Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          4iQ4eYhvpA46PIUc61+uiiJiX0BSm2x8G5UGenZ/ShA=
Subject key identifier:   94:D4:7F:50:49:B3:F1:24:4F:F4:B7:17:90:A3:16:DF:06:77:15:15
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       019D2772487AD2265C6486C0678344F9343B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 00:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:34 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: gxMTSoJLGyMQb7g2dYqfk2sl9R0k4GxsPabd7sBwVMY=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:48:7a:d2:26:5c:64:86:c0:67:83:44:f9:34:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: Mar 26 00:01:34 2026 GMT
            Not After : Mar 27 00:01:34 2026 GMT
        Subject: CN=94d47f5049b3f1244ff4b71790a316df06771515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:65:3a:04:ab:d3:77:01:98:25:d5:2d:4e:
                    02:9b:97:85:44:8b:d9:6b:b5:2e:96:e8:6a:07:2e:
                    27:b5:c0:04:d9:3f:b4:d5:aa:be:74:13:47:46:54:
                    21:a1:23:7a:a8:72:ab:fc:63:7f:ef:62:1f:6f:cc:
                    dd:6c:e4:db:c1:19:26:c1:5a:dc:fe:2f:6c:24:7d:
                    84:5d:18:05:e0:e7:88:ba:0c:6e:22:e9:ed:68:50:
                    23:ab:24:f9:e5:d7:e3:cd:c0:58:cc:61:66:32:70:
                    18:97:ea:12:37:2c:6b:4c:25:42:0d:58:84:b0:6c:
                    5f:fe:97:5f:87:e8:a6:78:4f:71:87:5a:ca:e9:8b:
                    a7:1c:9a:b4:1e:1b:13:a5:29:5c:63:9f:90:82:30:
                    c0:03:4d:59:38:c8:6e:a2:6d:46:96:70:31:eb:b6:
                    14:47:75:99:1a:69:d9:82:11:95:69:c3:5f:7d:e2:
                    32:c5:9b:8b:11:c1:d7:9a:0d:66:24:ad:bf:24:7e:
                    45:64:28:87:fe:43:89:91:30:3b:9e:29:09:4b:9d:
                    65:a4:2d:c4:5e:31:3c:61:ff:9d:e3:70:eb:df:d2:
                    59:4a:e2:8a:27:de:9b:cd:56:c7:2a:d5:cb:bd:af:
                    e5:ad:90:48:8a:2e:a7:35:2b:8b:e0:7a:91:69:2e:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D4:7F:50:49:B3:F1:24:4F:F4:B7:17:90:A3:16:DF:06:77:15:15
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:98:42:1c:ce:f8:14:a6:42:a5:ee:5e:28:74:ed:1c:61:
         a4:07:21:0e:02:0d:62:88:07:79:42:d0:d2:01:6d:91:cb:2a:
         c3:99:9a:01:cf:c9:e9:7a:f2:a9:e1:6a:a5:4b:a8:18:76:84:
         93:a1:08:f6:12:5b:5e:15:96:54:f8:53:ea:3a:58:65:f5:c9:
         39:92:17:2f:2f:0b:c3:bf:eb:8d:30:91:23:79:09:d2:85:e0:
         d3:e6:ed:eb:b5:2b:a3:a7:51:22:1b:5d:ce:60:d0:98:68:bb:
         e7:b8:e2:8e:20:01:e0:0b:81:2f:7a:83:fc:57:81:87:01:9b:
         63:a4:49:07:cc:d8:39:e7:e1:95:a9:6d:6f:0d:d9:28:15:ac:
         b0:0a:95:ab:85:f4:9b:c6:8e:16:c3:c7:1f:58:8e:6d:17:f7:
         75:5d:ad:11:65:56:92:2d:5a:43:fc:aa:69:be:35:25:c3:41:
         ba:76:13:d0:b8:be:89:69:d4:eb:ff:0f:23:db:71:06:04:22:
         06:43:64:e3:73:16:24:7d:ca:33:cd:60:66:5f:50:d5:07:50:
         82:d3:9d:d9:49:3e:4e:5a:75:3c:e7:8c:33:78:2b:4a:a1:8e:
         fb:cf:ea:4b:1b:8a:84:0e:c1:00:44:5a:96:10:7e:81:a8:96:
         9b:50:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:28 2026 by rpki-client