Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File:                     g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier:          YdV3OKtN0H/KKIwP8vJji0hi7ume1IaMxRPMzepLhkM=
Subject key identifier:   C3:41:94:21:ED:54:48:78:D7:20:FA:39:33:2D:ED:A3:18:A2:75:A1
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer:       /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial:       019CE410FF10FDB067640BCECBD0067FB059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number:          1073
Signing time:             Thu 12 Mar 2026 22:00:44 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:44 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:44 +0000
Files and hashes:         1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
                          2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: EVBYeKwWroeQIpkXRYAlS0qAhkToUUSMSFvhrWPvPic=)
                          3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
                          4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:10:ff:10:fd:b0:67:64:0b:ce:cb:d0:06:7f:b0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
        Validity
            Not Before: Mar 12 22:00:44 2026 GMT
            Not After : Mar 13 22:00:44 2026 GMT
        Subject: CN=c3419421ed544878d720fa39332deda318a275a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:8f:f5:81:d1:9f:6a:45:2f:c7:25:f5:f3:
                    0d:36:90:5e:9a:69:f7:2f:eb:07:33:2f:ef:39:8e:
                    74:be:0f:70:93:de:55:14:95:01:ea:8e:06:60:8a:
                    d9:90:ca:39:93:81:40:0e:fb:4d:ad:64:c7:78:b7:
                    74:c0:c2:21:49:8a:18:37:8f:ba:5f:af:51:60:0c:
                    96:cb:5f:d4:c0:c9:8e:71:88:7b:c1:bf:5e:d3:10:
                    f4:86:22:6c:8d:af:34:72:d1:87:31:fe:90:77:25:
                    32:8f:b5:0c:fa:a1:b6:fc:2a:1d:e1:0c:1e:6b:db:
                    fb:75:87:9c:72:8e:53:e7:98:cc:6e:f9:a2:21:11:
                    3b:f1:02:7b:64:ef:ba:37:46:8a:c8:f3:aa:ff:23:
                    72:02:78:4b:79:95:1c:ef:85:39:72:1a:e0:73:ae:
                    b6:a2:de:3b:3f:00:35:26:46:61:00:fd:5d:cb:f7:
                    e5:03:72:f6:a4:51:b7:6f:f2:a4:5b:8d:1a:43:9d:
                    8b:b6:97:0c:60:5b:15:ec:99:cd:ea:5c:9d:16:fa:
                    4b:5d:c8:7e:42:fb:03:cd:7f:de:c2:9e:d2:24:7f:
                    08:12:df:54:73:45:9c:f3:38:7e:d1:8b:a7:a8:c2:
                    1b:c4:39:43:14:0b:96:ea:55:7b:da:3d:ff:36:51:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:41:94:21:ED:54:48:78:D7:20:FA:39:33:2D:ED:A3:18:A2:75:A1
            X509v3 Authority Key Identifier:
                keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:eb:3f:d6:66:10:76:c4:58:b4:aa:a9:2e:0b:ca:a0:2c:9f:
         be:21:47:50:10:2d:9a:12:4c:81:22:aa:05:83:75:d2:ed:90:
         42:11:8c:fd:0e:ac:6f:54:c5:4c:fd:85:c5:d0:38:45:eb:6b:
         42:04:9f:41:63:29:ab:2e:42:13:75:fe:6a:40:b0:d7:75:b4:
         40:b1:5c:c0:f6:a3:b2:04:ea:91:ee:a3:7f:b9:91:8d:19:c3:
         16:2a:aa:34:46:1b:ef:e7:29:9a:df:ec:84:3e:2d:b4:b7:5d:
         a2:75:4c:de:6a:1d:73:a3:0e:f9:04:ec:ed:bf:32:f5:ba:7b:
         01:db:cc:5e:c1:c8:4f:53:69:0c:dd:ef:c6:91:9b:b1:4f:5d:
         e0:5c:d7:ac:e0:07:3c:f8:6a:15:27:04:29:ba:df:73:7a:1e:
         12:27:89:ca:4c:75:93:69:a1:f3:18:5b:cf:4e:ad:d9:b0:ef:
         e8:d1:f5:88:ab:8a:02:6b:a4:11:40:fa:31:59:d2:db:d9:0d:
         10:bc:7d:4a:d2:12:fb:d8:74:88:8d:a1:19:23:1b:af:75:22:
         ec:fd:a8:3e:33:5c:f3:a5:72:93:ba:97:1f:8b:1a:a3:36:0a:
         64:74:76:f0:bf:b5:8b:5d:b3:f1:84:15:29:eb:94:59:ae:df:
         28:23:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:17:58 2026 by rpki-client