Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File:                     bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier:          voINfBVAexHjXZqAPbZyfg8WKKFEeSbeD/l7jXwoZeU=
Subject key identifier:   AE:20:92:B5:82:F3:6F:68:6A:BE:5F:5A:F8:DE:34:5C:91:F3:6B:50
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer:       /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial:       019D37C0EEF8B774A6BE30349F48DA790132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:01:24 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:24 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:24 +0000
Files and hashes:         1: 14WxdiCVm4rnXK9-tDL_PXH0l8E.roa (hash: hqaflv4B62LQIs49QinUGmrt4sGWk2w+n2txj5z2H8I=)
                          2: 8QavD1xGOGIsFORO8QpTl9ze2qk.roa (hash: CP8EcYyC8MJCP4Qe6fiDSKdEQwvcsEiCEc0QZK7hpC4=)
                          3: LaR2tR9VELkIqYB1KayofzhugrQ.roa (hash: IhBsr0UP82ELR6sQ5NhU1p2TkFx8sUm8QDTn1ahLei0=)
                          4: _NPYi_tgDVixqRihfPCnzEyteiA.roa (hash: a/DOqggraEPPchKDiC0Upq/MDsgJ2XWYLDm3YdovFlo=)
                          5: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: pkamR9DAi6VAca/3EcZ3Kqv2Xy/aFQ0+brLNBhzBcsg=)
                          6: wswbiWhFN53OcrlAurii4-C90OY.roa (hash: FaPWRVidTojhM8z9Dp/5f4Ru4RTG3RuxDK7oQeJK2nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:ee:f8:b7:74:a6:be:30:34:9f:48:da:79:01:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
        Validity
            Not Before: Mar 29 04:01:24 2026 GMT
            Not After : Mar 30 04:01:24 2026 GMT
        Subject: CN=ae2092b582f36f686abe5f5af8de345c91f36b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:d5:15:ff:1c:09:03:ef:17:72:c9:79:74:
                    00:12:a5:ed:e2:a5:e9:a3:46:fe:43:9c:ae:7e:03:
                    7e:95:2d:d9:88:c5:18:2a:b1:93:43:28:b3:71:6a:
                    cb:ef:19:5b:a0:9e:42:91:71:9a:a9:06:22:f7:d0:
                    14:23:16:f6:e9:22:00:9d:ea:b9:1f:17:7a:7a:bf:
                    66:ff:d1:13:ba:2b:6b:b6:7a:82:a4:0e:14:41:1b:
                    78:de:57:59:95:c7:16:9c:9a:c6:bd:e0:9f:54:41:
                    f8:d7:d3:2d:dc:a9:d7:a8:f4:1d:80:4a:8b:1e:18:
                    14:0f:a4:13:f1:62:cd:9f:2e:18:5e:93:85:24:b9:
                    69:9f:ea:ce:91:df:41:36:53:b9:f2:f8:00:7f:67:
                    b5:8f:23:dd:3e:f7:f8:58:55:1c:59:e5:a2:d2:33:
                    1f:ad:e1:b5:64:2e:18:dd:c8:68:16:4a:d6:f1:10:
                    03:79:ee:d7:0e:06:b2:12:4e:8c:6b:dd:2b:13:46:
                    37:cb:cf:d3:83:cd:1e:db:31:36:62:fc:2a:c3:0d:
                    17:28:a7:b3:8b:9e:02:0a:e4:4a:09:e0:9e:e0:ff:
                    c4:68:51:52:76:5d:f4:a7:a0:0f:67:1d:3b:f2:e9:
                    83:79:32:49:13:c2:90:33:f6:0d:5d:71:95:71:37:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:92:B5:82:F3:6F:68:6A:BE:5F:5A:F8:DE:34:5C:91:F3:6B:50
            X509v3 Authority Key Identifier:
                keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d0:3a:be:01:14:90:83:89:05:d3:89:79:34:67:c9:87:2a:
         f0:cf:1d:7a:9c:d3:a3:1f:72:d9:99:5e:33:82:92:36:ce:d6:
         57:23:be:2a:3c:42:a3:bf:f4:3a:93:1e:6b:2b:7d:46:c7:fe:
         77:95:eb:25:3d:97:1d:ab:5b:84:6c:68:6e:16:d4:0c:da:1e:
         8d:5b:cc:74:4b:d6:7d:4b:20:45:65:53:c4:f9:14:56:7a:6e:
         35:01:cb:9d:d4:33:3c:36:76:51:6a:28:c2:6a:a4:a8:a8:92:
         b1:90:37:e5:1c:66:3c:df:f6:4e:16:f3:e9:8e:33:c8:6f:17:
         5b:cd:89:eb:34:20:66:2c:39:69:cc:0a:6b:47:8a:14:4e:89:
         22:ac:f8:3d:d3:61:7b:7b:16:e8:8a:e7:aa:e2:f3:34:f5:95:
         31:d2:c2:1f:8c:7a:22:59:ac:44:5d:a5:67:06:3c:d0:0e:e3:
         70:1d:fe:5f:51:d0:af:90:a9:21:1b:ef:bb:e2:8f:2a:48:77:
         3a:68:b0:c5:72:ef:bc:87:f1:30:2d:f8:ba:b2:60:1a:e3:dd:
         1d:b2:ca:b6:c8:66:d6:43:6e:cd:ad:4e:44:5e:02:7e:63:a4:
         2d:63:00:ef:37:8d:86:68:a8:19:ac:34:31:05:e7:d0:2e:9f:
         54:d9:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:04 2026 by rpki-client