Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          FuTlpPeubP47eY5e+yTMZJHBP34VV5bTfj40ixCVc8c=
Subject key identifier:   A7:D1:C3:A6:1E:87:09:3D:9F:D6:8D:A1:A9:97:CE:42:DE:42:0A:00
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       019D31507B1AA335D06D218291FAEC1943C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          1011
Signing time:             Fri 27 Mar 2026 22:00:51 +0000
Manifest this update:     Fri 27 Mar 2026 22:00:51 +0000
Manifest next update:     Sat 28 Mar 2026 22:00:51 +0000
Files and hashes:         1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=)
                          2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: KcI6e9Jvgv1yeXh1T2rZWc1y5rHqcd/WLQy7EsC/xtI=)
                          3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=)
                          4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=)
                          5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=)
                          6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:50:7b:1a:a3:35:d0:6d:21:82:91:fa:ec:19:43:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Mar 27 22:00:51 2026 GMT
            Not After : Mar 28 22:00:51 2026 GMT
        Subject: CN=a7d1c3a61e87093d9fd68da1a997ce42de420a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:99:c0:01:3d:46:90:41:6a:3a:37:67:42:4a:
                    8a:8b:fe:ca:8e:e9:04:2b:7d:ea:e9:16:32:ec:2e:
                    9e:af:c6:fb:ab:84:76:d3:77:b4:19:1e:37:f5:2b:
                    2c:e6:cd:f8:fe:da:24:a0:0f:34:66:87:b4:69:cc:
                    93:a2:3b:ea:a0:6e:e2:cb:a1:5a:24:7f:83:d2:49:
                    2c:26:76:95:e4:ff:82:0a:92:7b:e1:87:06:e0:66:
                    4f:1f:ab:73:24:56:f1:fb:23:5d:41:9f:b6:12:54:
                    63:25:c2:42:57:88:dd:98:df:57:72:a1:a8:a3:ea:
                    05:e0:53:4d:dc:4e:94:e8:0e:a6:2e:74:3d:cf:6d:
                    a9:5b:3a:28:f5:2a:39:4a:c2:66:63:a6:be:89:03:
                    dc:59:36:8d:f8:71:f3:44:94:62:d7:21:a9:ea:50:
                    86:4b:58:b4:55:59:84:ba:5f:0b:4e:11:95:03:a5:
                    0d:26:15:2a:6c:c1:72:61:4f:0e:ff:bc:42:9b:80:
                    5d:65:34:3b:98:b5:ca:11:0f:a6:9d:82:98:21:31:
                    04:84:c1:01:98:da:4e:2c:5b:61:a0:80:5d:3a:63:
                    f3:09:ab:94:a7:2e:96:45:a9:e5:f0:6c:2d:ec:8a:
                    ea:4f:58:28:86:b5:01:7b:c4:c3:40:90:fa:fc:ba:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D1:C3:A6:1E:87:09:3D:9F:D6:8D:A1:A9:97:CE:42:DE:42:0A:00
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:93:fd:5b:d5:8c:a4:46:ab:36:7f:4b:f9:5e:5d:3f:3f:76:
         f6:60:86:81:67:e8:9c:fd:8f:a6:8f:2a:ea:c0:cd:b6:69:ee:
         46:f7:4e:af:7b:60:aa:1d:f3:f5:cb:28:5b:30:d3:2f:aa:53:
         63:f1:87:ba:d7:f5:62:8a:45:9b:20:6d:a5:87:25:e5:81:49:
         39:f4:26:ef:1e:54:2c:2f:d8:44:98:32:03:8e:e1:d0:6f:ab:
         2d:23:ec:58:a1:cf:d0:82:31:c6:49:11:7d:63:2e:e0:c4:76:
         67:89:57:81:1e:14:77:ad:c9:9d:80:37:fc:49:85:2a:06:0b:
         39:56:0d:86:ce:4b:fa:89:3e:75:6a:f7:52:56:f6:d5:d4:68:
         fa:f6:58:9a:26:66:23:f9:90:da:98:dc:57:9e:5f:be:0e:d1:
         c9:44:0d:1c:6a:9d:7c:9c:ac:d5:0f:89:b8:a0:03:a6:a6:05:
         19:59:27:9d:0d:52:29:0b:bd:da:d4:79:0f:b3:fb:72:51:11:
         94:bf:e2:8b:93:97:c7:d7:c7:c7:72:48:33:42:45:6c:a5:8f:
         8c:cc:fb:74:33:c8:13:17:1d:49:4a:ed:4e:54:dd:54:52:08:
         9a:72:ba:25:d8:b1:ec:9a:6a:d6:22:d2:01:75:92:91:ba:5e:
         25:8f:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:55:35 2026 by rpki-client