Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          TPSjZhqaU2xYJRiHCGIpleUjC1i5mLT00LPxEfeXaUc=
Subject key identifier:   13:74:5A:2F:9E:E8:74:3C:2D:EC:A0:6D:C0:AA:60:C4:F4:D0:10:66
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       019D27DFDB9E370030E82DBD1C38846859CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 02:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:15 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: 2TEX3GRUgugB5b76jjcCtErlWiwfIU9BIXc/1BnlBR0=)
                          2: 28LudlG1yP68N48FiZaHtqk72K8.roa (hash: 5dBhZER1Qa42n7n8NoOAfpg90tBUobSV95L4NLM5PZA=)
                          3: A4ui5uqLkX9PBLLxf1O5MibqJ2Q.roa (hash: heMNmY/PuI8OxFj8v8yD7W3dtUKrag//RQPXs4fd034=)
                          4: B3sV0jnamNo239vQrhEaWaSxAqM.roa (hash: 9SPwVzjU/44IydDd5luHKS0eXy9i/DzhGcx7z6/dCF0=)
                          5: MWww8mg4IAuQ7tfubwcnBwcN-wc.roa (hash: h5+JwC9CF+2XnTKrJ979fW9yKh/yquKOOiCoaTps0Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:db:9e:37:00:30:e8:2d:bd:1c:38:84:68:59:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: Mar 26 02:01:15 2026 GMT
            Not After : Mar 27 02:01:15 2026 GMT
        Subject: CN=13745a2f9ee8743c2deca06dc0aa60c4f4d01066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:8a:f5:04:10:a6:c7:94:49:1a:bc:b3:f6:
                    b1:29:f3:f7:7e:ff:99:e2:32:18:84:33:f0:3f:db:
                    45:2a:27:d4:83:1c:53:f8:a0:91:a9:03:5d:6e:d1:
                    50:21:1d:ed:52:59:95:6f:06:02:fd:e0:1c:e4:3f:
                    30:59:2a:a5:9f:f4:3c:73:fb:3d:aa:8f:cd:e3:8f:
                    93:2b:a2:43:eb:61:d2:6f:6d:b4:e0:5b:5a:73:ed:
                    30:8e:a5:58:f5:7b:c5:36:e9:88:35:d9:0a:9b:75:
                    83:54:c2:75:3b:2d:8e:1d:2f:fd:cc:f7:73:5c:f8:
                    23:cd:60:93:25:62:6f:da:10:a1:1d:42:81:1e:68:
                    46:31:55:2e:67:39:50:25:99:d9:f9:17:31:31:07:
                    c3:78:8b:62:24:df:59:15:ff:a8:0c:6b:70:b5:6d:
                    7c:ff:49:23:81:d1:83:51:83:70:20:bc:7a:54:3a:
                    82:83:a1:9d:6a:e6:0c:5a:48:a3:af:b6:e4:a7:2c:
                    a1:46:73:0c:c3:78:59:01:e2:85:db:24:f7:21:67:
                    b8:04:cb:50:c9:ec:84:71:42:ad:b0:19:fe:55:18:
                    92:e1:22:39:ce:9e:2f:6c:06:27:55:5a:5b:56:9e:
                    e8:78:52:95:04:89:69:34:a3:10:4f:37:d1:c2:50:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:74:5A:2F:9E:E8:74:3C:2D:EC:A0:6D:C0:AA:60:C4:F4:D0:10:66
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:e6:fc:91:d7:00:97:f1:a6:82:4b:8b:d5:42:d2:11:7d:
         5e:2f:5f:f2:ab:81:5e:34:7c:8f:53:3a:17:7a:dd:01:f5:8e:
         aa:d2:8a:c4:7d:58:09:f3:64:7b:3b:c9:42:0e:a0:69:ba:bd:
         a6:cb:25:e4:b5:1c:ed:e6:c8:a1:b3:57:19:e6:a1:c0:ef:f5:
         c9:f8:21:9b:12:94:a7:ad:64:6f:4e:7c:4b:1e:3a:be:a8:2a:
         e8:80:76:b5:14:c4:89:e0:3b:50:1c:1c:06:fc:61:9e:44:5a:
         73:f6:02:49:fb:7d:20:c6:29:5b:93:2a:9e:e5:d4:3a:b2:f9:
         2a:6e:ae:28:87:9c:2a:67:f2:9e:5f:38:dc:3a:77:4d:72:4e:
         e2:9a:77:2a:36:3b:9a:c9:b7:1f:c6:d8:cb:d9:af:1c:d7:7d:
         50:34:0e:bd:fa:93:df:96:54:97:05:9e:75:3c:8c:da:0d:a3:
         5f:af:cf:69:df:39:ab:d2:5f:a5:96:95:1d:c5:64:cc:4c:e7:
         2f:b5:aa:04:b2:e1:31:79:75:1f:84:74:be:7b:f2:0b:00:64:
         fc:1a:db:87:18:e7:f1:8c:c0:53:f2:d2:0b:d1:e3:20:58:fb:
         5c:d7:ee:2f:e4:ad:3b:ea:a5:5a:7d:9f:56:e4:1e:d0:89:a2:
         e0:08:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:39 2026 by rpki-client