Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File:                     tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier:          K0Q4+LMVzfwUgBhClI/X6sAx2niPdAVL/hTmlh5WN0A=
Subject key identifier:   A4:25:EC:05:6B:3F:3D:A2:72:2F:E9:9D:55:5F:8D:3F:EF:6C:4A:B6
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer:       /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial:       019CBDA816D45B0560383099883E13F397F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number:          31
Signing time:             Thu 05 Mar 2026 11:00:35 +0000
Manifest this update:     Thu 05 Mar 2026 11:00:35 +0000
Manifest next update:     Fri 06 Mar 2026 11:00:35 +0000
Files and hashes:         1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
                          2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
                          3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
                          4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
                          5: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
                          6: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: J3MgQHMEiadv0Bt412UD0fehP6lnO9Gr+gve+JWJu/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bd:a8:16:d4:5b:05:60:38:30:99:88:3e:13:f3:97:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
        Validity
            Not Before: Mar  5 11:00:35 2026 GMT
            Not After : Mar  6 11:00:35 2026 GMT
        Subject: CN=a425ec056b3f3da2722fe99d555f8d3fef6c4ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:ac:61:21:dc:20:53:44:f2:9e:d7:e2:ba:
                    19:ca:fc:e9:84:9b:66:38:50:ef:98:fb:da:55:ce:
                    e1:dc:83:b7:70:9f:17:6e:6c:26:c3:83:c1:9e:66:
                    78:c0:3a:3c:71:4e:dc:c0:20:c5:4d:b6:2f:5d:5e:
                    69:df:87:f8:44:63:0f:ea:80:59:4b:ba:b5:0e:1d:
                    33:14:86:35:f9:d4:9e:59:49:e9:f6:86:56:09:4a:
                    c8:15:09:b4:4a:f1:d7:d5:08:04:ca:d2:88:f2:20:
                    aa:47:0a:c3:a5:86:ac:1e:e5:81:8e:bd:7e:2a:64:
                    1c:ad:86:e9:dc:85:3e:38:ad:1b:e2:f0:3f:4a:3d:
                    ce:7d:80:32:13:0a:47:9c:18:39:36:54:a9:2b:6a:
                    d9:91:00:ac:34:63:27:80:9b:5a:4d:6c:1b:2f:a4:
                    df:17:2d:8b:3f:5c:19:5f:f9:85:f5:18:6c:4d:5d:
                    08:cf:ed:0e:a6:b7:fa:a0:cf:9a:bf:4d:b9:72:c6:
                    48:08:b4:1e:97:9f:80:9e:a9:f2:bd:4e:79:1b:ca:
                    5a:36:bc:5c:f7:be:b2:60:26:9a:fb:ed:b0:a5:40:
                    d9:df:91:52:21:28:61:d1:13:36:e4:c4:9f:91:fe:
                    34:91:e7:6b:00:32:c6:cb:af:16:db:2a:6c:eb:d3:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:EC:05:6B:3F:3D:A2:72:2F:E9:9D:55:5F:8D:3F:EF:6C:4A:B6
            X509v3 Authority Key Identifier:
                keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:2a:2a:44:fb:e9:45:fa:83:08:73:1b:68:29:27:a0:fd:
         34:dd:b3:82:4e:6e:64:a3:1e:4c:4a:b4:82:9e:f7:53:bc:48:
         e5:85:a3:24:5d:bd:55:4e:44:de:4c:7f:4e:18:3a:4c:43:be:
         97:bd:f1:a7:da:8b:14:93:ea:fe:e0:f0:74:1c:82:8d:85:cb:
         14:ec:a9:bb:fd:47:6f:ec:57:30:48:6d:99:07:52:bd:ec:75:
         74:61:cd:05:26:d9:4b:92:03:f0:21:ca:2c:b0:e4:a4:9b:5c:
         7d:81:84:2c:b5:2e:b1:e1:7b:67:d5:48:6e:36:43:6f:3b:17:
         14:00:69:f0:af:d1:7a:6e:14:e1:8a:17:56:f5:9b:13:c8:c3:
         ac:14:4e:b1:5b:af:24:2f:88:86:5f:ca:e1:06:3e:66:52:0a:
         82:c5:1c:17:51:1d:74:93:e9:ba:5e:fc:b1:b7:68:0a:1a:44:
         43:9e:fd:b8:84:21:87:a8:03:bd:13:52:9f:0f:ef:0c:1a:59:
         05:e6:1e:c2:b0:c8:03:25:9f:cb:d4:fd:78:72:57:38:6d:f3:
         42:d4:00:d8:b1:c0:4d:b9:b0:42:48:85:92:53:2a:52:e3:66:
         21:d5:5c:d7:ef:44:e1:33:8a:75:5e:43:42:b1:5a:eb:1b:b3:
         b0:bd:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 15:49:38 2026 by rpki-client