Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File:                     HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier:          wJprTtU5sD/YVXe1sCRXSLUyvBMejZP8tSPc3/pkZEk=
Subject key identifier:   8A:3C:83:67:2E:E0:36:EB:15:36:F9:69:55:52:5A:28:76:02:00:41
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer:       /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial:       019CE4B5A8E07DCBB2BAABA604C2E6BA7D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number:          1868
Signing time:             Fri 13 Mar 2026 01:00:36 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:36 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:36 +0000
Files and hashes:         1: GqjpIwPCfuY9AEJq32U-7x8s2Xc.roa (hash: hBgV71RI9VW14WRnhYAdkQpWE93JgEHcBWlBuGyNBy4=)
                          2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: x0tZFt4gPXTXGg2q1ioQFWNsjy9j+vgk1yTb2Rnzjsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:a8:e0:7d:cb:b2:ba:ab:a6:04:c2:e6:ba:7d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
        Validity
            Not Before: Mar 13 01:00:36 2026 GMT
            Not After : Mar 14 01:00:36 2026 GMT
        Subject: CN=8a3c83672ee036eb1536f96955525a2876020041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f8:f8:a8:1d:c6:f7:37:54:3e:bd:2d:c2:9e:
                    9b:8a:3c:a8:d9:e0:44:61:dd:cb:6c:96:47:fa:bc:
                    a4:80:d4:e8:a4:6e:f1:4a:bf:a2:87:34:07:d1:78:
                    c1:e4:ae:f8:a5:03:6f:e4:20:99:ea:d5:08:b7:9b:
                    5b:53:5b:1f:a2:f4:e3:3e:16:90:19:a3:a3:62:92:
                    30:e8:c8:68:1a:ef:19:f4:f9:17:4c:b2:70:06:fb:
                    b9:98:b9:10:27:a6:9c:0b:a0:6d:55:a5:2a:02:09:
                    b3:4c:35:54:f9:ab:86:d8:8a:4c:d8:00:67:b3:d9:
                    ca:6c:97:68:99:3c:8f:08:66:f3:9a:ea:96:a2:d7:
                    7a:40:ee:90:5a:6a:af:93:72:16:97:c4:72:3c:5b:
                    63:bf:7f:a2:60:52:c5:7a:7a:9b:4d:87:18:6b:a6:
                    ba:44:8f:46:50:82:f0:21:d5:22:ae:1a:f6:5e:c1:
                    47:1e:4d:96:fd:f1:8a:c3:57:6c:e3:6f:59:e1:db:
                    e7:10:6b:f7:5a:94:d2:0a:50:e8:cd:33:46:0e:5c:
                    af:c4:6f:09:11:4a:df:ee:cf:c4:03:90:01:3c:0b:
                    8c:2f:dc:e8:3b:2f:e7:37:9b:0e:a3:8d:4e:ec:8a:
                    58:1f:53:5a:f5:66:6c:02:5d:bd:0c:ce:21:14:86:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:83:67:2E:E0:36:EB:15:36:F9:69:55:52:5A:28:76:02:00:41
            X509v3 Authority Key Identifier:
                keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:14:81:71:96:eb:5e:fa:53:73:e2:4c:a1:81:cd:4b:49:
         7e:c0:f5:8c:94:da:9d:9a:ea:41:b6:e3:3d:8a:88:6a:ca:85:
         22:61:cf:35:01:4a:e6:3c:c1:ce:dc:ef:3d:4b:b8:e6:8a:b2:
         c8:f6:b3:fd:0a:6b:db:ba:f8:9b:b6:bf:27:fb:b1:bb:30:61:
         6f:f5:01:7f:97:d5:b6:3e:a0:0f:4a:eb:cb:33:d7:88:ed:9f:
         c9:dc:1e:00:d1:32:83:e4:33:53:01:8b:a7:d4:60:a2:6f:91:
         da:5e:e0:e9:46:d1:f3:eb:cd:61:2e:ec:c7:16:f8:c4:c7:59:
         91:ed:f4:9e:32:c5:62:c9:34:1c:6b:9c:a7:ef:3e:1a:bd:e5:
         6f:4b:7f:c5:4c:68:99:98:e8:86:aa:50:c3:93:e1:38:47:d3:
         3b:db:04:db:02:11:9e:72:0e:3b:bc:2a:7a:0b:bb:03:7d:99:
         8d:cb:a8:7b:55:64:5a:f6:b1:4d:ac:b7:16:19:4f:02:96:c8:
         84:ed:52:15:8a:6e:99:45:ca:b5:d8:1e:ec:09:0b:b6:82:ea:
         7c:d3:0b:1d:a8:7d:d0:85:2f:19:79:44:93:70:e6:e1:d3:0f:
         ec:d0:2a:6e:6d:db:8e:0b:d9:ad:37:d8:74:a1:1c:74:c6:78:
         b5:51:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:33:39 2026 by rpki-client