Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          lMT+lbEWxVcf5bZ7skMPgQjALngB2Az6a54KQYtsDSc=
Subject key identifier:   76:ED:A9:B2:E7:FD:77:48:BF:EC:C6:5F:B0:14:50:E3:AD:A3:D6:E4
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       019D329ACD64459FC753F3210863CCB2791E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          16D3
Signing time:             Sat 28 Mar 2026 04:01:39 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:39 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:39 +0000
Files and hashes:         1: 8huTzHW57A5cCLn4DJengqWUHbU.roa (hash: QbaePOyAbanHl8XCDKIaOAWESWKmtviz49Mi0ZJ8gU8=)
                          2: _6DXV1WE0v-oybUplKLLF-qO42Q.roa (hash: Iu/YSu6oOqTfa7ZyhKaNhQqb474GLyUXE1gWIy1f6g4=)
                          3: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: KjRj1HAaIQmAFD0OUL1IOmFvlwBjkHSR+9eMIEEhyu8=)
                          4: cnRs0nFBKnPSwQ1F-1xOIce5la0.roa (hash: OKJospeoF5ncHQtQYt7c9nFDBBSFOmh/9wk/WbCnrEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:cd:64:45:9f:c7:53:f3:21:08:63:cc:b2:79:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Mar 28 04:01:39 2026 GMT
            Not After : Mar 29 04:01:39 2026 GMT
        Subject: CN=76eda9b2e7fd7748bfecc65fb01450e3ada3d6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:29:b5:81:e8:9f:e0:db:c7:82:54:25:f0:
                    92:e7:9c:c2:5c:93:ec:c4:bc:df:fe:8a:44:53:9e:
                    6e:c6:e1:2d:e5:f4:ea:b2:2f:c5:ae:cd:cd:7e:ea:
                    95:a3:e4:02:18:ae:ac:99:5a:0d:55:5a:13:d8:89:
                    0b:ef:59:13:6e:d8:0f:db:83:2a:3c:ee:87:23:25:
                    85:d2:17:f9:1b:37:25:ca:5b:f2:b3:fa:f3:a2:26:
                    87:19:8a:b2:bf:86:79:33:9e:b4:8f:87:2d:b9:9e:
                    9a:3d:b7:a7:0d:bb:0e:b5:65:db:c3:36:ad:df:54:
                    2d:db:f1:96:72:30:15:64:b2:4b:48:1d:0a:83:1b:
                    2e:6a:f4:f4:70:20:74:dc:a7:ea:9f:7d:41:a9:f9:
                    c6:16:82:22:77:d5:61:e9:5a:d3:c0:ae:72:39:1b:
                    df:76:f1:52:0f:7d:26:a6:de:1a:ab:85:ca:94:7b:
                    4e:a2:6f:12:95:3f:27:28:53:ba:4c:35:aa:39:6c:
                    f4:53:f1:d2:1f:68:6f:75:e2:9f:1a:11:85:e4:af:
                    6c:86:9d:2f:9d:0d:76:6b:94:6f:88:97:53:0d:47:
                    33:fe:cb:94:63:fa:ec:5a:0a:6e:9a:e6:07:4c:04:
                    8a:68:ae:a6:8d:d7:02:6c:7c:6d:8f:a2:13:54:25:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:ED:A9:B2:E7:FD:77:48:BF:EC:C6:5F:B0:14:50:E3:AD:A3:D6:E4
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:db:07:66:5a:8c:e1:13:ea:e0:71:ad:27:8c:35:bb:a2:
         99:59:30:43:8c:3e:6b:8e:2d:fe:43:a2:ff:b0:cd:ce:a2:03:
         e8:41:f5:27:32:72:5c:a1:ad:4b:fc:01:6c:0c:8d:b2:75:b6:
         1a:af:9b:e6:66:72:af:8b:8f:0b:14:54:a4:fc:97:b5:34:c9:
         e4:e7:9d:25:27:6c:ca:e5:e5:52:09:6b:a7:bc:75:1b:2b:bf:
         96:e7:54:ce:68:1f:8f:5a:85:86:4c:02:54:71:00:af:ca:bf:
         89:96:f2:3b:7c:81:9b:d0:67:68:7b:f5:a6:fb:24:27:5a:7e:
         cc:5c:33:18:fc:b6:38:3f:3b:27:ec:c0:36:fc:78:15:4b:49:
         f9:47:d2:bf:72:43:aa:53:88:2f:0c:99:81:c7:0e:ba:18:f3:
         f8:f4:02:95:e6:38:d5:86:59:a6:99:be:2d:cd:da:93:b9:9a:
         8b:9e:0d:88:5c:d9:e6:2f:e8:92:ac:de:2f:66:cf:c0:cb:42:
         7f:4d:77:33:00:94:f5:7b:56:66:59:37:ce:75:32:f0:f2:d6:
         19:00:e5:35:6d:41:42:85:0b:c4:13:54:96:74:c2:b6:d5:e4:
         53:48:5e:1e:e5:39:0e:e7:a8:08:6c:29:22:04:61:32:19:5e:
         06:7d:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:23 2026 by rpki-client