Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          Z0OqkD05xv58iTWzfp7lxpdKDuZwk7PRp5jj/59KlC8=
Subject key identifier:   5E:6B:3D:F5:7C:43:16:50:C2:CB:6B:7A:62:51:A1:27:44:03:90:14
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       019D37527132E90D33B06CF679CC8A10AC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          1896
Signing time:             Sun 29 Mar 2026 02:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:42 +0000
Files and hashes:         1: 9R0cNh7tpRGDeQddrrwgSyExnk4.roa (hash: PqbwlQKDPSasGMUXgw1wOQWlaHSoiKJ6p6YuOnnchI8=)
                          2: Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa (hash: UYO/NtK9AfbvXNvm3O/IQCzfg04aFD89bh7YW2P92Vk=)
                          3: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: zO6SAv+bd3lwLST2PSHw+WIiqyL8ib3K8d9VTkNicQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:71:32:e9:0d:33:b0:6c:f6:79:cc:8a:10:ac:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Mar 29 02:00:42 2026 GMT
            Not After : Mar 30 02:00:42 2026 GMT
        Subject: CN=5e6b3df57c431650c2cb6b7a6251a12744039014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:b8:65:93:36:89:01:ad:89:2c:c9:67:52:
                    a2:58:8b:a9:66:de:33:dd:95:b2:e1:98:53:9a:de:
                    c3:f8:55:1a:3e:9f:f7:8a:48:45:fc:2b:10:37:87:
                    5a:af:c5:25:10:d1:ec:94:b2:fb:71:9b:fd:15:e6:
                    23:65:f1:35:6f:73:c5:20:ce:c2:c2:e8:0a:d6:a9:
                    48:e5:43:67:df:7c:31:61:bb:3f:a7:ed:fb:a1:ed:
                    b7:f5:b4:5e:8f:ca:97:e8:51:0f:79:21:a6:0a:8c:
                    76:bb:b4:53:7e:79:5d:20:70:99:87:e5:52:e1:00:
                    a9:3c:c9:73:d3:53:6a:62:f6:ab:4f:5e:1d:f7:aa:
                    73:c0:7b:9c:75:56:6f:78:aa:ff:6a:db:59:8e:f7:
                    c7:af:fd:ac:54:b5:04:d2:cf:33:09:c3:e0:dc:70:
                    01:e6:f8:71:f8:4e:2c:5b:a5:bc:65:ab:0e:0c:36:
                    e7:38:8b:9f:50:fe:94:8f:c9:5a:e1:ac:42:67:ca:
                    49:d3:f5:3a:b8:b0:08:48:b7:e4:41:37:2c:2b:6f:
                    03:62:40:b5:78:d5:70:a0:13:6d:59:6b:eb:b0:76:
                    97:4b:8f:6d:84:bb:9f:eb:40:a9:c8:99:31:2e:3b:
                    72:4c:45:90:20:44:93:c7:80:a5:5c:b0:17:56:54:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:3D:F5:7C:43:16:50:C2:CB:6B:7A:62:51:A1:27:44:03:90:14
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:8e:48:29:e4:12:c0:0b:a9:5d:50:53:6e:d7:91:80:0f:
         19:52:3e:0b:a0:4e:1e:f4:d4:a3:3f:e4:54:b6:8a:6f:b8:56:
         49:0f:b5:b6:4e:f3:fe:af:04:dc:06:5c:b0:f1:6d:b5:6d:85:
         c9:84:81:3f:98:28:2b:26:74:9d:c3:46:09:3d:6c:f2:8d:80:
         fe:6f:97:d5:1b:7d:d4:70:af:6e:2d:8e:3d:56:c3:14:a9:d7:
         8a:a1:7e:8b:9b:d7:a7:fe:b5:e2:aa:76:3e:70:60:14:42:cf:
         eb:07:b9:ce:aa:74:db:a8:df:60:ef:0a:28:bc:3b:a4:da:43:
         3c:6a:54:30:4a:72:ed:ca:a1:77:91:b8:99:f9:fc:29:d3:ba:
         26:ca:2d:37:94:3c:92:ac:a6:cc:1b:eb:29:0c:48:02:e9:15:
         fb:cf:06:85:0c:0f:da:55:0d:0d:42:59:b3:b7:c2:71:51:02:
         eb:b8:d8:ae:87:fe:00:e8:fc:91:cf:48:ca:02:2b:fe:f9:4d:
         a5:35:f9:40:35:56:76:c8:6e:db:1a:a0:3c:9f:f5:0f:eb:46:
         8d:37:99:4a:26:d9:f5:a7:b9:be:8d:ac:08:0b:8d:bc:50:31:
         bf:68:cd:3d:02:14:a0:3d:ec:cc:91:6e:44:4f:51:32:7f:bc:
         ca:66:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:06 2026 by rpki-client