Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File:                     aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier:          UYmSxF/nz2yz79sWzIF+BSDu5jjltp0p+X9nKDV9oQI=
Subject key identifier:   B7:0D:01:9F:F2:B2:64:3E:D2:BB:33:9E:F4:A3:EA:98:0C:B4:4B:29
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer:       /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial:       019D2816B333F61459480F5414294950A6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number:          1773
Signing time:             Thu 26 Mar 2026 03:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:09 +0000
Files and hashes:         1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
                          2: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
                          3: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
                          4: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
                          5: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: 3B87rMpcVG/2haS5qvs5cImASlmfgd6v9Ykx8jNl4pY=)
                          6: dnduiHSq4pdGGNCHwK557Q8gLl8.roa (hash: T1l11nW1MeZuYb7w6SUvEAo6y4O9FtVPko26xk1q278=)
                          7: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
                          8: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
                          9: qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa (hash: rhOXifa+7nHd3nhrZbKRQ04m/9DDGuJ4vIHbxjYC8DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:b3:33:f6:14:59:48:0f:54:14:29:49:50:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
        Validity
            Not Before: Mar 26 03:01:09 2026 GMT
            Not After : Mar 27 03:01:09 2026 GMT
        Subject: CN=b70d019ff2b2643ed2bb339ef4a3ea980cb44b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:04:dd:cc:db:80:50:64:91:6d:69:d8:7a:
                    04:bc:77:e4:ba:9f:83:3f:64:68:3f:af:2a:ae:53:
                    d7:58:b5:2f:27:28:80:ab:77:77:3a:73:de:45:0d:
                    28:45:54:e6:4f:17:4d:98:a2:48:cc:d7:1d:2f:0d:
                    79:b9:0d:7d:cc:54:6c:8f:7d:d8:9c:13:66:a6:8c:
                    d0:0f:8a:eb:fd:27:13:ae:04:b2:f3:f4:60:52:71:
                    64:1f:6d:3b:a0:88:75:41:da:49:43:8d:78:fe:13:
                    84:9c:00:c1:75:1b:f9:83:49:ac:16:fe:c6:73:24:
                    ea:b7:9b:db:41:5c:02:4b:df:9f:a2:ef:92:56:46:
                    9c:d0:db:22:d5:a4:b6:21:43:af:db:6e:aa:9a:c8:
                    b6:4f:e0:77:b2:cc:04:cd:f4:f5:ad:d9:77:d7:b2:
                    ee:c5:12:90:d3:6e:bd:8d:ef:ad:72:4d:2f:af:c3:
                    dd:86:36:b5:5e:07:a9:8c:d5:90:67:bb:c1:ab:b6:
                    7f:5e:9f:45:ba:77:44:21:35:80:39:e0:8b:9f:3b:
                    39:c4:79:23:9e:42:4b:42:ac:3e:21:84:65:ee:0d:
                    48:b0:17:a1:af:04:fb:34:36:b8:39:56:ab:67:0f:
                    f8:f2:b5:cf:9d:5a:fb:f0:b3:77:ce:a5:af:97:70:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:01:9F:F2:B2:64:3E:D2:BB:33:9E:F4:A3:EA:98:0C:B4:4B:29
            X509v3 Authority Key Identifier:
                keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:16:cf:db:8f:ba:a0:87:c4:c8:17:a5:65:72:76:97:75:2a:
         82:2a:45:f4:a8:e9:e2:fd:54:c3:40:a8:07:99:6f:26:8e:03:
         a2:d6:fc:5b:b2:9a:ce:dc:00:36:2a:62:fb:60:1e:b1:a8:da:
         f6:e5:c3:ac:b6:c0:99:4d:3d:ae:f8:17:df:cf:bd:b0:ea:d5:
         7b:bd:bf:23:cb:e4:a3:3f:fe:c7:f7:8a:2d:56:9d:b6:0c:36:
         98:45:0c:e4:a7:79:a4:f6:08:cb:fd:a1:27:94:a8:4f:d0:33:
         19:17:dc:d4:94:90:48:6a:62:c4:4e:36:de:31:82:c3:4b:81:
         f3:1d:dd:c7:f8:62:04:9e:a9:ee:1f:11:cb:2b:fc:70:1a:ae:
         92:95:69:55:7f:41:bd:9a:fe:fe:c0:d6:85:66:96:59:e0:19:
         b3:ca:d9:e3:62:f0:60:46:2b:17:b0:ca:ae:5c:d8:df:a5:80:
         62:e4:ba:5c:9d:3e:b0:97:b3:0f:f6:dd:6f:5c:ed:6e:5c:92:
         26:46:16:44:48:49:ac:76:e3:02:aa:d2:fd:05:9a:dc:d4:c9:
         73:78:a3:0a:73:3d:ac:06:31:2a:6a:15:b3:a2:4d:fa:b7:46:
         1d:50:1d:95:10:6e:b5:65:cb:bf:34:a9:f1:8b:1d:ba:c2:2e:
         2d:66:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:34:08 2026 by rpki-client