Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          sYmhV5q7veZTfEdlnoHImkF6PssASZgHbF/V19O0LpU=
Subject key identifier:   3A:E8:2B:75:F7:F9:3E:31:34:E0:EC:D8:A7:D7:10:34:BC:C7:70:48
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       019CE5C96E5FCBC5401D554ADE12BE9086BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          186A
Signing time:             Fri 13 Mar 2026 06:01:49 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:49 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:49 +0000
Files and hashes:         1: 6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa (hash: A154uIVBWW18JX5P8xttoUSBJ4YcDPO4IGCdrwKK67Q=)
                          2: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
                          3: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
                          4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
                          5: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
                          6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: MwhuQc9KfCBWbZoKJrIP9ipjqUJn/ERcLkuo/0AA0oU=)
                          7: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:6e:5f:cb:c5:40:1d:55:4a:de:12:be:90:86:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Mar 13 06:01:49 2026 GMT
            Not After : Mar 14 06:01:49 2026 GMT
        Subject: CN=3ae82b75f7f93e3134e0ecd8a7d71034bcc77048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:49:59:09:d4:f5:c6:d7:46:43:b9:d0:14:
                    51:81:ba:ff:da:2a:53:a3:9d:e9:a7:33:ac:24:01:
                    7b:8b:3b:49:67:49:a9:60:6c:59:2b:d2:11:dd:a5:
                    a2:49:12:d9:f5:cf:7b:b2:2c:8f:34:45:7d:bc:da:
                    0b:4f:63:fa:a9:a3:df:b0:e7:78:5c:c4:5e:e2:6c:
                    13:42:37:4d:33:b8:c4:20:27:ea:6c:77:e1:b7:15:
                    cd:17:06:8f:e2:d6:9b:5a:ec:36:1b:ca:c9:af:c5:
                    0c:5b:36:f1:f6:68:3b:48:1e:ee:b8:21:1a:11:49:
                    40:43:b6:6c:7a:b1:5c:62:47:1e:3a:7f:e3:b7:76:
                    0c:ba:e1:5d:44:68:8c:db:ac:76:de:83:f5:20:c7:
                    a9:9a:4f:9f:c2:95:f1:f1:f5:07:32:25:d8:f1:e8:
                    0e:6d:82:55:a3:60:c1:ec:62:6b:8b:08:77:7d:4b:
                    9d:87:45:d5:d0:5d:01:62:6b:1f:df:20:18:dc:08:
                    61:df:f4:ed:dc:c3:1a:1c:c1:d4:33:56:f7:f5:df:
                    09:28:1e:9a:05:52:a0:5a:be:8e:bb:b6:73:b7:cf:
                    d4:fa:70:b9:e7:05:21:8c:15:ba:f5:91:cf:d9:d5:
                    d7:e4:15:2e:ea:3e:ae:42:07:7b:36:17:b0:08:ed:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E8:2B:75:F7:F9:3E:31:34:E0:EC:D8:A7:D7:10:34:BC:C7:70:48
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:db:19:15:ba:2c:62:6c:1e:3d:ae:cd:2a:44:01:fe:b2:0f:
         6e:43:0f:37:af:71:5f:a2:2e:c3:79:9a:8a:67:17:f4:8e:42:
         df:d5:c1:14:43:1c:e7:58:42:3d:6b:90:0b:3f:5d:a6:2d:b7:
         d9:77:7f:6d:07:1c:2a:ff:6d:2b:c5:6d:04:10:32:62:b4:c5:
         52:d2:1e:2c:1a:4a:12:15:f0:a5:5a:d6:95:7e:e7:f4:4e:ee:
         ff:7e:0e:59:98:5b:24:df:c5:81:ed:8f:fe:cd:68:1e:1e:68:
         95:51:89:3a:5d:14:00:21:22:8f:67:15:1f:6c:48:31:51:96:
         44:0e:c2:c8:76:21:51:39:f6:56:e8:d5:64:11:8e:14:da:27:
         b2:75:d1:9d:39:70:86:21:0d:be:29:16:06:66:c5:98:30:8c:
         09:4c:12:db:f1:62:fe:fe:e1:14:36:f6:33:e0:ca:84:0d:72:
         8f:80:61:90:f1:43:08:cc:0f:b5:da:20:2e:b6:b4:97:f6:33:
         70:9b:9d:4e:89:79:60:24:39:b6:8e:3c:60:ff:09:0d:d2:b6:
         fe:e5:65:f3:be:88:ac:07:49:c5:29:07:fd:60:b1:8d:8c:32:
         8a:47:db:96:21:ed:a9:99:9e:cd:f3:4f:47:ba:aa:67:21:82:
         c0:66:fb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:37 2026 by rpki-client