Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
File:                     AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json)
Hash identifier:          BksyFzPEODCJKvDxIlLdVH7mh0DJvgTJlqHL34+tFLk=
Subject key identifier:   0F:10:AF:4D:4B:A2:06:3F:B1:23:92:A4:9C:65:E0:87:04:E5:6A:AF
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Certificate issuer:       /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial:       019D26CCE5FC6E447038F90E396BCCB0C01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
Manifest number:          15CA
Signing time:             Wed 25 Mar 2026 21:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:55 +0000
Files and hashes:         1: 5aiykt3mjvJP4kKO_vI52BZHgow.roa (hash: iWxQUr7yp7vrCgfoSZihkj/CF4SKzIJOhHhfLwotcEE=)
                          2: 6R3hYH4nng5n1ghJI5Wsn7rgU70.roa (hash: tKmCA2VGu6pMRqdgLGwiEGxhCkj7+kJ1MpdL9zoZeLg=)
                          3: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: 1NHnptbshFlXW2b9js/xH7cxwRR8NFPNWNNtRNEOnlE=)
                          4: GEH0KcgFtkEgfOjHGAYLpjaTGlM.roa (hash: pDgheK9VVM6MnVLVYSFwhImHJu+EPJ0spm4cHHYyxB4=)
                          5: JzOppLz49d2UWrVc3_ozRSf9kTs.roa (hash: ldBSJ9nX6LcXWYtAXHd0sUG1NRIH+C7iBArXGAv52zU=)
                          6: KEElIOPDkvYWfkBPu3wloTdF7y8.roa (hash: +9b4sPZ8AQ30tCt7H4tLS/cHsGeFLEzYbt5LfCU9v9U=)
                          7: Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa (hash: xl3H7Ui7pyYxDCWSICK+n2RNpa4LQr31FnkPCNajMaE=)
                          8: SRIEH_ip-JAC8FRBxZOXC-V6_Rc.roa (hash: P09SRGvyFJXlrrkyat3yhBb/KjpwODT4F8eDAR8AnFI=)
                          9: TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa (hash: 3XHWImydnmO2TAPTSjesjzHF5/P0zYI8CHSB5cj7+6Q=)
                          10: idDB5SsOi3M4d5YPdc4kaYpnsfY.roa (hash: VzSr4liY8PEx5fC0RMBBlkwvYxH1Ole1oxoZXE3bNBo=)
                          11: kelA1bjmusiDmCW1K47dqweiIW8.roa (hash: bPpEpCtGqf74OwrxtLTkdNIJWgNMPzrtzZREOLihZ2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:e5:fc:6e:44:70:38:f9:0e:39:6b:cc:b0:c0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
        Validity
            Not Before: Mar 25 21:00:55 2026 GMT
            Not After : Mar 26 21:00:55 2026 GMT
        Subject: CN=0f10af4d4ba2063fb12392a49c65e08704e56aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:20:1a:6d:2d:51:c2:4f:dd:3a:97:c6:29:
                    11:8b:b0:a8:56:8f:d2:e5:b2:50:7c:b3:77:fb:b9:
                    22:e9:df:0d:20:94:c5:a7:48:a1:f4:67:83:d5:76:
                    39:7a:47:e1:55:90:22:8c:51:90:d2:81:b3:43:c3:
                    a7:7a:d4:d5:c5:13:ca:0f:e1:e9:b8:86:36:b0:79:
                    63:50:41:02:bd:78:ba:f7:07:f8:79:7a:e1:36:cc:
                    4c:b7:5a:08:b3:c7:82:bc:f3:5f:3e:91:75:8e:91:
                    df:c4:22:a5:8f:a2:c2:84:7f:37:d3:96:ad:93:9d:
                    4c:09:2f:28:f5:c2:34:db:a2:fe:d2:b9:b1:c1:7a:
                    a1:8d:7d:03:ee:6e:d3:5b:31:44:f6:51:23:7b:e2:
                    04:6c:14:3a:ba:56:ce:d7:3a:84:9e:e9:d0:55:1f:
                    ef:63:75:de:39:82:d2:5e:96:fc:6c:68:40:37:18:
                    26:66:97:81:0a:a0:c3:1c:d8:48:86:3f:b2:f4:8c:
                    53:9b:81:04:51:3b:6e:ed:0f:26:17:e6:ef:94:16:
                    0f:75:67:26:87:1c:93:f2:ae:e2:04:dc:42:dd:e6:
                    d0:c9:50:26:35:82:fe:88:0f:9c:28:cf:da:5e:5b:
                    e0:b9:13:72:c0:e2:b7:8f:d9:38:ad:cc:1b:b8:ce:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:10:AF:4D:4B:A2:06:3F:B1:23:92:A4:9C:65:E0:87:04:E5:6A:AF
            X509v3 Authority Key Identifier:
                keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:36:51:ef:fb:4f:3c:75:42:5b:09:06:10:86:21:80:e1:45:
         71:85:21:95:5a:b7:78:d4:22:71:7e:26:5d:0c:e3:c0:9c:c8:
         f3:85:a4:61:e5:72:b9:e0:34:29:92:25:33:4c:45:de:30:cd:
         3f:ae:12:74:a8:5f:05:00:ce:48:22:cc:39:0f:c4:1a:24:0d:
         d5:c2:8c:e1:eb:92:c3:cb:33:78:74:31:bb:53:c2:e4:eb:5a:
         06:30:50:16:46:70:d2:86:40:53:ff:ee:80:1a:3e:87:62:40:
         90:a9:ec:ef:ea:0f:84:b8:b0:26:18:ba:3e:8b:2d:c8:d7:5c:
         f1:48:59:02:2d:db:bb:13:f3:d5:d8:cf:07:3f:bb:4e:84:29:
         82:9c:66:be:4b:85:04:71:fa:1e:07:85:bd:19:8f:21:5e:90:
         7f:52:0d:8f:30:95:3f:ca:59:0b:c9:5c:82:6c:33:c7:9b:c7:
         c5:08:c5:95:52:10:1a:12:57:ce:1d:63:d3:9c:6b:90:5e:fb:
         41:01:b2:dc:7e:fb:6a:2b:7a:d0:ab:98:bf:f2:80:48:f4:23:
         ac:a0:bc:41:c4:e9:22:0d:67:b7:c3:f9:45:ea:da:62:52:85:
         f3:34:f7:63:0f:0b:0b:4a:be:06:d1:b2:52:dd:10:8e:92:65:
         b1:f8:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:00 2026 by rpki-client