Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File:                     mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier:          ACvxJtg6M7hlGB4/a6xJ4lIwZ7JLssa6Wy0bUhxpCWA=
Subject key identifier:   D2:AA:6C:0C:7E:45:97:FC:0B:DE:90:12:D9:D5:77:C9:A6:0B:EA:8D
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer:       /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial:       019D273A85D041DD806A11262B220D966716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number:          1540
Signing time:             Wed 25 Mar 2026 23:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:39 +0000
Files and hashes:         1: R96emqY6ncQoUAU51OVYuWj0FD4.roa (hash: DJiJZV+nXxqVKXP60yIaGjvvzDv5GqmmKMPLo4GDtRA=)
                          2: mjZAX8OpHY1dvjSloL-p6ZB6YvA.roa (hash: UjqoTpMMczna/METwrK97MJ304NWBJz6gI+TWhRdCgs=)
                          3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: uxCyrtinvna9dPDmRJGcgkZHQoKskRgZlTrK3dq2pvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:85:d0:41:dd:80:6a:11:26:2b:22:0d:96:67:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
        Validity
            Not Before: Mar 25 23:00:39 2026 GMT
            Not After : Mar 26 23:00:39 2026 GMT
        Subject: CN=d2aa6c0c7e4597fc0bde9012d9d577c9a60bea8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:01:7f:b6:10:8f:25:a5:95:5e:3e:3d:71:
                    96:22:c0:fd:d9:9a:91:1a:c4:c9:dc:52:3d:a9:82:
                    51:b2:0f:de:14:28:b8:16:42:4f:5d:78:c0:5e:e5:
                    35:f9:91:77:40:dd:3e:82:84:06:bf:ee:cb:e4:63:
                    e1:63:ca:a8:aa:da:82:44:c8:fe:99:75:16:aa:ae:
                    39:8e:7e:77:29:55:68:15:05:bc:8e:bb:98:5c:1f:
                    71:d0:20:71:49:e2:a2:b4:03:07:2c:cb:94:6c:15:
                    0c:73:99:87:58:c8:41:28:7a:93:56:e5:9c:0d:72:
                    2b:a2:7e:be:e3:6a:5f:fe:f4:a1:37:b7:81:d4:36:
                    5c:ea:24:33:cd:5c:e5:9e:f3:27:b2:c2:13:3f:21:
                    fd:17:4c:54:d5:8e:88:20:a3:4b:a0:81:9b:3c:9b:
                    ca:e0:23:07:72:b4:47:16:64:09:45:4f:e0:6e:df:
                    58:8c:0e:31:8b:61:9a:18:b4:c4:de:b6:85:f5:6a:
                    46:24:15:86:b6:b6:f0:31:3c:1c:53:bb:01:a5:36:
                    54:b2:33:0b:26:96:95:28:da:39:74:d9:15:fb:1a:
                    97:d0:17:3e:44:a9:a8:03:99:dd:8a:2f:6f:06:5e:
                    59:1f:64:ff:5a:92:d3:86:5c:6c:42:df:d2:2b:9a:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:6C:0C:7E:45:97:FC:0B:DE:90:12:D9:D5:77:C9:A6:0B:EA:8D
            X509v3 Authority Key Identifier:
                keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:80:72:76:ba:85:0d:9f:8b:c1:f2:db:7f:ea:1f:6e:17:10:
         1e:fd:a2:03:62:5a:63:20:fe:f3:89:75:6b:ba:4e:01:b6:32:
         bd:d7:05:3e:6f:1a:4a:e8:0f:d1:1e:4a:63:af:29:c4:a9:41:
         26:35:51:d4:48:b0:6b:58:5b:6b:9f:ee:b3:d8:04:23:04:8f:
         2c:3b:9e:af:39:96:4a:61:2f:af:46:ec:56:ad:eb:7f:bb:b0:
         83:e0:88:44:4c:f8:36:27:ff:44:4b:c4:29:fe:e5:85:50:38:
         0e:c1:51:77:58:37:61:ee:90:02:03:b6:f7:1a:5f:1c:90:a3:
         b5:f1:7b:2b:33:7f:f7:35:24:6a:6d:f3:72:9d:bb:23:9b:db:
         15:64:60:b4:ac:77:83:db:46:0b:55:82:4d:f4:6b:5b:ef:53:
         c7:8e:e2:3e:26:c5:aa:c1:35:a9:b2:40:5a:77:a4:4c:ec:c4:
         09:e7:d5:2e:07:03:58:d1:47:7c:5b:6f:46:aa:17:4c:21:0c:
         65:44:82:61:38:5d:38:29:3f:79:58:7a:b0:87:59:96:91:89:
         3a:83:1b:98:51:4f:cb:a6:68:ef:eb:c3:7d:71:7f:1f:34:18:
         6e:d1:27:81:ac:cb:52:29:34:3e:3c:89:dc:cb:d1:4c:59:9a:
         df:7c:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:49 2026 by rpki-client