Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File:                     i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier:          YmNPGjEeD0y7Wd+ZypSj5NhRb77EKd9N66Ez2o1YY0M=
Subject key identifier:   D5:6C:40:08:71:71:3C:A7:45:DD:5D:75:0C:3C:0A:DB:74:7C:B0:6A
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer:       /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial:       019D38D29CFD178D9D34EE7DA30C017CA072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number:          1899
Signing time:             Sun 29 Mar 2026 09:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:19 +0000
Files and hashes:         1: AtDFD7_qKk4jrpKjelR8svE01P0.roa (hash: gTykOYo+tU9/XQ+/e23jrH05kkPYVNgaKARt/D3c+C8=)
                          2: Ppo8zp5LmchB33jNrvk9bBT1gBY.roa (hash: p3Wx4W4uCna+Td0Px+Vvc7pZpjBuiRji7FFkTSU5prU=)
                          3: SGD5GcL8l9REwij1xB0V3ArZ6IM.roa (hash: CbbI/yFIt3p0EMou0tP1jzrb/qN0JlHcNbbxYjLJqoA=)
                          4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: Q2BzahlgUz52DW3ZGI3IJJeSihqfZvVKtAG6f7ymOrE=)
                          5: kQp_ZLe15Zu0M6kNuE6RUIpLUlY.roa (hash: 7PWI3K79oOniAkWfGGFPuJUr+xMaJSAED92LF0a6Q2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:9c:fd:17:8d:9d:34:ee:7d:a3:0c:01:7c:a0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
        Validity
            Not Before: Mar 29 09:00:19 2026 GMT
            Not After : Mar 30 09:00:19 2026 GMT
        Subject: CN=d56c400871713ca745dd5d750c3c0adb747cb06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:39:68:7d:1b:56:28:a8:8b:3b:af:78:b4:
                    a1:ff:45:0e:8e:d3:6b:d3:2f:68:78:1d:5f:a5:7a:
                    78:0d:da:e6:df:7a:8f:0f:c7:53:31:42:0d:b6:81:
                    76:d6:6c:1b:b8:c7:80:8e:9f:49:db:9c:75:30:80:
                    16:ec:1f:36:31:48:d5:b3:17:99:44:86:c8:38:e7:
                    79:e4:e7:fc:b1:87:2a:1e:64:e3:6d:76:81:ae:b1:
                    c8:f1:8d:72:c5:c0:08:6a:72:dc:4b:cd:8c:c5:df:
                    9e:34:3b:6b:94:d2:b7:e0:b9:19:08:06:9a:53:f7:
                    e6:ae:85:d5:25:9c:41:df:02:3b:cd:40:df:ae:ec:
                    3e:a4:e5:f3:bd:ef:35:d7:81:dd:92:f1:5b:49:bd:
                    52:52:92:cf:01:6a:6f:ea:6a:d5:76:f2:0f:e9:76:
                    04:77:c9:05:8f:90:7a:78:37:71:94:b4:ef:73:19:
                    02:bb:da:67:78:33:4f:27:93:24:ee:6e:ab:fb:d9:
                    a6:36:ab:e1:53:27:18:6a:da:fc:e6:2c:9c:22:7f:
                    3e:eb:d1:8d:8b:c5:72:e5:c9:4f:5e:21:3d:95:63:
                    9b:60:e1:03:58:3e:46:84:48:83:ad:c5:a8:9a:97:
                    a1:38:36:22:14:e1:7a:e8:43:c4:b0:c5:5f:c6:15:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6C:40:08:71:71:3C:A7:45:DD:5D:75:0C:3C:0A:DB:74:7C:B0:6A
            X509v3 Authority Key Identifier:
                keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:63:4f:2f:be:5c:c5:72:9e:6c:dd:c1:86:be:27:bc:bb:
         cc:cc:3a:71:1d:72:92:0a:6e:20:1a:0d:e1:78:51:02:23:c3:
         10:80:0c:08:4e:9e:1f:19:77:6d:17:d7:f2:0f:89:01:5f:2f:
         3b:43:1f:8d:45:83:a9:cc:79:ba:51:c2:e8:d2:02:b0:86:4f:
         f7:15:1a:c4:30:fe:1f:c6:14:bf:38:ab:1a:0b:44:8e:4f:72:
         83:d7:c3:f5:ae:75:ba:89:8e:61:18:76:09:73:d8:fd:36:ac:
         d3:7d:5f:6f:6e:7e:a2:29:e0:05:8a:20:0a:f5:94:84:f9:fe:
         eb:8e:dc:33:d0:46:e8:72:36:d9:da:09:59:34:b3:3c:d6:28:
         ed:d3:83:43:12:0d:82:cd:36:c4:54:1a:2d:fc:07:ac:23:f2:
         42:c6:b0:e4:d7:be:43:2c:48:c4:67:e6:c1:98:d2:77:db:06:
         19:7c:fb:c8:d0:02:06:d6:45:12:78:e6:80:38:63:08:f0:05:
         a6:c2:4c:52:e1:f8:32:38:22:bc:ba:9f:dd:33:64:04:82:52:
         bb:47:1a:cb:49:a8:85:68:c4:da:a8:fe:c3:19:86:58:86:ed:
         c7:a1:34:e9:c4:68:ba:b3:6e:72:0d:5c:06:70:d7:af:c5:95:
         09:cc:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:29 2026 by rpki-client