Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          dPJ1ZgsQEy7TKDEPgpTREPKT87yINMCcRQ9ztP3Y4eI=
Subject key identifier:   F8:C1:BD:DB:97:0E:2F:4A:B1:B3:5C:07:0E:8E:1F:B5:CF:15:83:44
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019D1EDC8B12C293C0EF85C9FB759481FC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1880
Signing time:             Tue 24 Mar 2026 08:01:03 +0000
Manifest this update:     Tue 24 Mar 2026 08:01:03 +0000
Manifest next update:     Wed 25 Mar 2026 08:01:03 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: iA320R+4q9qD5lgGZcFMjMKkYX8Ew7zrdJ8b6rlUB1o=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1e:dc:8b:12:c2:93:c0:ef:85:c9:fb:75:94:81:fc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Mar 24 08:01:03 2026 GMT
            Not After : Mar 25 08:01:03 2026 GMT
        Subject: CN=f8c1bddb970e2f4ab1b35c070e8e1fb5cf158344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:c5:86:b8:db:78:9a:b4:b5:4b:d1:19:8e:
                    e0:19:63:a8:89:85:7c:ac:68:be:9c:c9:ef:eb:d6:
                    2e:4e:b7:58:8b:14:ba:a5:34:85:68:fa:f2:4d:16:
                    fd:7e:bd:2f:97:05:ab:1c:1c:53:39:23:15:ae:f5:
                    a9:42:98:f8:3e:c3:ff:80:df:11:bb:82:df:ed:70:
                    2e:84:d3:b5:72:9e:1f:e8:8a:f3:42:d3:2b:8c:79:
                    10:3f:3a:bf:ac:62:c2:9b:dd:e6:39:b3:84:80:f1:
                    f9:56:f7:2c:79:c3:9f:3e:af:97:03:37:04:8a:45:
                    e5:6b:53:fd:4d:ab:e4:7f:98:50:d9:c7:a5:0b:cb:
                    15:80:25:7c:4c:85:12:a2:ac:c4:50:b8:65:73:3b:
                    16:c7:01:a0:dc:3e:07:26:e4:b0:64:fd:37:de:81:
                    c0:7c:8b:30:95:a0:4b:e5:60:93:18:bc:2b:08:be:
                    5e:9a:0e:57:b6:1b:60:7a:d6:b8:63:c6:89:cd:ca:
                    ac:4b:c8:35:96:23:23:66:44:79:a2:1e:ff:78:a2:
                    72:29:db:5b:26:7b:a0:c9:04:83:df:0c:55:6e:21:
                    86:b8:58:c2:93:3a:3a:6b:1a:6b:0d:01:01:6a:77:
                    de:89:63:b2:83:89:0d:4d:9f:97:a7:07:0e:d7:33:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C1:BD:DB:97:0E:2F:4A:B1:B3:5C:07:0E:8E:1F:B5:CF:15:83:44
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:55:d3:0a:36:a9:3c:c8:8c:cd:c5:24:78:4a:ef:61:52:
         70:21:29:23:8c:56:19:0a:41:00:8a:3c:44:b3:ef:af:cc:3a:
         35:c0:db:9c:01:f1:28:73:e4:24:f2:04:0a:f8:75:1f:54:b9:
         6a:f0:28:4e:d6:9b:dd:27:ce:a7:69:a2:1c:7a:c1:22:bb:a3:
         19:30:88:78:a7:d2:a2:b3:a3:23:ab:b8:77:70:c5:ed:f0:bf:
         e3:68:79:12:7e:7e:5c:48:2f:97:24:f2:b5:ab:ca:f9:ba:dd:
         9b:f6:1f:89:aa:95:70:22:d4:8b:9e:a3:40:b9:d4:da:7a:3b:
         5d:99:f2:e2:05:4e:e8:41:2b:5a:05:84:e0:7e:06:d6:b4:27:
         39:19:a7:56:bc:43:8c:87:e9:a9:51:36:7f:b7:c5:ef:c6:92:
         6c:1e:48:06:e3:03:e2:ec:d3:1c:29:28:0c:37:f4:52:73:ad:
         d1:b3:a4:db:74:82:36:37:7b:4a:06:f9:c8:38:33:df:52:4b:
         94:ac:67:28:ed:11:27:f0:d3:68:54:ed:69:08:97:db:2b:d4:
         e1:e7:54:9e:18:ed:47:1d:50:63:50:0f:13:c8:44:b9:f7:51:
         54:78:79:78:50:8d:fa:4d:b7:60:7d:a9:52:c2:74:2e:2b:89:
         a4:c7:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 12:25:41 2026 by rpki-client