Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File:                     9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier:          9R90iNIRt+g/cOjoeX/ot0LzNTKxS9WGB0rxd980BWw=
Subject key identifier:   80:4B:65:17:2A:E0:DB:94:B7:81:72:3B:25:08:50:1C:78:50:6A:24
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer:       /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial:       019D28BB3B4C6EC3F725A191DBA9804F8274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number:          172A
Signing time:             Thu 26 Mar 2026 06:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:52 +0000
Files and hashes:         1: 1-3IPJhNn2z6uBNLHxMmCKfvzzKc.roa (hash: NdBkfOzbM5bOy0bYu/5qjiwop0xpNPBqxYjexeBjzV4=)
                          2: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=)
                          3: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=)
                          4: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: WAFsek+3PDu0HdIg8Evh/G+9DMVnXl5pPYDlV0CDwoo=)
                          5: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=)
                          6: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=)
                          7: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=)
                          8: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=)
                          9: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=)
                          10: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:3b:4c:6e:c3:f7:25:a1:91:db:a9:80:4f:82:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
        Validity
            Not Before: Mar 26 06:00:52 2026 GMT
            Not After : Mar 27 06:00:52 2026 GMT
        Subject: CN=804b65172ae0db94b781723b2508501c78506a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:0b:44:01:cd:88:83:b5:ae:68:99:73:6a:
                    ee:ee:8f:ad:92:d5:59:31:ac:2c:00:74:a7:6e:10:
                    db:56:c3:47:d6:4d:d8:9f:c3:0f:34:7a:11:c7:16:
                    e7:97:9d:a7:eb:d3:0a:bf:65:9c:a2:4a:4c:0d:1e:
                    e7:80:8c:3d:9d:e9:57:e1:a9:fa:cc:1a:1c:57:f0:
                    d1:8e:95:2b:d2:84:7e:58:1b:1b:30:46:e7:79:b8:
                    6e:fa:3b:eb:a9:c9:7f:f0:3e:61:55:db:94:15:07:
                    96:af:d0:2c:ca:76:6a:54:87:ae:84:49:a1:6a:2c:
                    d2:5c:df:93:28:39:db:74:8b:c2:cc:5b:53:8d:21:
                    60:0e:79:d8:36:71:59:b6:75:2a:88:c0:fa:4a:d3:
                    90:1f:7d:ac:ea:81:6c:f9:b9:5c:62:fc:a1:f2:7a:
                    a8:cb:91:88:e0:4b:b9:61:26:46:d0:e2:e4:b1:08:
                    c1:57:eb:50:ee:aa:4d:db:7f:e7:0b:3b:ee:61:e6:
                    6d:48:9e:a8:fc:28:27:7b:0d:fb:95:3c:86:a1:81:
                    f1:23:b5:b9:41:fe:de:db:f6:f5:8e:09:80:e4:f8:
                    25:66:75:d2:4b:fb:23:10:4e:86:99:0a:27:fe:83:
                    fb:c5:4d:ff:88:c0:ae:54:b6:2b:9d:f5:3c:74:83:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4B:65:17:2A:E0:DB:94:B7:81:72:3B:25:08:50:1C:78:50:6A:24
            X509v3 Authority Key Identifier:
                keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:04:50:8a:c4:5c:03:4c:c5:b5:b9:13:64:b3:58:e4:88:1b:
         91:fe:ff:38:db:35:eb:3c:33:bc:9f:a9:7a:6f:3d:30:7d:6e:
         ec:d0:d6:d7:45:77:a6:6c:ea:0f:7a:c4:4a:b9:9c:a0:24:a6:
         d7:9a:28:4a:2a:31:d7:87:cf:44:11:67:37:c1:15:17:36:2b:
         93:d3:09:5e:22:71:89:20:b5:54:6e:de:69:ac:1b:12:8a:37:
         d9:60:e2:b6:5a:f3:30:78:b3:b1:35:0d:c9:0f:a8:57:03:2d:
         7b:00:26:0f:9e:ce:23:01:1b:b1:50:bf:dd:df:96:7b:09:ed:
         c4:3f:10:cf:5d:81:d1:b2:85:82:4f:00:b6:82:c8:43:dc:2f:
         cd:9b:e8:1c:d1:c2:71:42:5e:ba:69:22:24:de:2c:8d:d7:8b:
         52:df:18:0f:09:56:44:e9:04:b1:73:26:b9:31:bd:b2:be:2d:
         ce:27:1c:d0:31:ca:eb:53:24:37:59:f8:80:c2:59:48:bf:8d:
         ec:c0:87:c2:ad:07:6f:f5:0e:9f:d9:c9:16:26:7e:13:60:72:
         66:c8:5f:0c:54:4a:54:a8:fe:29:0b:e7:ce:90:6c:41:27:7b:
         ac:fe:72:8f:b7:0e:44:96:af:72:87:28:62:10:f6:ed:ed:08:
         2a:b4:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:38 2026 by rpki-client