Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File:                     MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier:          Qbtd+milSqelWWYKwSBuX6HWZfbcLBqpsyZ+yIJyGzE=
Subject key identifier:   A5:C4:E3:64:7B:65:DD:22:42:19:A1:39:D2:49:C2:F5:EC:31:34:5F
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer:       /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial:       019CE5237FAC87C96AEFF97F19C4586E6A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number:          137D
Signing time:             Fri 13 Mar 2026 03:00:34 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:34 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:34 +0000
Files and hashes:         1: 3IB8mthpDOk_BFBQubUuplUkjXo.roa (hash: e+u6WkaJwntAo2oCWNchAEYFIeKwoZYuEMGJQKwp5uE=)
                          2: KaqeHG0uZeg5OeAlCabPEVitkog.roa (hash: kUNIU0ayuenQ62hZ/a8gWBFN8YsJ5arVTqiahqwzqow=)
                          3: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: AYhodje9aCpD5KHkcuw3MhhI3VJxUoyDqI+dp2Awiig=)
                          4: g8rfoziuF-oQqakJ7VRRFDiP_8Q.roa (hash: tMNJvnilP3OgFRAUiXL5Z4gr4F5ohZRaQsEApjgqeNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:7f:ac:87:c9:6a:ef:f9:7f:19:c4:58:6e:6a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
        Validity
            Not Before: Mar 13 03:00:34 2026 GMT
            Not After : Mar 14 03:00:34 2026 GMT
        Subject: CN=a5c4e3647b65dd224219a139d249c2f5ec31345f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:9f:9b:9b:be:09:e3:0a:20:f6:de:bb:41:
                    eb:61:06:25:50:4f:d5:2b:a5:a8:5c:43:4f:bf:a2:
                    08:86:19:f2:6e:6d:79:f2:35:c4:2a:ca:79:2d:44:
                    d3:5f:06:8e:ca:60:52:32:1a:45:b9:fc:13:8e:2a:
                    6e:9e:9d:72:e5:26:4f:93:f1:2f:07:ed:bf:ba:a8:
                    b4:65:90:e9:05:04:c8:77:a8:5e:32:8a:20:eb:42:
                    06:fa:87:73:28:a2:eb:e1:e1:2e:7e:fe:ab:0c:3f:
                    6a:53:69:3c:e7:e8:92:93:8b:c4:fc:fd:2f:7f:47:
                    67:11:18:29:a1:49:a3:f8:f0:54:29:1a:a5:1d:51:
                    d7:6a:7c:60:f0:e3:e9:4d:e4:1c:4c:d7:7f:48:24:
                    13:53:7e:3e:a2:38:4a:36:ba:80:c1:0d:78:2f:67:
                    16:73:14:bc:1f:22:c2:fa:95:27:7a:9a:c8:a2:9f:
                    05:29:07:9b:7d:54:45:40:3d:3c:a2:8f:31:67:17:
                    54:86:0d:80:1f:a9:08:98:63:df:17:bb:3f:f7:d7:
                    e7:4e:25:51:2f:cf:fd:58:69:8a:23:b3:d8:58:6f:
                    6b:19:80:8d:c0:18:ad:02:26:eb:ed:96:4e:fd:0d:
                    5b:90:05:0e:1c:e6:67:fe:b5:01:18:51:3a:e5:15:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C4:E3:64:7B:65:DD:22:42:19:A1:39:D2:49:C2:F5:EC:31:34:5F
            X509v3 Authority Key Identifier:
                keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:71:14:02:89:ba:ee:56:0c:59:dc:ad:f7:9e:20:09:41:
         23:b5:c2:eb:f7:1e:4d:03:04:1d:d1:8c:f4:61:0c:80:fd:a5:
         fd:37:42:9c:d2:6c:90:4b:0e:61:26:43:97:71:c1:45:9a:b0:
         2e:d1:d3:47:bc:9b:e6:51:7b:fb:09:f0:b4:9f:be:61:e6:db:
         5a:21:d2:3d:3c:77:d4:4e:92:a6:94:3b:95:54:27:62:2f:72:
         31:80:96:09:ee:79:f1:b9:cb:8f:48:f7:a5:80:d2:6a:6d:1d:
         c1:3a:0d:29:72:a4:7b:19:b0:22:f4:04:28:61:8a:20:f3:e2:
         d8:68:d3:f8:f3:c3:8b:6e:03:72:58:89:37:ac:c8:ba:2a:4c:
         57:4b:f2:42:8d:3b:7a:4d:62:a3:75:bf:1c:a3:67:7d:0a:18:
         20:17:ec:86:53:8b:5c:55:36:4f:c2:34:99:2d:34:12:e7:10:
         06:9f:a7:12:49:cc:ee:a1:88:a0:e1:f7:77:43:0f:5d:0a:88:
         1d:b4:35:71:ff:3d:a9:9f:16:b5:0e:bd:a4:96:fd:4e:a3:bd:
         7b:ce:d1:1b:d1:28:b2:05:a9:85:46:bf:95:80:db:9d:ac:05:
         a9:d2:1f:d8:69:65:ce:2c:6d:ef:af:28:80:0b:63:fd:60:17:
         ab:ec:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:23 2026 by rpki-client