Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          CFa/jV/gWP3pQFJjbw5CTbm3gac4+gfVhhDwE2VP9LM=
Subject key identifier:   3F:8C:33:AC:F9:56:87:30:CD:DA:CB:BD:1C:E2:E7:F7:1A:1C:92:B3
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       019D262840727CA4DA0F6FC3ED914F5204B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          062D
Signing time:             Wed 25 Mar 2026 18:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:05 +0000
Files and hashes:         1: 717UmVfC56DLyzJIkewUlvfIFG0.roa (hash: Xhib9unp/jlsbHbrOLeTYpepAcBI94Ed/fU4OASJBZU=)
                          2: BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa (hash: 9eQOj920J0RKfKOBG+x3ZwJkzFsoj5C4wlDIoVBASe0=)
                          3: _Na7vfMNE6KH8ABANOjjdG6uU4g.roa (hash: ucbQ9Dez3TCtvipedZVK8XnEorKB2QzPJMl5rkm50kY=)
                          4: _fhuGjpkRKlqYVqbCWdqX4nzLXQ.roa (hash: pemjsumjmI0Bd/B3SuE+a27XcI8Ly+FKaqAAHNiWTdM=)
                          5: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: 4WrGDuiJWas1//VosFGcwgPND0cosTlOZgPIq5ND5CI=)
                          6: qMXcH8GKPtZKcC7oXNX1oSyED7Q.roa (hash: 1tbxCaHbYh4w/bTWHNKN1f4HzQQFR2Btp4iUYuLrWWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:40:72:7c:a4:da:0f:6f:c3:ed:91:4f:52:04:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: Mar 25 18:01:05 2026 GMT
            Not After : Mar 26 18:01:05 2026 GMT
        Subject: CN=3f8c33acf9568730cddacbbd1ce2e7f71a1c92b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:c2:fa:f0:a4:cc:73:79:7d:7d:99:b9:b2:
                    c8:19:80:ec:61:01:2b:0d:72:1d:d0:42:0e:83:ec:
                    74:bc:6f:ea:59:30:59:c1:d0:e3:60:2c:e0:ae:ab:
                    c7:a3:ca:df:5c:b2:ab:67:67:d6:46:a6:c4:28:b0:
                    82:62:25:f8:38:0f:8b:9b:c0:08:6a:28:c9:df:b0:
                    06:b8:ac:bd:b9:ac:70:62:42:0b:50:47:65:72:fb:
                    1c:15:84:5c:0b:c1:be:81:56:93:1e:48:af:2f:d5:
                    1f:5a:a7:42:8b:e9:95:be:ed:86:b0:bf:2c:c9:22:
                    97:5e:1e:90:52:87:1e:82:f8:35:7a:35:ea:39:8d:
                    d2:da:16:6d:67:a6:c4:be:f4:51:f9:91:68:97:6b:
                    e2:ea:54:c2:b9:43:29:c5:4c:ba:30:ed:d0:26:b9:
                    15:b9:45:28:4c:ac:82:71:cf:cc:fc:00:28:30:72:
                    69:92:f6:f2:37:cd:82:3d:a5:63:6c:b3:8f:2a:a7:
                    8c:c1:dd:b4:a0:ec:be:73:77:9b:2a:3c:0b:60:a5:
                    4d:b0:6f:f1:3e:8e:95:52:e4:c4:07:8d:2a:a1:fb:
                    af:4a:c2:1c:b0:22:23:1d:0d:55:bd:82:20:92:6b:
                    96:6b:81:1c:d9:df:b1:ca:b1:a5:05:51:cb:03:75:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8C:33:AC:F9:56:87:30:CD:DA:CB:BD:1C:E2:E7:F7:1A:1C:92:B3
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:cd:84:77:18:64:c6:47:e6:aa:c6:be:74:b4:95:2b:ff:
         fd:f1:c7:ce:c8:47:b9:c4:5d:9f:e9:9f:5b:28:fe:31:bb:56:
         44:4e:03:56:c8:b2:52:83:37:0c:dc:b6:cf:00:2e:9a:e4:6a:
         f4:2a:fa:69:8a:c3:85:a3:7d:6f:b2:2c:3f:d2:f2:6b:af:d1:
         ee:b1:2b:85:99:a9:03:64:a1:a0:e2:d2:59:ca:98:f2:c4:08:
         8f:c5:d9:b7:9d:92:89:b8:61:e3:8c:ca:83:5a:9e:2b:d7:0c:
         e8:1f:e2:67:89:26:fd:97:de:ac:dc:aa:4a:a3:40:4a:ba:b5:
         55:23:76:79:f8:43:f5:8b:4c:86:cc:e9:4d:26:b3:cb:39:a5:
         0c:2b:8b:89:53:f3:a2:99:b0:55:da:62:7e:17:bb:50:e7:31:
         65:3d:da:30:6f:b0:e3:6b:71:33:7f:c2:e6:cb:14:9e:a3:7f:
         2a:bc:66:ee:aa:10:ff:a9:a3:2e:9c:76:98:b4:9b:83:69:d1:
         c5:c3:0e:6a:1a:4b:b6:d6:76:88:0c:87:3e:f2:80:d7:f3:53:
         4f:dc:97:53:cf:d4:65:29:53:24:da:45:b7:21:c8:f8:c3:b6:
         d1:a7:b2:fa:88:23:a3:1e:58:aa:bb:9c:e4:4b:02:d4:1f:66:
         5c:12:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:25 2026 by rpki-client