Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          v5TCoMByMEvT5kAUU+B5rEUCmf4J+k4He96lYc7ispQ=
Subject key identifier:   97:58:F4:3A:A6:79:48:B0:DC:0D:AA:14:0E:1E:16:80:4C:B7:BB:40
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       019D28841A0AA9B8807D6BD03B009AB19AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          14C2
Signing time:             Thu 26 Mar 2026 05:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:39 +0000
Files and hashes:         1: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: 9qI7rHNYf+rchePYgtIwoYnQMD/n+26jED3W5uKYUxc=)
                          2: Zd7N4oi7jgCKvlVl_PSF0xPERYA.roa (hash: EyGQp9Tr3UHMVF5vszwF0WIX2jRn29S+5KpDje4nblg=)
                          3: _5XI55CGPr_29rfxJRh8PWW9xI0.roa (hash: +AqJmUu9717kFBpcrIYfXtKgNzPHUS4Q+/khsyHEsCw=)
                          4: gebfehKBm0ZMvC6QIM8PvsoEboo.roa (hash: IX5MGc/yeIa0cd1NLArqnrmm5WQdn3pQJr9AOfiIcCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:1a:0a:a9:b8:80:7d:6b:d0:3b:00:9a:b1:9a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Mar 26 05:00:39 2026 GMT
            Not After : Mar 27 05:00:39 2026 GMT
        Subject: CN=9758f43aa67948b0dc0daa140e1e16804cb7bb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:40:ee:53:11:86:96:8a:86:61:59:f7:18:
                    6a:fc:17:61:d0:b8:2b:65:30:3d:6b:2f:e6:e3:70:
                    d2:fc:02:bd:d9:3f:98:b0:aa:77:69:f5:7c:7d:04:
                    ef:b3:87:02:35:a2:83:3c:d2:f3:c0:e4:b0:bc:fb:
                    2e:34:71:b5:44:b0:7a:1c:4b:67:3c:54:e9:cd:26:
                    8b:dd:42:7f:87:00:f3:85:a6:c3:23:c1:2b:b6:55:
                    a1:39:a3:41:3a:75:3d:f9:66:4f:a0:91:f6:46:1f:
                    90:fb:c6:d6:b0:d0:92:ea:66:e6:ea:8d:20:b9:96:
                    f2:b3:75:c2:bc:df:39:98:8d:47:37:52:61:d8:b6:
                    42:87:0d:46:a5:b2:ce:46:b9:86:0a:ba:6c:c0:b3:
                    3d:c8:5a:45:92:e6:69:65:83:47:35:e2:3f:23:cc:
                    9a:fd:f2:f1:e3:55:7d:8b:63:38:f5:a4:89:8e:42:
                    c2:a0:a1:e7:21:60:8a:4c:f5:92:e5:35:6f:e7:7e:
                    fb:df:75:2c:44:0b:f1:5e:72:01:95:19:d3:d1:ef:
                    7d:40:86:11:ed:90:c9:91:a6:10:51:ab:e8:c0:37:
                    67:b3:3f:be:46:d9:f5:ee:74:f7:00:e5:2a:ce:73:
                    ad:bd:38:4b:a7:5b:a1:85:ba:5b:82:8b:c8:c6:7a:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:F4:3A:A6:79:48:B0:DC:0D:AA:14:0E:1E:16:80:4C:B7:BB:40
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:97:9e:6b:65:b2:20:95:15:f8:05:8d:70:47:7f:38:a3:bc:
         2b:18:0c:ba:7a:e4:18:74:56:4c:79:4c:52:42:cf:d0:b7:f9:
         16:bc:4f:04:84:22:25:c2:b6:51:34:f9:45:b4:c0:b3:d6:c4:
         5f:77:a6:8b:16:1c:34:a4:d7:85:95:f5:c6:b8:e7:88:da:e0:
         0a:fc:65:ea:e1:85:88:70:3d:78:16:49:a0:b2:7f:c7:b7:69:
         ad:70:1b:7e:75:f9:bb:8c:ea:6c:df:9c:11:9f:d9:6d:c9:eb:
         41:64:af:23:45:e0:04:8a:5a:2c:87:aa:4d:c7:c3:30:a4:ef:
         aa:1d:03:4f:01:3a:a8:df:2e:61:a6:31:08:eb:77:4d:57:48:
         7c:e4:66:e9:2f:36:fb:9c:fc:94:55:67:ef:46:da:55:74:7d:
         a8:2c:09:a6:a8:96:5a:83:22:1a:75:5c:60:9a:a6:d7:ed:e3:
         82:a9:90:4a:f2:e1:ce:3d:04:7a:fe:ea:f7:d1:3f:97:a2:2d:
         5d:20:d1:fe:2e:f0:c1:27:80:2e:46:d6:be:d1:7b:c0:48:50:
         6d:76:b3:46:ff:d0:81:c3:83:09:de:9b:54:19:8b:6a:c7:4f:
         4e:80:14:cb:84:91:8a:7e:cf:7c:04:96:b0:93:4d:3f:9d:4f:
         8e:31:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:17 2026 by rpki-client