Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          X4WPTJn1orGbda/Ykkrh21Wxe7vzd1NbXXbX5kQ2Zn4=
Subject key identifier:   91:63:06:D6:F0:89:F9:47:EF:BD:4F:4C:3E:F0:10:6D:AF:7B:ED:18
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       019D273AA05D3663D6C1E4272FE7CD8DEE81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          1818
Signing time:             Wed 25 Mar 2026 23:00:46 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:46 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:46 +0000
Files and hashes:         1: fePebiytxTMuGPH6fSC5E4YL5wc.roa (hash: yXbEU3IXKyJOB9RtZy0YOmQELScqMwS4Y+CH/uELRY4=)
                          2: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: dFyCWvskbMjQCa8L36lN04AXNN5pqrsbPeKsuZorCPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a0:5d:36:63:d6:c1:e4:27:2f:e7:cd:8d:ee:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Mar 25 23:00:46 2026 GMT
            Not After : Mar 26 23:00:46 2026 GMT
        Subject: CN=916306d6f089f947efbd4f4c3ef0106daf7bed18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:9e:ab:05:ee:43:91:d6:58:8e:21:09:73:
                    39:e0:5e:8f:75:2f:61:27:95:b6:66:4c:23:ae:c2:
                    c8:34:73:b5:37:d4:9d:f5:2f:c7:85:b2:58:84:ce:
                    19:94:2a:f1:00:e1:07:47:7c:03:0a:10:ed:ed:fb:
                    24:49:95:fe:5a:4a:a8:75:bb:5a:66:cd:f3:4b:42:
                    33:d5:f5:83:70:8a:54:ac:30:6b:15:fe:26:1e:9a:
                    75:98:6f:cc:30:ce:7b:07:1b:93:fa:62:72:6e:57:
                    ae:78:98:c6:bc:d7:cd:78:e4:fa:89:e2:e1:5e:fc:
                    5f:72:7a:81:9b:03:b0:63:ff:f5:15:ff:64:32:43:
                    69:be:3b:6e:a8:94:0c:2e:f7:aa:f4:51:b2:2d:5e:
                    b5:13:6d:51:52:f8:4c:e6:a6:f8:8c:d0:f1:b7:f3:
                    60:21:c0:fa:b4:ba:14:98:d9:16:fe:90:67:b2:7a:
                    55:f4:cc:4c:f1:9a:f8:b9:cd:ce:77:8b:d9:df:87:
                    d7:38:6b:36:c0:2b:30:9e:7f:74:61:84:ce:83:8e:
                    db:3f:73:89:5d:4a:81:09:5d:e0:e9:ef:d5:2e:cf:
                    ac:9d:24:a3:28:a8:23:d9:0c:19:f4:fa:1b:99:98:
                    ef:da:48:d6:de:6d:b2:0e:ea:a7:cf:b7:66:18:56:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:63:06:D6:F0:89:F9:47:EF:BD:4F:4C:3E:F0:10:6D:AF:7B:ED:18
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:77:f0:9b:a4:31:03:8c:87:06:a3:a4:c8:f5:f8:82:0a:17:
         d6:ea:ef:99:67:25:7d:96:ae:35:4a:4e:8f:4a:4f:1d:4f:bb:
         f2:82:6b:3a:58:b3:67:26:82:54:d2:e5:51:47:b2:e0:86:73:
         37:e8:52:54:9c:29:6b:30:72:f4:18:50:5f:94:29:2f:f6:37:
         b4:37:a5:57:d6:f6:86:60:e5:c6:bf:de:dd:e4:54:f9:51:62:
         b5:da:85:f0:b1:97:b7:98:99:1a:fd:7c:bf:44:cd:d3:07:84:
         6b:5d:4a:29:df:81:93:a2:94:3d:c3:16:e7:3e:39:1c:27:bb:
         03:f0:81:c7:03:dc:60:46:49:ca:c4:c2:f2:0a:92:d0:10:8c:
         5b:0e:56:46:db:e5:62:68:cd:04:0f:17:fd:a2:09:cb:1a:5e:
         90:31:b8:5d:21:59:bb:3a:dc:a4:57:6f:b6:7d:f6:1f:ce:b4:
         1c:9d:86:1a:b9:20:75:93:6f:a8:aa:81:a1:18:48:cc:e0:c0:
         7c:ec:7d:44:16:67:9d:57:fe:8a:74:65:a5:a8:b9:29:16:8a:
         d4:ff:ec:73:72:87:2b:18:0d:48:54:aa:10:53:8c:b4:53:02:
         3e:c4:ed:12:16:20:f3:ec:b4:60:b3:1d:fc:6a:6d:31:7b:a4:
         c0:de:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:02 2026 by rpki-client