Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          Ei4wkpIImMPrFkcdEWJhEyxJBv0JerZAjaANEoRQRd8=
Subject key identifier:   A4:12:9B:49:97:33:55:BB:8C:48:BE:D8:46:71:98:E2:EB:08:A2:70
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       019CE636856CE7F1B78F80D61C1B7D2838B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          1867
Signing time:             Fri 13 Mar 2026 08:00:58 +0000
Manifest this update:     Fri 13 Mar 2026 08:00:58 +0000
Manifest next update:     Sat 14 Mar 2026 08:00:58 +0000
Files and hashes:         1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
                          2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
                          3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: q3xgUQ30Cawfl3/75eZE9bS3pVqtsIFc041nbS2+vWE=)
                          4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
                          5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
                          6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:85:6c:e7:f1:b7:8f:80:d6:1c:1b:7d:28:38:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Mar 13 08:00:58 2026 GMT
            Not After : Mar 14 08:00:58 2026 GMT
        Subject: CN=a4129b49973355bb8c48bed8467198e2eb08a270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:52:9b:61:e2:94:f6:98:f2:73:da:0e:0e:
                    76:ba:ef:31:b9:c6:58:37:79:42:00:b3:7b:c9:fd:
                    be:28:89:02:f0:1e:63:15:7e:e7:a7:79:cd:76:25:
                    17:17:99:6b:5b:89:0c:b9:76:47:ef:48:1f:89:45:
                    d1:b9:99:27:1a:96:4d:d1:eb:3a:a8:49:15:13:55:
                    cc:09:59:03:8c:36:62:56:09:09:b2:b5:9d:6e:e3:
                    d6:de:d3:38:05:b1:23:8f:68:f8:dc:28:49:6e:0c:
                    44:fd:82:36:a4:4c:75:cf:88:4c:d2:03:9c:97:5e:
                    9c:51:b5:7f:38:61:d3:d3:8a:68:0c:fd:de:15:a8:
                    e3:d2:a1:0b:3d:ee:82:e7:87:15:9a:49:83:cd:8b:
                    3f:20:69:b4:28:dc:63:7d:4f:3f:89:be:36:32:ee:
                    87:d1:8c:d1:89:23:e7:3a:2e:d2:f0:af:d8:a3:10:
                    42:71:c7:6d:4e:41:cd:0a:b6:ed:52:5a:51:37:53:
                    3b:08:b7:e9:fb:63:52:b5:be:1c:3b:74:25:36:2b:
                    e8:57:11:1a:75:51:ee:ef:04:61:c0:a3:9f:2d:18:
                    4c:82:4c:a1:b3:9c:c7:39:ec:1e:8b:c8:39:f0:2d:
                    af:65:ce:da:c2:fb:cb:d8:d6:73:52:20:a7:37:1e:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:12:9B:49:97:33:55:BB:8C:48:BE:D8:46:71:98:E2:EB:08:A2:70
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c5:8b:b3:13:22:10:2d:6e:13:8a:c7:68:11:50:05:27:bf:
         a2:f6:0f:06:ac:1c:54:c4:fd:cd:51:da:9f:8f:ac:ec:be:7a:
         82:cb:c3:5c:cd:7b:7e:ce:e7:d3:7f:1f:63:20:87:b1:28:dd:
         68:d9:e5:56:ef:a0:7b:b9:ef:14:4e:5f:9b:ed:bd:dd:bb:eb:
         96:10:b1:6c:f8:c9:39:d0:f9:09:21:ba:0d:84:85:66:ab:da:
         71:f1:71:f8:8e:dc:aa:ab:27:82:b2:99:b5:17:eb:1e:9b:3d:
         95:ac:99:db:c9:7e:89:3a:2b:df:7e:2b:27:39:81:a4:d2:65:
         00:73:54:24:82:86:96:af:6c:d5:29:c5:58:dd:d4:90:bf:3f:
         9e:05:3d:57:90:55:2a:e1:7d:ed:b7:6c:51:14:47:cb:46:15:
         ed:ea:41:67:6c:b7:96:0d:20:85:05:ee:9d:99:b9:a7:14:a0:
         8f:91:41:51:7b:cb:7f:ab:3c:e5:ff:1a:a0:e4:65:b1:b5:50:
         a7:c5:78:9b:ca:32:32:33:dd:38:7d:03:fc:73:15:37:33:0f:
         c7:f9:c2:0a:90:1f:22:49:d8:0e:8e:1b:25:77:1b:b9:00:19:
         b2:20:a0:55:a7:e0:40:05:fe:03:85:c0:12:57:b7:0a:5a:9f:
         ab:79:95:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:56 2026 by rpki-client