Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File:                     kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier:          K2CoZ8744z4y48D62Q9DuxrhIinxcTCIqmZkmqO5Bxs=
Subject key identifier:   2E:36:F5:0C:E1:34:34:81:F8:0C:50:2B:2F:21:95:36:35:7B:F2:B7
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer:       /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial:       019D27E07522B38B0DD524FDB52274ED369B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 02:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:54 +0000
Files and hashes:         1: P85nMUUsWvtlty3MsyeYuR91WlA.roa (hash: 0M7UxUnF0/zFcPRAsWHHJdG3pK8LxaWyG1SYbXqBeBM=)
                          2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: rLekDDevg2zROINC1jxhUz088FQrGLkVPTP/Z1Mj6+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:75:22:b3:8b:0d:d5:24:fd:b5:22:74:ed:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
        Validity
            Not Before: Mar 26 02:01:54 2026 GMT
            Not After : Mar 27 02:01:54 2026 GMT
        Subject: CN=2e36f50ce1343481f80c502b2f219536357bf2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:e3:4b:e8:bb:4a:32:f4:0f:34:72:80:d3:
                    c0:c8:60:79:95:56:fc:60:0c:10:39:15:81:3a:ee:
                    f6:36:5b:79:36:5a:c6:95:0f:02:71:b4:11:bd:cb:
                    0d:b3:7c:4f:fc:a6:d9:6c:80:bb:54:1f:97:2f:18:
                    b5:ce:53:cb:ab:62:fc:77:a9:75:c6:f4:9e:24:89:
                    50:a0:60:b9:7a:89:d5:60:94:00:5b:be:c2:34:1b:
                    f1:00:08:e7:fe:9f:f6:fa:8c:eb:27:e5:9a:93:98:
                    02:76:ed:e7:15:f3:78:a5:b6:05:3c:88:72:a6:ea:
                    db:b6:2c:e8:48:1c:9e:da:ff:36:46:f0:33:bd:a2:
                    b5:ec:39:ff:69:cc:5b:25:e2:eb:8c:05:88:b2:02:
                    98:be:4c:41:36:cc:55:1b:7d:e9:17:01:33:e0:b7:
                    47:3f:d8:6b:ab:8e:03:18:e7:19:45:1d:14:81:ec:
                    53:2f:53:d6:c2:c5:c0:14:50:30:eb:0b:e2:33:87:
                    05:ee:a2:f5:f2:03:f7:f3:e1:4e:f9:a4:12:67:08:
                    aa:2e:17:9d:f7:76:eb:cd:cc:37:0b:0d:dd:13:a6:
                    e5:de:3e:71:8f:a6:78:3a:43:b0:0b:29:1b:dc:c8:
                    0e:96:dd:15:45:c5:52:f7:90:09:89:a3:85:89:8c:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:36:F5:0C:E1:34:34:81:F8:0C:50:2B:2F:21:95:36:35:7B:F2:B7
            X509v3 Authority Key Identifier:
                keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:24:6a:01:a1:02:d8:55:ea:17:50:4f:57:ca:cf:f6:3f:10:
         c8:7a:ce:14:db:25:92:21:70:8a:e8:ed:76:43:c3:6d:42:35:
         32:6a:60:3b:fa:75:41:20:11:3d:75:b8:cd:35:27:f8:ff:5a:
         97:6f:5c:6e:05:da:09:9b:e0:5d:8f:8e:82:8b:14:fe:96:bd:
         cb:3b:c0:b3:bd:fa:74:5c:ae:7e:d5:4f:62:8a:eb:02:b6:44:
         e3:d7:f2:a0:59:d3:34:c2:61:34:71:69:7d:83:f6:45:41:f7:
         3c:f5:15:9d:03:54:ca:48:9e:cb:0f:22:33:19:e2:4b:e0:3d:
         58:6b:eb:e0:fd:ae:e8:c3:7c:6e:03:ad:1d:55:79:46:a0:0f:
         97:62:32:90:3f:88:e2:70:aa:34:c8:7b:f4:a4:59:86:24:3e:
         92:79:16:2c:69:d3:11:8a:ff:cd:77:41:45:93:c9:ca:6f:64:
         76:e0:4f:87:65:17:4b:6c:be:2c:42:e6:67:53:0b:3f:ef:45:
         3c:86:a1:27:ac:95:50:a7:e0:5b:1f:39:c7:9f:b2:13:cc:ab:
         32:0f:13:4c:21:c6:82:66:da:ab:38:ca:45:97:0a:c7:82:14:
         21:52:25:ed:3b:da:35:2c:ba:bf:76:7c:96:0c:89:17:c1:e6:
         e0:88:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:26 2026 by rpki-client