Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          /kjLtMe4hMtOcDgNakDVk2jFL9nPbCyb03tpGJKXSCI=
Subject key identifier:   5E:AB:45:F1:AE:D3:42:E8:51:4D:25:B2:AB:D9:8D:90:8C:D5:2D:33
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       019D28BB8C8AC20656552F736F9E08E085BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          18AB
Signing time:             Thu 26 Mar 2026 06:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:12 +0000
Files and hashes:         1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: QjRVFzq1A+fkUn3Y6L3eyUKvQLGOKO3m9ESae57xC/w=)
                          2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
                          3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
                          4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
                          5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
                          6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
                          7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
                          8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:8c:8a:c2:06:56:55:2f:73:6f:9e:08:e0:85:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: Mar 26 06:01:12 2026 GMT
            Not After : Mar 27 06:01:12 2026 GMT
        Subject: CN=5eab45f1aed342e8514d25b2abd98d908cd52d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:ef:7d:af:bb:81:d8:d6:68:37:0b:8c:95:
                    2e:a4:55:cb:0d:d3:2f:8c:63:14:f7:c6:f3:5b:35:
                    a6:ef:11:f9:53:89:1d:f9:27:d6:ca:86:3a:e4:51:
                    11:e1:ee:07:43:4b:5b:b3:9b:a4:a8:cd:b6:a0:30:
                    70:2e:45:fd:eb:85:87:da:e3:9b:13:90:9b:22:25:
                    0e:ba:c3:c7:df:3c:db:c6:e2:e9:0c:d1:48:e3:12:
                    2d:1d:ee:e6:95:da:0c:1e:75:bc:8f:ff:0d:63:d4:
                    b0:c4:a5:51:ca:2b:fb:94:93:cf:23:79:19:2f:22:
                    aa:b9:02:ab:5d:4e:9c:b5:52:d2:83:9d:6f:c4:02:
                    ec:0c:26:f6:74:18:b3:fa:2d:b1:33:6e:6d:c0:ca:
                    3c:e4:4a:e5:e5:7f:bf:93:e7:49:b5:03:36:be:fb:
                    ba:ad:6f:ef:dd:15:ad:71:88:1f:ba:c0:1a:cd:01:
                    4c:1d:30:bf:12:01:db:fe:e2:6e:b8:f6:d7:41:9f:
                    38:e9:bf:a3:c0:ca:e9:8a:2c:1d:f3:d5:9b:84:c6:
                    0c:f8:cc:49:9b:e7:7a:6f:70:6a:ac:c1:6e:81:4b:
                    e6:a7:c8:7a:5c:ba:4d:03:7d:ee:76:8d:c5:53:5a:
                    17:c5:7c:ed:2d:cf:34:46:2c:d6:e0:a6:b5:9c:db:
                    a4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AB:45:F1:AE:D3:42:E8:51:4D:25:B2:AB:D9:8D:90:8C:D5:2D:33
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:78:7f:e3:fb:2d:3c:34:be:8a:b5:7c:1f:33:d8:de:8a:
         8f:7c:03:ff:a7:a0:22:81:a8:1f:20:67:fe:4b:36:0e:c8:96:
         cf:4c:ee:92:a3:d8:7f:b7:6f:d1:97:19:4e:37:97:ee:8a:06:
         3b:a4:3f:1d:0f:7c:96:de:83:14:f4:c8:67:4f:44:b4:89:d4:
         73:ef:20:25:d0:dd:50:0a:a7:af:7c:b5:b6:43:24:c9:62:58:
         ae:e2:ec:51:64:a3:a2:5d:2f:8f:4c:c9:7b:a1:04:ce:97:2d:
         ac:16:38:fc:43:a8:9d:af:07:50:18:92:d1:7a:65:90:07:f3:
         2c:5b:46:c6:c5:f8:46:2a:92:48:04:14:15:ba:f7:34:1e:75:
         00:ad:a8:67:bc:18:14:7f:42:fb:60:e9:24:1d:e6:cc:b3:4e:
         66:4e:60:86:e2:36:4d:8c:3b:1b:b2:36:8b:84:52:af:b8:5f:
         03:5f:81:d4:51:e7:5b:48:3a:39:37:22:d6:eb:f8:d9:b3:ca:
         c5:d5:02:a6:91:92:59:8e:74:ac:c2:b2:d9:f0:8f:e9:c9:e3:
         b2:98:81:2a:76:38:70:98:d3:dc:f4:97:26:27:5b:aa:57:d9:
         30:89:5c:af:af:76:ea:7b:ac:27:1f:ed:34:76:09:b9:f9:de:
         04:5b:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:36 2026 by rpki-client