Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File:                     9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier:          Ybeb18esIwLIEuan/bKfpcg9aNSTjU6gnMzpaZLI5CU=
Subject key identifier:   5C:13:32:37:A4:31:F0:C9:D6:45:6B:F7:35:15:B7:4D:A5:4B:16:D0
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer:       /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial:       019CE82499A1567980DDF451E3E635D4D735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 17:00:38 +0000
Manifest this update:     Fri 13 Mar 2026 17:00:38 +0000
Manifest next update:     Sat 14 Mar 2026 17:00:38 +0000
Files and hashes:         1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: 6fviVR2zGLmwpy/NjhIyS8++rOVGMS884/Shq7QuMMw=)
                          2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e8:24:99:a1:56:79:80:dd:f4:51:e3:e6:35:d4:d7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
        Validity
            Not Before: Mar 13 17:00:38 2026 GMT
            Not After : Mar 14 17:00:38 2026 GMT
        Subject: CN=5c133237a431f0c9d6456bf73515b74da54b16d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:dd:99:89:63:65:07:40:5f:0e:ec:18:cf:
                    95:99:6d:b6:3f:16:91:2e:02:39:d1:50:50:29:4e:
                    9f:66:66:09:8e:18:58:1c:69:22:2b:05:a6:69:78:
                    1b:56:35:4e:92:4b:3b:63:89:3d:b4:63:46:74:d7:
                    86:68:52:ba:88:24:3f:09:70:97:23:f9:64:74:52:
                    59:94:dc:c9:8b:a7:22:03:2d:f1:83:c4:b1:39:54:
                    2e:08:68:5c:3e:1c:e9:2d:73:9a:61:25:5c:40:b6:
                    21:39:32:27:52:7c:79:ee:44:ee:fb:91:9b:18:81:
                    2f:e5:e3:d5:b9:a8:a4:e4:32:fb:f0:7c:78:90:a8:
                    e3:ca:22:76:ec:83:2b:e3:a7:40:8e:88:26:87:c9:
                    3d:a5:17:2b:86:07:6c:0e:8f:01:66:da:fa:68:83:
                    e0:73:07:1e:b9:12:dd:aa:25:ae:88:41:84:7d:2c:
                    ad:20:34:24:86:12:d9:38:86:c6:fa:c8:ae:9e:bc:
                    4c:94:eb:29:24:81:1f:d0:db:c1:a2:ef:d4:4d:3d:
                    61:4e:dc:d7:d0:44:0d:f4:96:15:88:00:6b:65:a7:
                    2e:9d:ee:1c:3f:01:25:3f:aa:7c:c4:7f:c2:19:2f:
                    e9:a5:23:36:7e:2e:ba:98:78:84:97:62:cf:e2:14:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:13:32:37:A4:31:F0:C9:D6:45:6B:F7:35:15:B7:4D:A5:4B:16:D0
            X509v3 Authority Key Identifier:
                keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:83:07:79:d9:38:11:02:8b:8e:20:0c:e7:21:13:b2:f9:1f:
         ce:27:36:30:21:e8:58:8b:6e:2d:8e:bf:a3:91:d1:28:cd:a1:
         7b:8d:ba:19:12:55:24:d7:03:e4:0f:04:41:23:8c:73:e8:95:
         19:1d:ef:0c:a3:61:b3:6f:47:a8:1d:ee:46:41:9e:fc:72:9f:
         aa:e9:b4:72:db:71:ec:0c:05:e7:59:aa:f0:6d:cb:ce:88:03:
         de:95:0c:78:ad:be:a2:eb:8e:b1:86:b8:83:25:c2:2f:66:ca:
         2a:d7:8c:01:06:2c:72:a8:44:f1:ad:3c:25:ed:4a:f9:74:e3:
         f0:b9:4b:00:4e:3e:5b:31:8a:ef:86:ad:d4:fe:63:7d:b3:3c:
         39:20:c1:6f:85:7e:be:3b:9e:cd:0a:6c:86:de:5b:e8:7d:99:
         52:e9:5a:5b:d1:fa:a9:e0:7d:a3:28:a0:26:c6:b5:95:39:cc:
         64:26:35:b0:14:4a:03:36:3b:a2:0f:7e:70:77:3d:f3:ed:1f:
         b0:ad:7a:0e:74:06:80:31:dc:b8:db:d4:cc:0e:c3:88:b9:a7:
         66:4b:b2:64:ff:c8:2e:e9:b9:67:cb:fb:c2:f8:34:c1:d2:da:
         1f:c0:b6:cb:7c:bb:40:c4:bc:ae:ca:b1:03:91:85:4d:ef:7d:
         05:a8:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:39:59 2026 by rpki-client