Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File:                     2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier:          usb9b4zueW1Bjup4Jk24ZpKWeIofn+U6mN6PzH2CKaw=
Subject key identifier:   9E:D3:F4:19:11:79:E2:57:E3:CB:43:6F:0F:3C:AB:AF:5D:19:66:2E
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer:       /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial:       019D34F63D10C942C85F83CF00B3F3C976E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number:          153B
Signing time:             Sat 28 Mar 2026 15:00:45 +0000
Manifest this update:     Sat 28 Mar 2026 15:00:45 +0000
Manifest next update:     Sun 29 Mar 2026 15:00:45 +0000
Files and hashes:         1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
                          2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: Ns9d5DgvwGkUMgrUhxDlED1nTviuLfdQieWWqxyPwnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:f6:3d:10:c9:42:c8:5f:83:cf:00:b3:f3:c9:76:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
        Validity
            Not Before: Mar 28 15:00:45 2026 GMT
            Not After : Mar 29 15:00:45 2026 GMT
        Subject: CN=9ed3f4191179e257e3cb436f0f3cabaf5d19662e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:7b:df:f0:75:0f:7a:61:0a:d2:e2:de:33:
                    8d:22:a7:0b:bc:1e:2f:66:00:3e:b0:11:81:41:40:
                    f8:eb:ed:00:6e:4a:22:92:a5:a1:ba:35:31:15:9b:
                    de:61:54:1d:e2:95:fd:6d:2a:11:d6:f0:8d:80:a0:
                    7e:2a:65:96:79:52:85:cb:66:eb:93:ad:de:d0:c4:
                    a6:b5:82:51:70:8c:b6:bb:46:a1:da:49:e3:2b:c1:
                    ee:10:da:67:68:d6:ec:cb:74:b3:09:da:00:c8:82:
                    cf:ee:09:f4:1c:d1:9f:46:e2:96:00:1e:28:e5:96:
                    20:67:a6:df:4e:e1:ee:3d:4b:35:98:1d:f2:8c:7b:
                    64:04:6e:dc:20:c8:9a:95:3c:51:3d:e6:a5:ca:15:
                    6c:f1:2c:12:ca:5f:90:f1:49:d1:f9:44:8c:8c:9d:
                    84:89:52:46:49:00:32:be:95:65:b6:2d:63:d3:7c:
                    dd:da:f9:df:1e:40:b2:f9:aa:2d:81:33:72:18:1d:
                    14:ec:6d:4b:a9:06:91:59:a9:1f:2d:ba:e4:ff:81:
                    41:d0:2d:35:f9:c0:ee:a8:6f:57:bb:1b:f8:07:2c:
                    34:c8:a2:9a:1a:76:2d:fa:bb:6e:03:cb:fc:2d:71:
                    e8:16:a5:0a:e0:7c:68:e4:f2:6c:3d:2d:45:a7:a5:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D3:F4:19:11:79:E2:57:E3:CB:43:6F:0F:3C:AB:AF:5D:19:66:2E
            X509v3 Authority Key Identifier:
                keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:f6:65:29:25:ae:4a:ab:5d:d6:40:31:d5:c8:8c:46:68:
         9e:04:a2:00:1e:6a:74:d1:a9:85:36:52:67:20:8c:44:d3:3c:
         23:4a:5f:e7:c8:cf:02:13:2e:ef:2d:1f:c7:dc:e6:d6:d8:b4:
         fc:1f:15:76:5d:4d:91:ff:72:a5:f8:a7:e9:48:78:49:76:a4:
         61:d6:ce:1d:30:f6:ad:9e:2e:cc:08:67:c2:23:9c:01:9d:b8:
         f3:81:c0:1b:dd:dd:19:fd:7e:76:8d:73:2e:45:a4:e8:b8:69:
         9f:ab:26:92:1a:3d:5a:71:82:e3:a0:0b:60:b7:64:bf:dd:41:
         f8:5b:06:28:07:d4:8e:00:b2:5e:35:4b:a4:50:cf:7d:73:75:
         92:59:b8:82:e4:34:d0:83:e8:c9:fa:eb:e2:4a:7c:62:e9:4f:
         5a:a9:ff:84:83:73:e1:03:60:61:0c:99:cc:66:db:6a:5c:c8:
         60:eb:cc:b5:aa:2f:2c:94:7e:cb:e3:2b:7f:08:e5:33:c3:de:
         12:46:ce:cd:62:43:a9:43:59:8d:e9:aa:6f:a8:6e:cf:67:07:
         5f:dc:47:87:33:05:1e:38:c0:10:3a:f0:74:38:84:b9:68:e9:
         5f:f9:c2:d6:e4:f7:cf:42:41:b2:c0:94:67:25:b1:9d:95:bf:
         a9:42:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:07 2026 by rpki-client