Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File:                     RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier:          1hoCVcfzvGeWOyzmGlYNFlCr8qLoGmijElB8U5N7cNI=
Subject key identifier:   69:AE:F8:58:00:BA:F7:A3:14:C6:B8:65:7B:65:94:4A:AB:CA:3F:D7
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer:       /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial:       019CE146A26CE08A9A1FA52D2A7A4EE9AC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number:          1365
Signing time:             Thu 12 Mar 2026 09:00:28 +0000
Manifest this update:     Thu 12 Mar 2026 09:00:28 +0000
Manifest next update:     Fri 13 Mar 2026 09:00:28 +0000
Files and hashes:         1: 2SIXUZTGLSsuNmHnmH_XZgRCYVY.roa (hash: kuoWaUJI+dAA7ih84KRN5TqDkuF9bUAxQjQzkKOCjIc=)
                          2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
                          3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
                          4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: u6eUICRe0Jz3T5c9/qVgojRWs0CwZtKi3oz/LbFdqvA=)
                          5: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
                          6: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
                          7: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:46:a2:6c:e0:8a:9a:1f:a5:2d:2a:7a:4e:e9:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
        Validity
            Not Before: Mar 12 09:00:28 2026 GMT
            Not After : Mar 13 09:00:28 2026 GMT
        Subject: CN=69aef85800baf7a314c6b8657b65944aabca3fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:7b:9c:6b:1c:3b:d5:9c:42:e3:af:57:0b:
                    ff:cf:cd:3d:bf:98:b9:79:db:65:5b:ef:db:3d:b3:
                    61:a1:f6:b8:c6:be:38:51:2c:a2:d7:40:80:a4:0a:
                    47:3a:93:44:a0:ed:e5:f7:ea:3b:76:c9:fb:6d:78:
                    1a:8a:39:2a:e5:17:77:90:da:15:47:fc:28:12:8a:
                    6c:58:f8:24:d6:e1:af:85:02:eb:66:b5:8a:00:0d:
                    61:13:47:71:db:9e:dd:e5:39:88:17:5a:9a:27:04:
                    43:1b:fc:de:88:01:78:dc:91:1d:ef:8f:c9:e9:7f:
                    ad:bc:f1:d6:b8:f9:7e:6e:32:7f:19:49:9b:5f:ba:
                    45:93:a0:c2:17:ba:d4:d2:29:90:cc:a7:38:6e:66:
                    46:5c:02:88:d6:e6:84:b3:43:d6:40:a9:cb:85:aa:
                    94:fa:2a:95:09:24:ba:cb:97:64:cc:8c:1e:34:5b:
                    68:51:1d:b6:3f:b9:da:26:5a:74:8b:c5:89:47:db:
                    e7:b0:01:7b:d5:8b:04:0e:47:3a:a9:ef:55:ef:3a:
                    6c:10:0d:74:c9:ed:eb:44:fe:ab:a6:7c:12:ba:56:
                    c4:77:bc:c0:4e:1b:e8:a1:bc:17:13:54:0b:ee:de:
                    8d:d4:9b:f7:d3:66:0f:f1:f2:90:05:09:89:14:32:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AE:F8:58:00:BA:F7:A3:14:C6:B8:65:7B:65:94:4A:AB:CA:3F:D7
            X509v3 Authority Key Identifier:
                keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0f:a5:98:d3:56:4c:cd:42:95:58:cf:98:70:71:ec:d4:4e:
         9c:8e:01:53:24:56:c7:4a:50:9b:28:7d:4e:e9:4a:a7:cb:51:
         3c:9d:28:91:4c:42:19:b1:cb:e2:8a:a4:65:5a:fd:79:73:6e:
         48:1f:61:39:84:d5:31:fe:7b:0b:a6:27:57:ce:ee:6e:d1:3c:
         72:96:19:e9:70:3a:8b:02:01:1d:c7:4f:6d:ed:8b:0c:5f:06:
         e6:8e:54:61:b4:d8:e2:ec:bf:74:fa:d9:13:d3:77:c6:49:7c:
         16:43:8f:a0:1c:63:b5:3c:16:75:80:12:0c:54:b7:82:2f:e5:
         a7:e8:bd:2c:ef:59:23:5a:da:c8:5a:79:4d:ee:76:60:cc:2e:
         df:03:f7:a5:2d:f9:37:44:96:26:20:0b:b0:6f:f7:8e:49:31:
         de:d5:2a:72:09:5f:ec:06:aa:21:7f:18:bb:1f:c1:58:01:e3:
         33:a0:c1:4f:33:4f:bb:45:d4:25:d5:2c:53:75:9a:fe:36:cc:
         5f:96:ef:45:7a:71:d8:09:82:46:cd:32:65:7b:ae:eb:04:6a:
         64:00:91:d7:92:ba:df:a7:62:f5:a2:35:52:e4:e4:3f:5d:55:
         f7:09:00:78:7c:5b:c2:08:76:77:89:76:a5:40:d7:c4:24:a9:
         74:81:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:26:50 2026 by rpki-client