Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
File:                     SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json)
Hash identifier:          aGm1vOA1kgV8OGcSh+cTZULE8O0FrsDUzLEtHQMJQH8=
Subject key identifier:   F4:1D:42:B5:B2:D1:0B:82:44:82:62:59:8E:25:7D:29:12:C3:AB:4E
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019D28BB2DB21148EB00DEAECFC3E08B43A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 06:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:48 +0000
Files and hashes:         1: EQcXmsGZVVYkzBROBdXqoKe1Ndo.roa (hash: nByWMCw0nioYifxgn/+QEUzppUElVTO5RKZgZTpSfek=)
                          2: GOKl_HgtHfM22hM8HA5SESUac7k.roa (hash: 9WYCow1eFtG0OZYI4lYrZV4DtE2HmFDni29YhIkALTY=)
                          3: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: ZAIXzHOe3X01xk+UEquK97xnwDFzTDHh2fcjrffJS3g=)
                          4: yjmhn9zBn-5iLGupIJe7hZRJHEI.roa (hash: mUPbuC6CRqfm+IKqCyjDmA5vrXV/CLfdXuRnH6W/B2M=)
                          5: zseUJgVeCwjihWSVg8qrP6U6zOY.roa (hash: 3GL/igz6eaoQ/qNe14Emh1CvM3j7cI74/xHiIs5bkLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:2d:b2:11:48:eb:00:de:ae:cf:c3:e0:8b:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Mar 26 06:00:48 2026 GMT
            Not After : Mar 27 06:00:48 2026 GMT
        Subject: CN=f41d42b5b2d10b82448262598e257d2912c3ab4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:3e:5e:df:c9:e4:29:1d:11:7d:a8:b2:2c:
                    34:4f:e7:c7:22:d4:c3:26:51:a1:c3:19:f7:20:af:
                    11:89:19:52:b8:28:9f:c3:1a:e0:e8:05:f1:0f:7f:
                    1f:7b:43:b3:7b:96:13:a4:ea:74:63:01:d6:74:a3:
                    a2:1b:42:bd:c8:4d:24:db:a7:1d:13:35:3f:27:71:
                    c1:81:f0:77:ce:e0:96:1f:41:78:69:01:ef:e6:c2:
                    be:32:ee:14:08:bf:03:2c:3a:8e:22:fc:c0:b4:40:
                    3e:49:cf:af:56:d8:cd:d4:42:53:1b:71:cc:43:61:
                    9e:7b:d5:a1:9b:ba:81:26:55:01:a1:eb:ec:b4:15:
                    7d:db:08:26:ab:6b:98:a1:19:14:60:9b:bb:45:22:
                    71:9e:89:c1:28:ce:bc:05:d4:dd:18:46:89:0b:9a:
                    32:98:da:69:c3:df:38:ce:f4:40:07:60:f0:74:77:
                    30:0c:7d:cc:18:1e:89:c5:d9:b9:7f:94:5e:65:e2:
                    35:83:95:70:d7:0a:58:44:c6:b7:90:d1:28:a7:51:
                    56:af:fb:84:ee:5b:d2:f1:43:aa:df:38:84:32:f0:
                    84:a9:4b:d5:33:e3:45:37:41:e2:13:45:e4:89:b3:
                    7b:75:df:f3:c7:ae:72:aa:61:22:16:9a:48:cd:5a:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:42:B5:B2:D1:0B:82:44:82:62:59:8E:25:7D:29:12:C3:AB:4E
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:77:dc:f0:7b:3b:53:b7:e4:1e:55:2f:c2:60:2f:64:f0:c4:
         d9:60:56:50:0f:e1:b2:58:6e:ac:3b:b5:37:e6:94:0d:65:44:
         2d:e6:9a:95:41:ca:99:6b:40:89:6c:d8:2b:a3:ef:87:d7:84:
         41:51:eb:d1:d5:eb:0c:bc:5e:63:8d:41:8c:19:b4:b0:bc:35:
         dd:66:e1:8e:39:c4:4b:45:bf:9a:c4:88:a0:b8:c7:29:bd:a4:
         dc:b9:92:1b:1f:31:68:c5:7f:4a:1c:d9:25:59:c3:93:d6:16:
         82:50:71:29:14:8f:d7:af:f7:77:93:ee:5c:df:7e:72:21:82:
         e9:93:50:73:0a:50:80:09:20:ab:23:e7:d2:fe:44:ab:48:52:
         50:5b:38:2b:ec:e5:d9:ac:ce:f0:a3:75:8a:b9:33:28:ef:27:
         34:bb:c3:1c:f4:24:1a:39:5d:29:03:46:f7:53:58:4f:59:14:
         d6:99:b4:d8:32:3c:5e:fe:cb:30:07:58:c3:37:10:97:60:7b:
         33:53:15:eb:e8:55:cf:a2:0a:32:d5:ff:35:ce:a1:b4:b8:18:
         79:43:65:d9:1b:63:4d:9f:4e:d7:62:e2:94:4a:c4:eb:2b:a5:
         a6:99:a0:b5:c3:5e:31:e4:dc:3c:3d:56:4d:d4:30:f5:8c:75:
         2f:64:d5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:01 2026 by rpki-client