Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
File:                     SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft (raw, json)
Hash identifier:          rKWeRCof+cJuEWHAgTmEN0mbSAeDOhSSmKI5EO34vF4=
Subject key identifier:   CB:09:63:3C:3C:E0:22:A2:58:A0:46:AC:39:19:2E:89:A1:01:92:47
Authority key identifier: 48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63
Certificate issuer:       /CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
Certificate serial:       019D39E5FA2C25F6EE2363011EFDB7073F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
Manifest number:          0301
Signing time:             Sun 29 Mar 2026 14:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 14:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 14:01:06 +0000
Files and hashes:         1: QvVVhK4SLUURXLWzSlCSQnsxU_0.roa (hash: bCJLMO2d2KsUAtIgwfRpTRpXl2cSUUuH6iW/kjGwb6A=)
                          2: SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl (hash: IkL4MMIGm0ZrU8FnQh3Dyo05b4Od3JNNoxKflOiEYTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:fa:2c:25:f6:ee:23:63:01:1e:fd:b7:07:3f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
        Validity
            Not Before: Mar 29 14:01:06 2026 GMT
            Not After : Mar 30 14:01:06 2026 GMT
        Subject: CN=cb09633c3ce022a258a046ac39192e89a1019247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:03:90:17:14:63:9e:53:e6:ac:32:25:b6:
                    9a:93:7a:f2:9a:bc:99:43:f3:b9:75:a7:e3:c9:8a:
                    6b:15:c6:c6:91:c7:55:0e:4a:b7:58:79:90:bd:4e:
                    41:37:f4:a9:65:92:4e:7e:c6:35:be:71:98:f2:c9:
                    d6:f4:00:67:d8:ef:2d:9d:d2:df:31:12:76:a2:2f:
                    a2:ec:5c:e1:1a:7d:0e:5a:55:e5:a2:3a:6c:5b:fd:
                    d5:28:d2:ac:48:8a:43:53:15:12:ce:e6:44:35:10:
                    f0:9f:1d:f2:83:27:06:a1:54:00:82:ca:36:0c:1d:
                    13:d4:d8:b2:b9:78:c3:03:3d:04:cb:9c:3e:3f:81:
                    aa:8a:96:2e:cf:87:88:a5:bf:d4:8a:c5:41:c3:07:
                    8b:11:3d:4f:7b:da:5b:95:9b:bb:b2:c8:d0:a6:97:
                    cb:20:ab:cc:29:fd:c8:a3:7c:09:f0:e9:bc:e9:75:
                    fd:b8:7b:2d:93:8d:26:e7:7c:f2:4a:91:73:29:b5:
                    61:77:b4:11:2b:c6:84:c2:92:a9:8f:b7:79:5b:ff:
                    6e:13:e3:b5:f7:08:ef:84:9b:6d:9d:ad:80:5c:c6:
                    34:db:ad:11:6c:ba:3c:61:6a:f0:2f:91:5e:91:94:
                    61:52:6e:7a:53:7f:18:45:4f:17:80:63:98:f0:8a:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:09:63:3C:3C:E0:22:A2:58:A0:46:AC:39:19:2E:89:A1:01:92:47
            X509v3 Authority Key Identifier:
                keyid:48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4a:12:e0:5b:6e:64:ac:83:df:eb:9c:65:53:3d:36:4c:82:
         5d:30:97:9e:23:ab:80:c7:f8:7c:0d:ad:0b:c3:30:a2:ec:d6:
         eb:28:3f:b9:e1:79:e1:f9:d2:d3:03:9b:a1:2e:56:f3:ea:13:
         3f:79:62:5f:72:1b:6d:08:22:f7:db:44:19:51:c8:4b:21:e8:
         0f:5d:06:0a:ea:a2:f4:35:c8:db:00:07:6d:36:7f:b2:f3:fb:
         73:58:79:a3:7a:7d:98:ef:8e:1f:9a:bd:23:5f:19:b0:45:ab:
         2e:97:1b:11:1f:0c:81:b1:78:ef:3a:03:e5:b2:06:94:36:8e:
         4b:84:f9:ed:5f:a6:dd:89:92:e1:6b:c9:de:ec:25:9f:65:5e:
         de:2f:b6:4d:49:a8:53:29:10:ee:6a:36:ed:58:f0:88:3a:40:
         2f:21:0c:36:1e:d8:86:91:7a:53:d1:9b:a9:5a:a8:d2:46:56:
         91:aa:1c:2b:f2:12:3c:8f:fb:d2:ec:e0:2a:17:94:44:72:52:
         a8:60:38:00:fd:b1:7c:58:82:51:14:91:56:a7:1b:a0:93:76:
         e6:e3:e5:94:ab:ce:37:91:8b:6d:17:5c:c7:62:ed:b2:18:68:
         07:7f:53:7e:83:61:1d:51:0e:a1:cd:b5:6e:5b:c8:bb:79:aa:
         f2:b7:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:56 2026 by rpki-client