Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          RIH9ZCdvRzbcPp69xAkcMN/Hpj6Uu/ocoWs9sqS+gNE=
Subject key identifier:   4A:D7:4E:69:77:9E:62:25:C5:1C:75:E0:C9:2B:84:F9:94:0C:38:29
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019D3977B2C795E9158BCB91C6BB6E3ADEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 12:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:38 +0000
Files and hashes:         1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: eczizYWstHHQmwSkpC04OI7bFdYeBb5FICIjXxznSs0=)
                          3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
                          4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
                          5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
                          6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
                          7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:b2:c7:95:e9:15:8b:cb:91:c6:bb:6e:3a:de:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Mar 29 12:00:38 2026 GMT
            Not After : Mar 30 12:00:38 2026 GMT
        Subject: CN=4ad74e69779e6225c51c75e0c92b84f9940c3829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a8:dc:af:fc:ad:0a:8d:23:6d:e1:71:c8:b9:
                    d7:87:2d:d6:a0:fc:eb:94:40:9e:fa:c1:38:19:3e:
                    d4:c7:80:28:30:30:b7:b7:3b:d0:68:5c:39:b3:6a:
                    59:ef:08:93:52:a4:96:e1:89:7f:f2:31:ca:3c:42:
                    5c:e8:06:ac:b1:a5:78:b1:97:a4:43:24:cf:be:6d:
                    5b:45:90:5f:b7:c2:5c:f4:46:39:19:b8:60:11:6e:
                    7c:6f:67:7d:b4:14:27:27:95:c3:92:9f:0b:ea:87:
                    c5:64:ec:68:69:5e:01:72:26:67:c3:c8:ca:16:4b:
                    5b:1a:cb:7e:7e:35:96:1e:69:2e:9e:dc:fb:f9:cd:
                    d5:f8:61:ab:f0:00:5d:79:fc:af:cf:b3:0f:2c:da:
                    92:62:57:46:64:26:98:fa:9a:f5:d4:2e:45:ce:f4:
                    40:3f:fb:0b:30:be:ab:f6:94:d2:df:93:a4:9a:b1:
                    3b:8b:1e:5b:87:7d:f8:80:1c:6c:38:b6:aa:71:8d:
                    92:4a:6f:f3:68:bd:84:80:a7:61:6f:0f:63:28:f8:
                    e5:82:6c:e0:df:b1:f3:3a:5b:2c:e3:ff:bd:ee:0e:
                    4f:c1:82:15:62:6b:d6:69:79:cf:a0:4b:cc:6a:73:
                    6e:08:26:9e:6d:97:ca:98:bb:c1:bf:13:67:94:da:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:4E:69:77:9E:62:25:C5:1C:75:E0:C9:2B:84:F9:94:0C:38:29
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e4:41:a1:92:ab:27:9a:07:8c:e2:c4:fe:5d:3d:99:db:0e:
         e8:00:88:1d:bc:31:57:71:41:f0:8f:25:2f:d9:ba:46:76:e1:
         2d:93:4f:81:8a:fc:68:1e:c8:14:fe:76:5a:79:d4:d1:97:57:
         99:99:7b:e5:f3:c2:24:98:ce:7b:8b:5f:2b:1f:2d:66:64:22:
         30:75:c5:2a:61:50:20:42:26:70:eb:4f:86:40:5c:1e:38:c2:
         ba:e2:ac:3e:65:96:0b:8a:f5:6f:f5:65:6b:4f:88:05:09:8c:
         d8:d9:6d:ed:28:a2:86:4f:89:6b:99:c5:bc:4a:dd:09:f9:4a:
         a1:18:5c:75:15:9f:46:b5:9a:82:91:37:fb:b8:05:eb:93:e3:
         2a:96:fe:d6:68:de:dd:4f:e4:fb:9c:b8:28:34:12:f8:eb:d3:
         90:cf:91:5b:f4:77:01:a4:0b:48:d5:1b:e7:dd:98:f4:b8:d3:
         c0:93:a8:27:6c:47:0d:05:72:98:d7:e3:ae:d2:41:99:97:4c:
         3a:50:0e:bb:5f:5c:0e:57:62:3e:ac:b8:4a:5d:24:7e:f3:ca:
         2f:48:8b:0f:c6:36:66:0f:2c:ed:de:1b:95:72:3f:3e:00:3c:
         89:02:d7:28:e8:49:ae:1e:65:18:d7:63:0d:d1:63:f4:52:22:
         f4:14:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:17 2026 by rpki-client