Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File:                     RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier:          9C1fCcHPOqze7T1gqndMKYNWRdSUIFOzJpa7NgKonW4=
Subject key identifier:   F7:38:37:7B:C9:FD:E2:F3:47:0B:8E:71:83:31:9E:44:BF:12:7B:C7
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer:       /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial:       019D29CE401C0521200309FEAD469DF4C831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number:          181D
Signing time:             Thu 26 Mar 2026 11:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:15 +0000
Files and hashes:         1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
                          2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: TMWVmxKeC6yd/xcr6JpX73ALacGpnglf7UOlqFxA1tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:40:1c:05:21:20:03:09:fe:ad:46:9d:f4:c8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
        Validity
            Not Before: Mar 26 11:01:15 2026 GMT
            Not After : Mar 27 11:01:15 2026 GMT
        Subject: CN=f738377bc9fde2f3470b8e7183319e44bf127bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:92:14:19:bd:50:73:d4:d3:7b:ce:af:a0:
                    3c:d9:2c:c7:ef:0b:ec:fc:02:73:ab:c9:0b:34:6f:
                    2a:ff:b5:43:55:23:1e:a8:84:1f:b0:55:1b:ad:a4:
                    0a:ca:9b:a1:1e:42:f4:d0:c0:79:83:22:b5:8c:de:
                    03:1a:dd:67:e3:5e:9c:34:fb:33:41:22:5d:85:87:
                    ad:32:11:b7:42:19:a1:86:44:c8:68:88:46:82:ae:
                    5c:27:a0:b2:07:33:e9:07:39:dd:be:64:5c:71:b7:
                    10:5a:93:7f:f0:46:f3:a2:5f:21:23:50:07:3b:00:
                    05:34:a6:72:3a:69:93:f9:af:c4:a0:ba:a7:e2:d9:
                    f6:4c:7d:1a:41:62:03:20:f2:1e:f8:5a:ca:a2:17:
                    07:36:a7:28:02:58:b1:71:cd:08:2f:74:b0:d0:18:
                    b4:95:cd:27:9f:df:7d:6d:56:33:94:da:99:ad:a1:
                    d9:bb:b4:03:f7:2b:28:76:b5:33:8e:e8:ca:21:01:
                    83:73:9f:17:59:3f:33:57:67:d9:16:31:f6:db:2b:
                    24:a5:1f:e2:b4:20:a4:fe:04:92:c1:66:8f:14:c0:
                    30:2e:c6:96:71:46:76:3f:08:0d:60:ea:57:cd:2c:
                    14:69:9a:d6:52:00:73:db:c9:e6:cb:04:fb:d3:f6:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:38:37:7B:C9:FD:E2:F3:47:0B:8E:71:83:31:9E:44:BF:12:7B:C7
            X509v3 Authority Key Identifier:
                keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:1d:ee:24:72:30:09:60:53:7e:f5:10:8c:69:cd:df:77:
         42:1e:8c:8f:a1:a4:be:6e:c6:ec:30:96:61:28:0f:2e:50:85:
         7d:ff:5b:4d:ab:ae:7f:f4:27:1c:97:e5:df:77:64:36:ed:ce:
         89:67:00:17:9e:96:ee:b9:ce:21:d2:f3:b9:ef:5f:d8:b8:cb:
         a7:cd:13:6c:af:d2:b3:e3:e3:aa:c6:9d:8d:8b:5f:56:c9:e9:
         fb:fd:a5:89:59:27:b6:07:27:9b:a7:6f:b1:8d:4a:78:88:34:
         59:bf:5c:f4:eb:0b:fb:aa:fb:07:3d:9d:91:60:25:72:12:63:
         78:95:7c:13:c3:1a:e1:01:f2:89:a8:7a:d3:69:81:8c:2f:1b:
         11:f6:a9:46:15:69:08:2a:91:3d:9f:58:2e:4c:c3:6f:0b:92:
         31:cc:96:1e:32:bb:84:81:2a:3f:a0:b8:04:66:a1:9a:40:5d:
         44:a9:98:24:0c:99:86:77:95:96:02:16:d5:2b:04:02:9f:57:
         54:8a:f9:37:7d:09:78:2d:6b:5e:de:60:37:73:0e:54:0b:75:
         69:e3:31:bb:f8:c0:f1:7c:69:91:8f:23:31:6d:15:8d:9d:ec:
         28:a0:21:37:6d:c4:d7:32:8f:32:7d:83:7c:1a:f8:d9:61:74:
         79:3a:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:30 2026 by rpki-client