Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File:                     T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier:          j52FVQBfnVNvY0NnbiIfLn+eEFsYibAAgWOX6mV7HC8=
Subject key identifier:   25:A7:FB:7E:63:1B:8D:BE:0D:06:E5:D0:DA:EB:59:9C:0C:AE:64:47
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer:       /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial:       019D262869616564325AFD846D35E665EC87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number:          1036
Signing time:             Wed 25 Mar 2026 18:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:15 +0000
Files and hashes:         1: 7YKudBQqaU86zuBwTkjjChXm9G0.asa (hash: eDBUQ1qq4EhZv8hhm9LsQRUdUzcOW1N16EN/4FMNBbA=)
                          2: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: t6ptuy35cqYO9Yfagj3rBiO1VgMYBL9zfMbJjin0Ulg=)
                          3: _Tm3qrECzPezIfgQFfA3nySl1es.roa (hash: rBkCC8V4vfJZ7RekKKwrg+MhibDVuZ/LjndlBlPdu+Q=)
                          4: _q-CP9vVp7ZOCkbVBtsfOnAJ9FA.roa (hash: XNxgADpEzkzVftJcT8a6amX7H8EAtDuMWz2MBkIT+/M=)
                          5: cjcrwUR9cOViEeTeD6CkQ1Oxg-8.roa (hash: baKzNTEyrVEeukgFUaF5YXuq3MR7DZq0UgoZTBymKqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:69:61:65:64:32:5a:fd:84:6d:35:e6:65:ec:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
        Validity
            Not Before: Mar 25 18:01:15 2026 GMT
            Not After : Mar 26 18:01:15 2026 GMT
        Subject: CN=25a7fb7e631b8dbe0d06e5d0daeb599c0cae6447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:39:b3:e1:5c:91:55:4b:f5:fe:73:77:35:
                    3f:71:4a:28:1f:31:c3:f4:0e:75:3a:ef:7e:31:64:
                    dc:e4:e0:c3:e3:37:ca:ef:f6:59:82:09:96:f8:19:
                    e5:b9:67:6f:f9:3b:7b:8a:aa:31:69:3a:0e:62:10:
                    78:b7:de:c8:7f:37:4e:13:7d:97:a9:c7:e2:c2:58:
                    0f:ab:0a:20:3f:d4:fe:13:1d:79:79:fc:99:44:d5:
                    e0:3d:ac:05:4d:75:dc:67:89:2f:84:e1:ff:e4:5e:
                    2d:e3:64:c3:09:ca:33:19:f3:72:4e:d3:98:55:f7:
                    ad:c8:b1:78:e2:12:ca:33:2a:a7:a9:5b:c1:3e:0d:
                    e9:d9:c3:c2:6b:45:0e:b5:00:f7:de:21:d1:21:db:
                    4d:3d:cb:88:69:c6:c3:60:3a:fb:79:39:40:11:19:
                    d1:4d:37:5a:a0:c0:70:4b:ee:67:9e:5d:ff:4b:62:
                    10:ef:56:e2:b5:db:24:3c:be:a2:cd:82:0a:a9:02:
                    83:60:2d:db:48:d6:8f:b7:21:b9:c8:5e:c0:06:b9:
                    90:4d:d8:88:39:49:a1:2f:12:32:79:bc:41:85:5d:
                    d9:52:3f:ad:ba:82:74:f8:9e:a8:8f:fb:eb:91:37:
                    07:a9:16:3e:9c:90:35:66:9f:b7:1f:6a:87:9d:13:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:FB:7E:63:1B:8D:BE:0D:06:E5:D0:DA:EB:59:9C:0C:AE:64:47
            X509v3 Authority Key Identifier:
                keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:52:ae:78:36:fe:61:c6:ba:0f:35:00:d9:7c:a5:f8:65:
         e7:69:ae:14:f8:e8:c5:4d:40:b2:62:33:e2:02:f5:ab:d4:c1:
         bc:16:ee:18:ac:58:c6:15:b7:6b:3e:f2:1f:fb:7c:9b:70:6e:
         30:2d:4f:ba:31:17:35:4f:a3:47:6e:cc:8e:b2:f5:fb:31:e1:
         c3:7e:47:6d:cd:89:96:54:a4:5c:7e:74:26:77:38:ee:50:46:
         03:c4:bf:95:f3:cd:5b:e9:a2:16:c9:98:b1:e6:2e:c5:07:68:
         ca:41:9d:7b:4f:5f:e0:d3:6c:96:ef:7a:2b:00:60:5e:04:19:
         3b:85:59:ba:b7:ae:75:38:3c:dc:25:95:8a:fa:8d:e3:79:e9:
         d1:8d:54:84:55:14:c2:d2:c4:fb:45:06:9f:07:98:50:eb:2c:
         6c:61:92:ce:2c:39:fd:ae:2a:0f:5b:94:82:c0:9b:1f:1f:6a:
         da:05:6a:1d:a7:5a:d5:c1:67:b7:df:5c:b2:e3:94:ce:a6:06:
         da:8d:dd:3c:3c:14:ed:83:11:da:06:ba:71:b6:17:5d:69:4f:
         06:75:a3:53:63:75:67:7a:98:5d:c9:ac:39:3b:d6:60:3a:5b:
         fe:af:1c:25:96:a5:17:b2:b0:0b:93:3c:18:de:45:73:56:0b:
         7a:88:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:39 2026 by rpki-client