Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          fIAljnNEn0PXxQL2EZ1eAqsHOy4QiSOcqjJyi9+XFsA=
Subject key identifier:   EE:D8:29:68:39:84:6A:52:37:A1:19:9A:39:96:FE:CC:F8:1B:88:EB
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       019CE6DAF579BC74EBB60E69DA0B519E6C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          1876
Signing time:             Fri 13 Mar 2026 11:00:35 +0000
Manifest this update:     Fri 13 Mar 2026 11:00:35 +0000
Manifest next update:     Sat 14 Mar 2026 11:00:35 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: t5d8jTc54uDZHo7ZGBERCsQg54fhA4qyWlx4bQQY5Xw=)
                          2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
                          3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
                          4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:da:f5:79:bc:74:eb:b6:0e:69:da:0b:51:9e:6c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Mar 13 11:00:35 2026 GMT
            Not After : Mar 14 11:00:35 2026 GMT
        Subject: CN=eed8296839846a5237a1199a3996feccf81b88eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:85:d7:92:43:8f:87:14:fb:59:b5:2b:15:16:
                    ea:40:75:c6:c0:5a:7e:bc:bc:31:b0:4a:5a:b0:f5:
                    c1:79:80:97:2a:bd:c4:6a:c6:ec:32:85:7b:4c:05:
                    8a:63:d1:f9:6b:4b:e9:73:03:b4:59:bb:90:62:77:
                    fa:16:cf:24:aa:73:7e:8b:05:de:9b:da:38:29:58:
                    f2:06:3f:ae:0b:45:e2:19:4e:55:e0:d1:f1:e5:db:
                    0e:4f:16:70:af:6b:5c:77:bb:34:1f:4a:e9:2e:94:
                    ff:5d:30:23:c8:de:f3:b6:d4:2e:fa:17:9c:35:a9:
                    b3:c7:2d:6d:c6:39:23:22:74:db:72:3b:85:e4:9f:
                    b3:d5:4b:7b:7d:c9:4b:24:39:55:26:ae:6f:0b:a0:
                    fc:bb:cb:77:14:20:4c:ad:53:97:11:47:46:d8:b4:
                    b5:1d:55:e5:3e:9c:03:b9:30:36:c9:0c:c6:45:d8:
                    2b:6f:1e:5a:81:20:4f:48:ee:3d:82:55:c1:11:ed:
                    17:22:a8:39:7e:2f:1f:89:8a:91:03:0b:e0:ba:a0:
                    c9:f2:e3:f9:e5:3e:1b:29:f8:3c:28:fa:20:42:7b:
                    fc:07:50:2d:a0:f1:80:70:b3:14:63:3f:51:f0:df:
                    6c:1c:98:bd:11:b8:2d:ad:0b:31:45:13:2c:12:c3:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:29:68:39:84:6A:52:37:A1:19:9A:39:96:FE:CC:F8:1B:88:EB
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:73:c8:56:61:b8:53:27:5c:86:80:28:34:e0:9f:ed:e4:
         74:13:25:07:c4:a1:0f:35:0b:e6:4b:60:22:cb:9d:43:63:7f:
         ba:ce:5f:36:38:87:e2:1e:96:9f:be:db:9c:12:33:b9:cb:20:
         94:71:16:fe:92:98:01:f8:20:b7:60:56:37:1f:5d:ab:f2:3d:
         f4:b1:5a:11:a5:20:e6:1d:dd:35:c8:8e:ff:dc:a7:39:64:3a:
         9f:45:5c:98:44:b7:60:7e:2d:48:23:79:59:f5:0d:41:56:2c:
         9f:f1:8d:10:ec:36:4c:9a:c2:aa:47:fa:92:86:1b:dd:12:d6:
         f7:6b:af:fd:1f:33:f6:05:3e:c5:f0:9c:69:b7:74:62:87:ff:
         6a:dd:4b:1b:45:e9:5b:d0:51:64:4b:2c:e5:42:f1:eb:e2:12:
         e1:14:6b:46:98:06:0b:1d:1e:f2:f8:1b:e7:5b:10:93:18:a4:
         8d:fc:67:de:9b:d6:66:50:e5:71:1a:d1:61:9d:31:33:28:59:
         65:65:93:4b:7a:5c:36:e1:7e:82:b6:f8:81:1d:17:c1:fd:b9:
         5a:3b:97:1a:32:05:9b:2e:f6:57:4a:de:c7:ac:fd:ae:a2:8d:
         58:38:34:46:2c:d4:61:46:6a:51:16:70:51:48:30:39:11:35:
         2e:47:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:50:48 2026 by rpki-client