Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File:                     d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier:          MDlrHaKD70x3hdukPs4K/2Gwjb3Srx3OKZiD2SNPAMM=
Subject key identifier:   76:8E:D9:75:F6:42:C4:19:81:90:3B:0E:90:A3:31:61:45:D5:2D:FB
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer:       /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial:       019D27A8B0A06FE087758B64D69E46D862DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number:          1158
Signing time:             Thu 26 Mar 2026 01:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:59 +0000
Files and hashes:         1: O0WFOQ5F0adp9CIdcAP4Tkb9e78.roa (hash: 2t8GAUYJVh4IihKnWbix0KGV/ekdr74eFxI1zTcuA2c=)
                          2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: 4i1u0bIGAHetRkk8nCtxGM+EQAiZGkGU+LHu6TYWyhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:b0:a0:6f:e0:87:75:8b:64:d6:9e:46:d8:62:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
        Validity
            Not Before: Mar 26 01:00:59 2026 GMT
            Not After : Mar 27 01:00:59 2026 GMT
        Subject: CN=768ed975f642c41981903b0e90a3316145d52dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:93:27:4e:1d:b6:18:79:b2:b3:b8:a6:0a:
                    97:21:c9:5f:84:16:cd:f1:6f:64:20:03:f3:48:b1:
                    25:2e:e7:0d:1c:b4:4c:e9:5d:4a:e5:a2:46:61:28:
                    92:02:9c:7d:af:90:6b:8a:06:d1:5d:89:56:dc:4f:
                    82:88:a5:55:a0:ce:55:27:84:51:1a:37:69:d1:40:
                    e4:b7:ab:85:b1:b5:af:e1:3e:c5:d1:c5:09:1d:49:
                    d5:83:27:42:c1:fa:12:8c:fc:16:33:51:1d:81:21:
                    6c:a7:6c:4b:6c:53:0d:9e:9e:93:0e:69:d4:cf:45:
                    92:e6:0a:5b:ca:c0:46:5f:cd:7a:2c:42:07:e6:39:
                    a7:99:6a:e4:df:b2:66:8e:2e:2e:87:5a:58:e1:b1:
                    23:1b:4b:a1:cc:70:90:39:1c:60:98:0a:6d:60:03:
                    55:d7:88:d4:e0:3d:e2:d3:75:46:ec:61:b4:17:d2:
                    68:a8:0a:43:97:df:21:51:82:8e:c9:81:bf:e0:06:
                    11:c2:0e:e0:1e:c2:8b:0f:2c:db:c1:87:45:22:b4:
                    14:2c:94:54:0e:73:f7:19:3a:88:10:b0:36:10:50:
                    a5:5b:67:9d:9b:23:2f:75:6c:30:a6:b7:93:d5:a2:
                    08:18:23:e6:c4:4b:b3:79:8a:61:61:e4:a4:18:53:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8E:D9:75:F6:42:C4:19:81:90:3B:0E:90:A3:31:61:45:D5:2D:FB
            X509v3 Authority Key Identifier:
                keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:45:d7:cd:55:f3:9c:17:c6:b5:4e:3a:05:8f:4d:05:a2:
         64:17:62:b6:9a:10:20:80:bb:cd:64:43:48:af:f2:35:30:8d:
         92:1f:42:65:b7:b6:e9:51:80:ae:e6:f8:0e:38:10:e1:a9:71:
         0f:b8:ee:df:20:5d:46:56:dc:63:c4:fd:91:18:3b:ff:60:9c:
         56:08:63:fd:a9:7e:bb:57:04:f7:e0:a2:25:72:6c:18:2b:0e:
         48:89:8d:70:4e:07:3c:8b:a7:c7:45:45:85:b3:55:f7:72:63:
         20:8a:9d:5e:6f:81:2e:95:7b:70:30:30:af:a1:cd:0c:20:bd:
         34:84:e4:45:49:14:8b:3c:17:1f:62:06:a0:76:cb:1c:73:f8:
         8c:aa:9c:45:7a:ee:57:c6:f3:eb:42:ae:68:95:8e:04:b1:2b:
         e1:00:2f:6c:69:71:97:6b:1e:5d:e3:42:dd:27:dc:9b:1f:4f:
         e9:45:9c:44:46:3d:94:28:d3:89:ec:97:5d:79:42:ad:53:e2:
         87:49:fa:33:fa:63:f6:4a:75:67:05:e9:64:81:7b:f2:d6:20:
         aa:42:ef:d6:f3:49:f3:b3:d4:87:0b:81:f0:42:c4:82:e7:a2:
         3c:4c:0e:0a:bd:0c:35:9d:73:fe:f1:f6:34:d7:80:ec:ff:ea:
         60:0b:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:03 2026 by rpki-client