Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
File:                     g0eVFJWTl8Xj-nbh6klejh9sMZs.mft (raw, json)
Hash identifier:          nJqpJt+5+JqsO/HKngHcTbtIPsJsRK8lE+uTl9cyOu0=
Subject key identifier:   43:56:F9:CF:AE:92:0E:11:90:1B:65:AF:C7:9A:D6:4C:2A:0A:F9:8E
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019D29297D7241630DB3E3F90074974BC46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
Manifest number:          1891
Signing time:             Thu 26 Mar 2026 08:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:18 +0000
Files and hashes:         1: Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa (hash: 01J0VB2/sc7Wjg5UC4eC51E7MgriDtGuK8sC7s32gVc=)
                          2: eaURa3uTlyiZsAXJzkPz_x5Muw0.roa (hash: c+Yhm7pE68b9qJ0hObSRz8BZLxOQWu5iU9oFtQINp5c=)
                          3: epQedJVwRBT94oycCSPj2YdU8Tw.roa (hash: zh7Uj6j3oKDWZJe0YH4R9IHGVwdwn+U1F6Ti2AwnjzM=)
                          4: g0eVFJWTl8Xj-nbh6klejh9sMZs.crl (hash: 1yRkaUVipAQ89BKRLL450sN7DUaSj+l8MkdwOvzUNJs=)
                          5: ohKELa4D7u4-F5h5znUYEfXBTrQ.roa (hash: fMVIcUvcrWF7H5I6/6miPXqqmQnLYpDWZI9AaMxyhp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:7d:72:41:63:0d:b3:e3:f9:00:74:97:4b:c4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Mar 26 08:01:18 2026 GMT
            Not After : Mar 27 08:01:18 2026 GMT
        Subject: CN=4356f9cfae920e11901b65afc79ad64c2a0af98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:03:18:cc:1a:da:26:c6:b8:85:9a:a7:ab:
                    8d:0b:e0:42:52:d3:71:06:78:9e:6f:55:f9:12:85:
                    cc:52:05:94:ec:7d:5c:5a:b5:04:73:4f:24:24:78:
                    79:e2:6c:8a:50:10:66:2b:c6:07:68:51:47:bc:d0:
                    6a:96:da:d5:af:39:40:22:fd:39:22:13:6b:64:81:
                    e8:bf:af:75:86:f0:a8:e2:14:88:1d:fd:52:27:72:
                    b5:00:ae:fb:8c:b9:4e:14:a5:d1:b4:41:eb:c6:20:
                    ae:4b:cf:2b:a1:b6:e5:7a:cd:23:af:ca:a8:64:70:
                    e5:6c:d8:b9:2c:5b:24:84:e9:79:9e:64:64:ae:d4:
                    1c:54:1b:61:93:89:13:2d:6b:2f:93:86:2c:74:8b:
                    09:b8:e7:19:f0:e6:ca:e8:a7:be:0a:e0:8f:11:e9:
                    96:7c:ca:7d:04:2d:1f:36:56:a2:f5:83:97:6b:12:
                    00:10:b3:4b:ea:f5:95:fb:e9:e0:29:a4:b5:96:6d:
                    f0:94:b9:0e:d3:73:46:f0:08:f7:d2:c5:14:28:27:
                    b2:b8:09:cc:73:bf:f5:17:bf:80:f3:26:c3:d8:a8:
                    29:ed:60:9e:78:c9:b9:41:96:fd:d8:19:a1:02:ad:
                    bf:f9:ca:7c:6e:1b:ed:db:a0:3e:f5:c2:2f:b7:47:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:F9:CF:AE:92:0E:11:90:1B:65:AF:C7:9A:D6:4C:2A:0A:F9:8E
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:90:be:de:05:8b:e9:46:b4:2a:82:27:5c:e1:5b:e4:f2:
         aa:39:1e:c9:25:b2:ac:62:03:27:1c:4b:f5:a2:5a:be:25:72:
         9d:af:72:4a:8b:87:a7:6e:59:61:42:cb:97:d8:89:ac:f6:63:
         4d:c9:3b:6e:77:67:c7:ba:71:6b:74:ed:04:99:0e:cc:3d:c2:
         3c:cb:05:aa:a2:c3:31:db:8c:54:15:d1:cb:21:75:c3:33:ef:
         9e:22:ba:4c:a5:d2:16:db:b0:aa:b0:a3:77:95:9b:f2:15:3a:
         fa:4e:22:ef:29:0a:3d:f1:cc:e0:f5:07:af:bf:2d:ae:28:c7:
         65:99:1e:2e:43:cd:3c:0d:4c:fc:10:05:34:9a:01:b7:1d:89:
         f8:02:54:7c:6b:3d:70:f8:cb:50:46:c9:27:a6:f0:b2:c1:87:
         0c:77:ea:74:5a:b2:7c:a6:09:27:97:b2:6c:fb:54:ca:bd:9e:
         fb:09:df:02:5d:7e:d6:c5:53:2c:3f:e1:81:3e:21:69:15:c7:
         b1:13:11:57:44:f5:45:ef:8d:fa:76:18:e8:a9:56:fa:6c:c4:
         a4:08:3f:da:99:b2:e6:9a:24:bf:ea:9b:e3:9c:a9:dc:7c:e1:
         ff:04:9f:f7:f8:6a:f7:44:6d:6c:cb:d5:71:1b:2a:e4:5b:56:
         24:96:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:21:14 2026 by rpki-client