Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          m2rfF9cQp4XdCpkiju3txVVhADptaBKFz3E+AR+7YbI=
Subject key identifier:   29:5D:6E:50:98:9F:35:D8:13:84:D2:78:81:5F:3A:B6:BE:66:2E:CB
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       019D29608BFBDEF629B75728A4574068995D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          154D
Signing time:             Thu 26 Mar 2026 09:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:26 +0000
Files and hashes:         1: 1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa (hash: t/bF8BVKmcIucBirQ4iHEKuh8d9LX26p0NPMDv8nEak=)
                          2: 6PInJ2tbRTip0fDT1jftw8w7R7I.roa (hash: JDGvPisnEK8vyfb4vuVlQuoioDUHeR2I2cF0Dy3S3VU=)
                          3: B3ZEk8Cap2g9KplZIsoRlruoyZE.roa (hash: g43dat6xdrbXP10ocqQ6N9VTX+6RhA4yXEtNgHAbATA=)
                          4: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: C5FGzVcGToYAKryfOdG7DfG3QP9iGXtEUqnMwTGAIpU=)
                          5: hxyFg93cyoODusD3h3L8hfc5HG0.roa (hash: BPNhbAxVULf2vc9aGDatTvAGnPVmpDD0d77IZ2F/Ui8=)
                          6: nj4mvFqfvEUyr5giiKwR4BVZQno.roa (hash: 9KFIbmVJvCtQC4dokjtpRH9fFECm3xNQnDEDkj0ZLgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:8b:fb:de:f6:29:b7:57:28:a4:57:40:68:99:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Mar 26 09:01:26 2026 GMT
            Not After : Mar 27 09:01:26 2026 GMT
        Subject: CN=295d6e50989f35d81384d278815f3ab6be662ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:17:15:24:a0:18:13:08:ef:99:61:f9:08:
                    d8:8b:8c:d2:eb:81:d9:db:6d:e4:6a:b8:31:ae:d2:
                    d2:e1:99:78:78:18:4c:77:f5:a0:f1:dc:a9:c7:92:
                    35:82:aa:ee:cf:e2:8c:66:c7:a1:ec:4d:cf:e8:c6:
                    04:23:6e:3f:ac:3f:c4:26:71:a1:2c:a5:85:fd:77:
                    ca:f5:44:f7:9c:b2:85:6b:5c:64:b9:06:9f:a2:8c:
                    72:3d:6b:e2:ad:0d:ef:17:38:22:40:b4:c2:7a:69:
                    2d:2c:d8:24:cc:41:01:05:a2:49:fb:97:42:47:58:
                    84:ef:21:39:86:55:31:39:e1:41:38:f1:eb:73:03:
                    7c:b5:09:5d:42:8b:87:91:64:71:6e:b9:aa:d1:09:
                    39:e3:56:a6:65:f8:15:21:e3:49:91:08:3b:85:41:
                    8b:52:b0:11:95:a6:cf:c2:62:f6:76:ab:c6:df:79:
                    71:09:45:11:01:6f:a0:ba:16:06:bf:8e:61:85:06:
                    3b:05:1a:c5:ec:47:44:af:80:d8:b7:90:11:ee:6a:
                    23:9c:91:d2:c3:7e:e3:6e:b8:73:f7:7b:05:90:f6:
                    85:66:94:47:38:21:f7:b1:88:87:dc:7c:8b:a2:10:
                    a5:b2:fe:52:ba:7c:9c:72:24:ac:61:dc:f8:dc:4b:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:6E:50:98:9F:35:D8:13:84:D2:78:81:5F:3A:B6:BE:66:2E:CB
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:ac:f6:78:70:15:1c:cb:c4:54:c8:a1:b4:44:dc:1e:3a:
         3c:e9:e0:e5:0c:34:49:b6:5b:23:4a:3a:a9:4f:ab:6b:e7:94:
         bf:ed:ab:95:fb:37:cc:d3:46:52:40:47:60:9e:a9:77:41:b3:
         05:57:00:94:3e:e4:ee:88:07:d9:09:7f:54:2a:4c:7b:39:9f:
         7a:2c:93:89:99:e0:80:ce:a0:90:14:ff:83:71:65:28:3b:e6:
         bc:09:2e:bd:f6:c3:90:82:b7:de:40:32:79:e5:45:9b:40:d4:
         79:00:33:c4:00:c7:ca:3b:0a:fa:db:a5:3d:02:4f:31:c2:2c:
         2c:82:fb:e4:4f:41:db:fa:64:39:cc:08:cc:20:81:e9:c4:75:
         19:be:07:a4:30:43:99:17:0a:86:63:8f:48:0c:bb:e0:c2:4f:
         28:a1:4e:ed:33:21:d3:11:15:5c:ae:d3:b4:d7:ca:66:f4:ae:
         5e:c4:74:6a:f7:2c:3c:c8:dc:69:25:32:0d:25:e7:05:cc:45:
         52:ff:72:19:07:8e:5f:25:43:4d:21:50:bc:77:ba:a1:3a:39:
         6d:b2:a2:b1:19:44:de:8d:2c:70:e3:d0:45:f1:6d:31:a1:7a:
         4a:15:48:84:86:13:28:53:2e:e1:21:2a:c8:c3:46:ac:18:dd:
         c7:9e:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:27 2026 by rpki-client