Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File:                     s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier:          bVembXgvy+t2hmVQPiyTta9ll5Y4Vy1GmVvZe/BYBn4=
Subject key identifier:   6F:AB:60:71:9F:2F:F4:BD:AC:70:20:AA:EB:C9:B9:F2:B5:56:AC:4D
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer:       /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial:       019CF3847C2A012FC172E65F6270DB9047DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number:          1880
Signing time:             Sun 15 Mar 2026 22:01:11 +0000
Manifest this update:     Sun 15 Mar 2026 22:01:11 +0000
Manifest next update:     Mon 16 Mar 2026 22:01:11 +0000
Files and hashes:         1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
                          2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
                          3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: DukQi7CcMRU44Hw8RAKwCZZr3n7t4OicU86JTjeduao=)
                          4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:84:7c:2a:01:2f:c1:72:e6:5f:62:70:db:90:47:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
        Validity
            Not Before: Mar 15 22:01:11 2026 GMT
            Not After : Mar 16 22:01:11 2026 GMT
        Subject: CN=6fab60719f2ff4bdac7020aaebc9b9f2b556ac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:9c:30:39:29:17:e9:d1:4a:65:fc:8e:98:
                    66:3a:d0:99:88:a8:e9:e0:71:9a:e5:42:11:b9:28:
                    24:81:dd:b4:1d:da:8d:fb:5a:50:4b:b5:03:23:e2:
                    cd:b9:3e:09:20:29:47:9d:46:16:a7:bc:94:33:2a:
                    e7:1f:2f:e1:f0:71:de:c6:1b:9f:77:40:33:f0:a6:
                    e2:f1:13:d1:24:c8:24:0d:0e:ef:13:22:5e:3e:0d:
                    76:10:b5:a5:9a:69:a4:49:49:52:b0:9f:31:37:82:
                    b0:b8:d2:a2:a2:7c:7c:d2:19:b2:c4:17:a1:7c:67:
                    46:44:56:25:f0:9f:ba:4e:d7:a2:be:57:f2:58:2d:
                    fc:a6:0b:7a:e9:32:4b:4c:dd:0f:0a:9b:19:24:51:
                    ee:fb:c7:2b:9a:3f:8d:34:57:1b:b2:f4:94:9b:62:
                    56:b5:5f:2e:9a:72:b0:34:41:f8:95:5f:a5:ef:ac:
                    9f:d9:6b:f8:7b:36:f3:cd:05:25:4d:9f:35:42:5f:
                    cf:da:12:7d:9c:61:50:30:ef:6e:93:17:5c:63:20:
                    20:d1:60:9b:91:49:40:22:ab:ae:96:73:92:9a:d6:
                    32:09:85:79:9c:96:31:95:ae:3c:26:ff:04:6e:72:
                    cd:19:31:ed:bc:3c:a8:43:dd:45:9c:14:cb:12:21:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AB:60:71:9F:2F:F4:BD:AC:70:20:AA:EB:C9:B9:F2:B5:56:AC:4D
            X509v3 Authority Key Identifier:
                keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:0a:cc:12:c3:c3:1a:d6:e8:60:f7:62:4d:01:83:b1:e2:
         10:c5:c8:91:97:59:03:c1:90:5b:3c:e5:87:f9:c8:9a:87:96:
         12:a9:79:a4:f5:81:d5:0a:93:0a:5c:bf:60:74:ea:09:f0:86:
         c9:94:86:ef:61:91:72:c2:6a:fd:34:69:2d:dd:19:5e:f6:2f:
         31:d4:7e:67:aa:24:b1:25:cf:11:84:6a:a4:42:9c:29:96:00:
         39:d8:67:3f:64:f9:e0:aa:0f:04:8b:34:d1:6b:ee:54:68:f8:
         34:a3:0a:c5:e0:1e:d5:ad:da:cb:af:5d:b2:f8:57:ae:c7:b3:
         41:94:26:a4:dd:10:6d:c9:2c:b5:dd:0c:fd:24:67:0d:f2:d4:
         86:0c:e5:bd:08:c3:f2:ac:97:64:5d:5f:38:3f:89:b4:d3:f6:
         d5:53:3e:4d:26:05:84:1f:7d:55:f7:d9:06:d0:6f:6f:bc:ec:
         41:21:af:cf:0e:87:b6:69:e8:09:5d:66:e4:ec:e5:2f:14:6f:
         c6:38:5f:fa:f8:f3:d1:5c:47:bc:ee:7b:50:54:86:16:1a:5d:
         ad:db:6d:f0:90:1b:07:dd:cf:f0:6b:16:3e:e7:85:dc:79:cc:
         f1:e9:bd:9f:e8:5e:14:7e:38:d8:52:51:e8:1f:c5:06:8c:27:
         d7:79:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:21:35 2026 by rpki-client