Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File:                     0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier:          gTvSPYnsjspVkbZ8BFDTqZ77ITXlva3ziTCpCr8PfpM=
Subject key identifier:   CE:0A:51:1F:1F:54:FB:90:89:0B:0D:D4:1A:00:A6:04:C2:17:C2:46
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       019CE5FF4DE6EDE84C9A973787D5D48D5A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number:          0435
Signing time:             Fri 13 Mar 2026 07:00:39 +0000
Manifest this update:     Fri 13 Mar 2026 07:00:39 +0000
Manifest next update:     Sat 14 Mar 2026 07:00:39 +0000
Files and hashes:         1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: My/6bCfN3icV1BwsBW0kMz5SbcYqATxugXk+l0N8hgY=)
                          2: FwyHYSFHDsnHe13-teMRd2Fwsok.roa (hash: HzeLlPvVaerPbRc2Uu0sKiJSiZNPtG93MnAwRwanKNY=)
                          3: NrghsoBul7tbolTWF8ZamRT2aQc.roa (hash: hJwEiMp115u5I16JHTrfollMknUTcgmFLYKBs/fIj04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:ff:4d:e6:ed:e8:4c:9a:97:37:87:d5:d4:8d:5a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: Mar 13 07:00:39 2026 GMT
            Not After : Mar 14 07:00:39 2026 GMT
        Subject: CN=ce0a511f1f54fb90890b0dd41a00a604c217c246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:26:a8:0c:22:0d:aa:58:c4:8f:19:f3:5f:85:
                    cb:59:00:65:62:cb:97:1c:39:48:3d:34:13:84:fe:
                    92:3c:82:6d:1e:4d:e5:cb:dc:fa:8f:12:72:33:e9:
                    76:30:32:48:8b:c4:40:01:b3:8f:6f:ac:f4:99:63:
                    2a:36:05:1b:39:65:1d:2d:2d:6d:5b:6d:2b:9f:71:
                    06:ed:f0:0d:a7:a9:c8:e3:52:70:66:67:71:bc:34:
                    b8:15:a2:1d:43:e5:a1:a7:37:b9:3b:72:d9:1f:fb:
                    8c:f5:ba:cb:b2:29:8c:a5:39:24:59:d0:d9:a7:c2:
                    0f:45:a2:0e:14:7c:ce:14:04:57:7f:c8:37:d3:8a:
                    85:79:69:4c:23:29:f8:63:6b:42:4b:d4:9b:3f:9c:
                    aa:69:36:29:c5:84:80:6d:bf:59:4b:04:3c:35:ae:
                    2d:8d:d2:b7:ce:c0:eb:30:32:c2:f1:64:98:5a:02:
                    8b:f3:f2:2f:fb:d4:69:28:d1:a6:b8:e1:56:5c:06:
                    38:f1:25:cb:ef:96:a2:c5:ca:54:48:26:9d:87:71:
                    df:5a:ac:f4:5c:38:3d:5c:3a:c3:7c:be:fd:61:75:
                    b9:0e:c0:f1:aa:39:7b:ac:71:68:cc:8b:27:91:e3:
                    98:81:b3:cb:51:26:f4:7e:a9:64:05:0b:d7:fc:4e:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0A:51:1F:1F:54:FB:90:89:0B:0D:D4:1A:00:A6:04:C2:17:C2:46
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:14:92:ce:fd:8b:a2:7c:bf:57:5f:69:3d:de:34:1e:af:e1:
         96:de:02:65:5a:a6:56:1d:f0:ae:68:c3:48:1f:03:b7:47:4a:
         7a:d8:29:d1:fe:2d:6c:af:1b:e9:94:d7:a1:07:62:74:07:0f:
         58:d9:9f:1e:36:af:71:29:1d:92:fd:82:e4:8e:f2:46:f2:d4:
         da:42:a6:94:0e:0e:9d:20:60:86:9c:5a:08:ec:62:d3:ab:9f:
         59:7b:7f:a6:03:75:c5:63:13:90:fc:0c:73:c9:b2:49:4d:30:
         29:a9:bf:e7:4e:85:69:2c:00:5d:15:ce:ef:34:99:67:7a:38:
         7d:05:c1:69:52:dc:2b:05:20:d6:4a:2c:67:2e:12:92:24:d3:
         2c:92:58:a0:34:ce:a8:07:06:53:82:5f:09:d1:34:0c:a3:94:
         41:84:1a:94:11:30:21:96:a1:f8:c0:ed:0d:20:63:43:eb:82:
         98:ee:eb:32:14:fe:06:96:2c:ed:0f:48:fb:4d:f7:c2:82:c2:
         e7:77:97:85:9e:9a:5a:f2:0d:b4:b6:73:b1:f6:db:97:30:e1:
         06:7a:b7:bf:97:72:04:d7:07:56:45:7a:53:fd:53:74:84:92:
         28:1c:1b:60:fc:2b:7b:31:53:4b:af:4e:6e:42:db:d7:f1:94:
         e5:d2:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:35 2026 by rpki-client