Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          fQuKFsSKS5D8nxQ+h7M01ljWPRbfIoTvkOV7NGHDOrc=
Subject key identifier:   39:35:E8:FF:87:47:8D:13:84:E7:96:ED:34:3E:4A:06:50:84:B3:7B
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       019D3977A936B59877B7FC7BAC989BC1A138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 12:00:36 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:36 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:36 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: CpCeRsWPIW7bI2kNimzAt4Bd9x+BO7W+L8rTMCvPfIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:a9:36:b5:98:77:b7:fc:7b:ac:98:9b:c1:a1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Mar 29 12:00:36 2026 GMT
            Not After : Mar 30 12:00:36 2026 GMT
        Subject: CN=3935e8ff87478d1384e796ed343e4a065084b37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:50:b4:5e:a4:08:54:c2:c1:80:d3:65:38:
                    1f:6c:3b:a0:a0:b7:19:a7:5f:47:b6:31:5c:49:e8:
                    2d:75:06:a2:00:3a:61:03:4e:c5:06:68:3b:81:3b:
                    ec:ae:91:cf:51:d3:1e:51:10:d1:ef:ed:c1:05:78:
                    a7:d8:55:8c:35:5a:17:16:47:7f:28:8d:20:9c:dc:
                    1a:88:48:10:2f:0f:20:c6:1d:d2:ab:68:46:a6:5f:
                    c9:23:28:6f:95:41:5c:b2:67:20:b8:a6:4f:7c:f1:
                    84:b2:f5:f8:2a:91:9a:9e:47:ac:17:9e:db:39:1a:
                    3f:6c:1c:91:09:07:fb:8f:d2:41:b2:6c:d4:87:35:
                    e9:f9:b8:52:ed:4b:57:f9:66:47:76:84:78:4e:a2:
                    b0:95:74:4a:f6:1c:f5:ef:0d:1b:c2:ae:c7:9a:41:
                    2e:42:0d:3e:d6:f0:0e:f9:5a:ca:eb:80:cc:0b:81:
                    5e:85:ff:d3:32:07:9e:db:66:ee:e1:f4:5d:ec:8c:
                    32:15:bb:e1:7e:68:f7:32:70:5f:bb:68:28:4b:d3:
                    1d:04:08:ef:f9:bd:e2:69:05:11:97:ad:f6:2b:67:
                    11:5f:af:51:bb:b2:e9:ba:1c:cc:71:76:13:d0:94:
                    cc:7f:ac:8c:81:76:99:3f:f2:2a:d2:26:83:d2:ed:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:E8:FF:87:47:8D:13:84:E7:96:ED:34:3E:4A:06:50:84:B3:7B
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:a0:e7:f8:b2:b8:3f:3d:d4:07:08:77:27:fc:ee:aa:cc:
         13:f7:91:12:b3:87:5d:6f:c2:3f:46:23:b6:b4:e1:f2:2f:29:
         84:80:d2:5b:47:b1:6e:11:73:59:6c:3e:72:5c:df:70:43:1a:
         df:c3:b9:3f:9b:7f:1d:80:fb:51:da:3a:19:52:f9:2f:71:b4:
         e2:3a:21:60:aa:da:fe:91:3f:32:83:c8:c0:c4:e6:f1:bd:82:
         08:a6:97:0e:53:36:a3:16:47:d8:fe:a2:39:b4:e9:16:39:fc:
         cb:2e:3b:3c:ea:c1:5f:cb:f4:95:3b:f2:e9:81:bf:84:7c:52:
         11:82:1b:5e:b9:3c:d3:21:0c:e6:eb:b6:bd:71:bd:4a:86:c4:
         09:2f:7a:7d:74:9e:95:58:81:07:45:63:cf:49:6b:20:6d:f2:
         ad:59:10:8d:15:25:e7:51:31:64:df:f3:4c:e1:d1:4f:31:23:
         30:ca:28:ed:9a:0b:fd:27:5d:04:41:1e:6e:3f:a2:e3:b7:34:
         66:dd:05:5b:80:f0:4a:33:17:c0:1f:61:af:6f:9d:3e:4f:21:
         e9:66:d2:f9:8d:76:9e:e7:f4:eb:b6:6f:59:79:83:51:46:18:
         28:86:84:98:31:79:2b:af:ec:06:c1:35:ef:2b:ed:d5:10:a3:
         ee:f8:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:47 2026 by rpki-client