Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File:                     I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier:          6IVejxdBqYfzuGtD+GkSgn/5ZX83qIyG/6daGKNtEQ0=
Subject key identifier:   C7:C2:B8:63:25:8C:2F:3D:F4:08:FC:3E:C8:5D:11:56:1F:CB:43:4E
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer:       /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial:       019D2996D903891622D2B5A29BE8FD7B274E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number:          15E9
Signing time:             Thu 26 Mar 2026 10:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:44 +0000
Files and hashes:         1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: XwgRJfH7GSRmSv+86+ptVjBkKLtPQoeOs9bcoF8hFeQ=)
                          2: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=)
                          3: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=)
                          4: Tj3UKWYi9FJ5F2yO8PJYXbJpfc8.roa (hash: QB6C0uxCV7SQdXcJHImW1BXzGq3++ihGTPgOICCuJd8=)
                          5: VqflXfUXT1r0F0vbFqX9njzAbjI.roa (hash: orkUX8LGXJNzs24vjBzkiZQ785fRhIrV2ujjICNJPbM=)
                          6: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:d9:03:89:16:22:d2:b5:a2:9b:e8:fd:7b:27:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
        Validity
            Not Before: Mar 26 10:00:44 2026 GMT
            Not After : Mar 27 10:00:44 2026 GMT
        Subject: CN=c7c2b863258c2f3df408fc3ec85d11561fcb434e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:a5:a2:50:fa:18:37:31:21:79:9f:54:74:
                    bd:84:a9:d5:fa:76:42:2f:bd:72:ff:82:e3:05:a8:
                    e6:65:3c:0c:19:47:d0:42:6d:ab:e6:4b:22:12:14:
                    ac:e2:e5:5b:9f:2d:94:bd:de:56:36:ee:8f:e3:50:
                    0b:1b:70:a4:90:17:53:7e:2b:cd:0f:92:c7:f7:b0:
                    79:97:d3:a3:38:07:05:0b:91:fd:a7:84:e5:e4:73:
                    cc:04:67:f2:09:2c:92:b8:39:3d:0b:5c:d2:b3:34:
                    b6:ed:25:aa:43:e9:f3:f4:85:9f:7c:08:70:1e:61:
                    05:54:cc:e0:d1:6c:43:ed:ea:dd:36:4b:b6:eb:d5:
                    ba:28:c2:74:8a:08:bd:ac:47:5d:b5:59:ef:d0:6b:
                    47:ad:99:dd:a1:7c:8e:bb:b4:7d:1f:44:8d:48:0a:
                    56:34:68:b6:04:f1:62:38:af:4d:1b:8e:cd:63:0d:
                    3e:5d:5f:4e:74:bf:90:22:77:f4:23:6a:95:c1:7f:
                    74:6c:55:5d:72:dc:1b:b4:28:bb:9f:c1:c9:15:20:
                    b7:e3:aa:63:2b:6b:77:aa:2b:33:9a:33:6b:f0:33:
                    d7:eb:e9:b1:a4:25:3f:4b:80:b5:7d:a1:ed:ff:86:
                    87:dc:2b:84:e5:90:49:31:4d:bd:b4:fd:78:01:5d:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:B8:63:25:8C:2F:3D:F4:08:FC:3E:C8:5D:11:56:1F:CB:43:4E
            X509v3 Authority Key Identifier:
                keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:95:b1:7f:0f:6d:bc:9d:ef:3e:10:62:41:ac:9f:e4:c5:15:
         0c:f4:c2:6e:9f:a0:c9:12:23:89:16:0a:a2:13:ef:c8:93:ad:
         39:0b:95:e5:53:22:d3:03:6b:de:15:1e:0e:10:06:83:08:54:
         a6:6f:4e:3e:1e:13:9e:75:a5:bb:4d:07:45:26:d6:d2:d5:64:
         e4:88:d9:4d:9d:d5:0c:95:02:71:f1:c0:34:56:0f:2f:bc:9c:
         54:2b:36:fa:46:fa:27:d2:41:8d:6f:26:27:e8:98:ea:93:47:
         7e:89:a6:94:55:98:7c:de:a6:cf:06:2a:1b:0c:98:ee:b4:f0:
         50:c3:4d:d2:51:4b:10:ba:68:7d:cc:7e:2e:12:fc:91:91:15:
         6a:32:3a:ba:85:af:8f:b7:5a:e9:6c:b4:1f:a9:ce:35:b8:ba:
         34:1e:5f:a7:dc:e1:35:e1:ec:99:e1:26:55:5e:f1:cc:5d:3e:
         01:3e:a7:4e:ee:04:af:13:11:52:ce:44:89:d6:82:ad:5c:38:
         be:e0:d9:be:89:6a:02:82:90:80:ca:25:b2:df:09:2a:82:57:
         fe:35:42:41:2c:0d:cf:fd:c6:ac:7f:38:97:85:2c:15:4b:4a:
         fb:99:d9:00:f3:5e:3b:d9:7d:e3:29:f4:ed:cb:9a:75:b4:8d:
         84:ab:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:40 2026 by rpki-client