVeAooocOWwYiMM4BHVrd1TGE917Rw4KZCVXlSQ+oDM=)
                          3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: 06CJ4KLx7KOKXCMey5gsQUexgfSvcqbyOIvjvk+dy7w=)
                          4: ryBPgXvA-kuwL8ute7lp1pTeuxA.roa (hash: aMotHhiy0ZyL5y70ElZdApnRGo5oHKFlodbC24Zl6LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:7b:b2:a7:7b:63:e6:a8:df:ed:cd:34:9e:24:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
        Validity
            Not Before: Mar 25 14:01:02 2026 GMT
            Not After : Mar 26 14:01:02 2026 GMT
        Subject: CN=4df01bc58301fcd023104c02178f2d65e1e468ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:34:a9:31:dc:d5:67:1f:0a:d9:cf:71:68:
                    ec:f3:44:f7:0c:e5:0c:97:ca:c8:8e:20:db:4b:6a:
                    7c:f8:9b:6b:1b:e3:ef:23:2a:e1:2a:37:a1:a0:af:
                    b7:91:d7:cc:9f:45:90:c0:e1:4e:ce:b4:ef:b4:22:
                    1f:6c:e3:dc:f1:ac:c9:17:75:e9:82:e0:48:5a:30:
                    89:e9:8f:e4:28:81:f2:99:25:c5:6d:6c:af:ef:33:
                    c2:24:bc:9b:3e:78:55:f9:81:e1:b2:7a:aa:f1:cb:
                    e0:bb:2b:ed:d8:86:d1:04:d5:8b:be:b7:d3:e7:69:
                    67:d8:85:c9:29:17:6a:a7:6e:2e:7c:b0:e9:47:64:
                    61:41:14:5a:62:3e:b9:4e:1d:01:1c:e3:e8:4c:07:
                    08:05:ae:27:39:b9:2f:46:7d:2f:13:b7:fd:49:96:
                    a7:b1:3c:36:94:fa:22:f4:cb:f7:19:94:83:8e:2f:
                    24:db:f2:47:2f:90:3c:cb:65:2e:24:84:30:f1:5d:
                    ce:9d:0c:15:5e:55:2c:5d:24:c2:1b:38:59:23:6b:
                    4d:03:d1:c8:1c:92:ce:22:51:81:b9:b2:d7:13:28:
                    0c:da:25:d4:33:d7:32:fa:34:01:3e:c2:ee:a9:af:
                    f8:3e:f7:47:de:97:88:66:9f:7a:cb:e6:9c:c9:13:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:1B:C5:83:01:FC:D0:23:10:4C:02:17:8F:2D:65:E1:E4:68:AD
            X509v3 Authority Key Identifier:
                keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:80:a9:a2:2f:59:1b:c5:32:27:49:78:40:39:de:1f:0e:
         fd:65:5a:36:c3:c3:e5:2c:ae:c1:6d:10:53:8b:30:67:f4:e9:
         7a:1a:79:62:99:3c:a7:bc:7e:bb:a5:18:73:2d:22:b0:06:7f:
         05:f4:42:68:69:8c:1f:21:5b:da:99:3f:95:57:b9:f8:8a:c8:
         dd:0c:93:21:db:48:30:12:7f:c1:23:84:6d:84:b8:59:93:fc:
         31:82:7f:5a:07:48:dd:6e:d4:97:ca:b8:16:fa:bf:6e:f2:6f:
         67:9f:90:c3:6e:bd:65:cc:91:92:cf:48:28:e8:ad:24:dd:80:
         ec:06:47:e7:c4:0c:6b:34:63:a1:f3:8d:71:0e:3b:03:8b:3b:
         b2:bc:df:ba:f9:82:5f:25:3c:42:87:33:e2:21:de:88:f1:7b:
         43:ff:66:9f:2f:7c:61:05:32:cb:bb:7a:16:dd:9b:38:dc:dd:
         c2:0e:66:d8:50:d3:69:0a:2c:53:b7:d5:17:55:fd:9a:65:06:
         90:bf:9b:03:e8:05:90:11:7b:6b:42:bd:ad:63:f6:7e:4b:13:
         c4:fe:c6:3e:4f:40:b3:31:fe:a1:10:c1:13:9f:16:df:4d:03:
         04:15:0e:1e:dd:e1:c8:91:27:7f:b5:6f:64:56:85:78:8f:af:
         cd:ea:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:35 2026 by rpki-client