Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File:                     cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier:          M+s35UJdovxV0UXbFZnSn0YBhkoDcpBT4k/TXX/Y+eQ=
Subject key identifier:   18:7D:D1:5C:B5:0E:B7:07:47:28:F3:0F:EB:DC:D2:49:53:6D:94:7A
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer:       /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial:       019D28BB493E24874D87969B317FEA8A621D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 06:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:55 +0000
Files and hashes:         1: 8ZpfJeIrVDzsn80EhfTAQYuyWJ0.roa (hash: Dqp4TUGjySbwuRx7Gm8p9zQiCkfikYnsg1NWXjq33+I=)
                          2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: /dG3CUQmrFKEVc26UtZn50KNSn8wxVxYI9ANxCtFZZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:49:3e:24:87:4d:87:96:9b:31:7f:ea:8a:62:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
        Validity
            Not Before: Mar 26 06:00:55 2026 GMT
            Not After : Mar 27 06:00:55 2026 GMT
        Subject: CN=187dd15cb50eb7074728f30febdcd249536d947a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:dc:82:0f:29:dd:73:99:4a:25:6a:89:69:
                    0e:2e:f0:cc:72:61:7a:e1:eb:9e:68:85:53:f9:d3:
                    f6:0c:1d:74:c3:d7:85:21:f4:49:1d:24:97:a8:1b:
                    a3:f0:50:f7:e1:8f:39:6b:2b:cf:41:10:f0:d2:e2:
                    f1:51:9f:22:aa:b2:8e:5b:93:20:32:a9:e3:01:e3:
                    ab:52:7d:04:82:55:45:cc:24:19:08:df:b3:2d:e3:
                    5b:f2:fa:bb:91:11:14:ec:dc:4d:70:be:4b:85:f1:
                    0f:de:0d:af:d8:02:a9:16:c7:8c:1a:88:e7:9a:c8:
                    fc:c6:11:28:79:bb:4a:5d:75:77:4a:a5:6d:b5:4c:
                    81:c2:b1:e6:c3:12:b2:91:2e:45:ed:cd:77:91:25:
                    a7:72:04:23:f9:df:21:6b:0a:bf:49:4d:bf:e2:b1:
                    06:bb:69:89:2f:7c:2f:4b:ef:31:c8:16:23:16:c8:
                    e3:6c:56:47:9d:fd:97:66:a6:0a:d4:0f:1c:cc:df:
                    1f:1b:76:14:90:a2:8a:14:22:a9:8d:2a:3d:b5:bf:
                    21:6a:91:87:4c:e8:52:63:97:97:e0:25:18:7a:1f:
                    b1:5e:e6:96:41:fb:2f:a7:fa:dd:1f:24:8d:36:42:
                    57:e5:99:04:d4:03:8d:37:c7:e0:50:ef:dc:df:83:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7D:D1:5C:B5:0E:B7:07:47:28:F3:0F:EB:DC:D2:49:53:6D:94:7A
            X509v3 Authority Key Identifier:
                keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:85:d4:06:e3:d6:ae:4c:ce:fd:d2:85:58:16:79:45:55:
         8b:2f:6e:7f:7c:99:45:5d:3d:e1:90:c1:f6:79:5c:59:73:d0:
         17:d2:6d:03:7c:9e:74:76:80:27:41:fd:e8:67:9a:36:33:f6:
         f8:8f:f8:41:39:ab:1d:a9:d1:7d:b7:4b:52:99:40:56:ca:f4:
         e2:39:ca:a8:38:1b:03:18:9f:6e:e5:55:b1:71:53:79:5d:b2:
         82:e3:c6:f6:5c:b3:15:44:57:c7:ff:bc:16:62:85:a8:b3:da:
         26:23:a3:21:e1:c2:42:bf:35:6c:18:41:1b:be:4b:b7:1f:1b:
         88:c2:47:18:46:01:9b:88:e9:56:1c:9f:06:65:a2:20:d7:fd:
         39:38:59:ec:a9:10:16:1d:12:0f:bd:c3:88:b5:8d:05:63:ae:
         29:a1:32:46:83:b1:4e:b5:4b:f2:f8:1b:8e:1b:3e:6c:c0:69:
         4e:a1:81:40:17:8d:59:af:48:7f:a3:85:d8:75:e0:76:ed:b8:
         00:7d:cf:90:49:26:90:13:04:1c:78:66:c4:d7:a7:c4:08:36:
         f6:c3:62:91:c4:72:d6:25:b3:f1:ae:7e:0f:08:11:84:1f:e2:
         e0:a5:b8:c8:a7:17:c2:e2:28:28:9e:09:e7:81:83:37:22:65:
         ba:11:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:55 2026 by rpki-client