Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          iiEabhN9tOE51Vfw2QPjUxr2PM0Tk6wfWYSa0ASu4C8=
Subject key identifier:   5E:91:1E:F1:C9:1F:3D:4F:A1:4D:2D:90:2A:46:68:CB:BB:5F:C3:3F
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019D051CEFCCF58A7ED05857404F31B9C0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          1877
Signing time:             Thu 19 Mar 2026 08:01:15 +0000
Manifest this update:     Thu 19 Mar 2026 08:01:15 +0000
Manifest next update:     Fri 20 Mar 2026 08:01:15 +0000
Files and hashes:         1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=)
                          2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=)
                          3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: eV2dXgR2sFSCNQGjxu9PbdO3Fd1ZJABeMQROGPVVfzg=)
                          5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:1c:ef:cc:f5:8a:7e:d0:58:57:40:4f:31:b9:c0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Mar 19 08:01:15 2026 GMT
            Not After : Mar 20 08:01:15 2026 GMT
        Subject: CN=5e911ef1c91f3d4fa14d2d902a4668cbbb5fc33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:a3:f1:5b:57:70:4e:5e:6f:04:16:3e:3e:
                    82:62:74:11:3e:48:36:97:ee:ba:69:ff:85:5a:a8:
                    be:a7:50:37:4c:d7:3a:4f:62:09:71:c3:69:47:64:
                    2c:5f:b8:2b:8e:c6:43:13:16:62:a9:00:70:e9:34:
                    75:24:13:66:d2:f3:2e:0c:7b:40:67:83:86:7e:ca:
                    a6:56:69:fd:73:17:1a:f6:97:3c:3f:82:ea:9c:9b:
                    c8:86:df:31:dc:4b:f9:e3:53:1d:c9:7e:20:e6:90:
                    b6:83:32:a1:36:fb:6f:c9:ef:aa:c9:1f:ba:e7:98:
                    1a:5d:96:3f:ab:02:09:eb:d6:4e:ae:ca:48:c9:85:
                    ad:b6:4f:4b:2f:84:6a:10:82:b7:f1:c9:c4:88:f3:
                    8e:78:9d:41:5f:f1:d0:27:ff:e8:a8:a5:b2:3d:78:
                    59:eb:0a:5b:29:cd:5b:f3:59:6f:a9:72:cf:e2:ed:
                    6e:22:cb:ae:79:53:2a:97:fa:92:08:f1:52:1d:d8:
                    f5:2a:3f:ed:02:52:13:9e:f7:48:98:ec:82:45:3d:
                    3d:31:cb:73:09:3d:d0:1d:d9:72:cf:ad:a6:df:f2:
                    0c:7f:ab:69:f1:3a:9c:c9:bc:bf:ca:f2:1c:84:83:
                    d3:74:35:95:eb:98:38:39:08:29:b9:d7:61:9d:27:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:91:1E:F1:C9:1F:3D:4F:A1:4D:2D:90:2A:46:68:CB:BB:5F:C3:3F
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:24:9a:7e:3a:3c:ac:ed:09:18:a0:2d:ea:6f:db:6e:73:
         1d:6d:a9:f5:ec:87:b0:11:ca:c1:22:33:4b:94:66:8f:36:fd:
         67:f7:66:de:34:d4:f9:5e:42:c9:b8:4e:0e:39:67:93:3f:9b:
         d6:68:c5:87:0a:79:28:3e:ba:3c:6b:3f:62:18:22:20:91:72:
         b1:f9:91:f4:07:eb:6e:83:e6:fd:04:4a:55:c1:21:69:06:71:
         70:ce:0f:85:9d:02:72:63:9a:2d:53:c8:00:4e:b7:a4:72:fa:
         f8:b2:76:74:d6:6f:fe:08:50:87:4d:c9:af:ba:b2:27:f7:73:
         86:ef:97:0d:06:8d:c0:a9:84:b9:a2:4f:e2:75:6a:5f:4f:da:
         1b:6d:6c:50:a0:78:94:0e:1c:c4:97:ec:ae:37:cc:f6:c5:6e:
         94:15:63:d3:bb:a7:7b:1d:fc:e7:87:f0:dd:43:e2:1a:68:de:
         aa:92:b6:27:a1:99:07:4e:a4:98:3a:c7:4a:b3:d1:f5:22:fd:
         99:f3:61:e9:dc:fa:4f:d6:6d:cc:63:21:f4:22:c0:f4:fe:93:
         1a:df:92:62:51:8f:7d:b7:b2:50:c7:14:1d:64:4f:b3:6e:a6:
         6c:f7:1f:bc:92:c8:19:aa:0c:4e:c0:8e:e0:fc:94:3d:02:db:
         e1:4d:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----