Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File:                     SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier:          i+tK+Fq5dM5jc4N+nbSFsR3N8LupgoLyjbY9w1lnTdY=
Subject key identifier:   B7:EA:10:BE:B9:36:1D:A8:96:AD:48:D8:19:C7:A6:FF:9A:EE:78:44
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer:       /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial:       019CED8274C58CC67E400C779B0DAE372B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number:          A0
Signing time:             Sat 14 Mar 2026 18:01:15 +0000
Manifest this update:     Sat 14 Mar 2026 18:01:15 +0000
Manifest next update:     Sun 15 Mar 2026 18:01:15 +0000
Files and hashes:         1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
                          2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: /gUUqbYWI1kKTnAZo5xewV6wkCgi01DKaBz0wl6HOPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ed:82:74:c5:8c:c6:7e:40:0c:77:9b:0d:ae:37:2b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
        Validity
            Not Before: Mar 14 18:01:15 2026 GMT
            Not After : Mar 15 18:01:15 2026 GMT
        Subject: CN=b7ea10beb9361da896ad48d819c7a6ff9aee7844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:20:2d:c6:37:e6:f7:b4:24:1e:61:1e:20:
                    07:da:43:d4:db:55:91:96:36:84:13:48:a7:50:1d:
                    f8:ea:d0:f8:e6:af:a0:b2:2d:2e:65:90:5a:59:32:
                    f1:bf:75:5f:d9:56:07:43:b3:be:55:01:37:8b:b7:
                    71:b3:3b:d7:f6:06:25:ce:20:42:63:c1:5d:fb:94:
                    53:c4:5a:b3:7d:88:fe:e2:99:68:ac:69:2c:7c:9c:
                    fa:3b:de:3c:9f:20:53:a4:bb:1b:fd:13:e8:ab:83:
                    3c:3b:d5:66:b8:01:07:58:2b:e3:cb:1d:91:ae:39:
                    11:cc:e8:89:d1:79:2b:5a:3b:5c:0f:3e:3f:1a:b6:
                    8e:6e:57:ac:3b:d9:b5:da:53:10:08:44:8e:c6:b2:
                    76:47:dc:ed:09:77:4c:f3:c7:9b:37:ca:7b:22:54:
                    ce:78:a4:e0:3b:99:a8:a5:5a:e4:67:68:50:39:fd:
                    2e:33:7c:40:07:89:56:26:95:79:07:b4:86:27:5e:
                    8a:1f:51:42:25:81:eb:34:ad:43:8e:23:bf:b6:1b:
                    40:f6:31:83:23:b4:d7:12:4d:b5:61:03:1e:ce:35:
                    9c:17:bf:fb:31:e5:51:c9:9c:7b:85:8a:dd:4f:6d:
                    8f:c7:48:6b:9b:bb:0f:60:f3:84:03:bc:00:de:80:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:10:BE:B9:36:1D:A8:96:AD:48:D8:19:C7:A6:FF:9A:EE:78:44
            X509v3 Authority Key Identifier:
                keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:3a:7d:51:18:84:ee:a5:96:cd:99:3c:89:2b:56:2a:16:
         47:5d:a8:34:64:c2:be:6a:dc:ef:ea:e4:a0:da:f2:6f:14:78:
         38:45:fe:75:7c:19:18:91:6b:32:4b:b0:5e:b5:d0:e2:91:42:
         6d:f5:00:1a:03:9b:52:00:9c:50:e3:5a:8b:0b:1f:c7:bf:5c:
         72:f6:a8:14:65:a0:16:8e:41:81:5a:17:61:1c:ac:bc:e6:5c:
         30:ca:19:71:ff:d2:43:b4:e1:4f:1f:2b:72:0f:c7:e4:ae:ec:
         12:8b:f1:97:8a:a0:8a:e5:b0:9e:d0:10:29:a0:0d:fe:97:14:
         36:5a:9a:7b:9c:77:07:3d:96:d3:27:5d:aa:47:75:35:3d:0b:
         22:40:e4:93:9b:45:a0:2e:d4:85:15:03:f4:3a:65:1c:c1:8e:
         c5:0b:c0:0a:75:b1:a1:98:f2:40:77:42:e3:17:5f:10:7a:0e:
         7e:b5:e3:83:87:5d:bd:a8:1f:57:28:87:b8:99:61:28:cc:53:
         46:05:63:a3:5c:94:03:0f:47:77:dc:37:fe:20:ac:90:21:7c:
         0f:82:67:78:7c:cb:92:a6:a9:00:6c:1c:59:b4:5f:8b:a2:44:
         b8:5d:de:f7:75:aa:e5:9a:39:10:c8:fc:10:62:41:5d:19:df:
         ce:0b:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:41:25 2026 by rpki-client