Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          +ZNGiwUOOfA3dNMoG5NATFBuD4YfkyGSeOC7ccDEjic=
Subject key identifier:   54:9B:18:4F:C8:72:12:E8:C8:56:BD:EA:FC:4F:3A:23:97:27:B3:08
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       019D213889E87AACA5EC6EB27B0FE92E2B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          1820
Signing time:             Tue 24 Mar 2026 19:00:46 +0000
Manifest this update:     Tue 24 Mar 2026 19:00:46 +0000
Manifest next update:     Wed 25 Mar 2026 19:00:46 +0000
Files and hashes:         1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
                          2: 3H8BLKzmkCfljUjNrQGOgxtelOg.roa (hash: v8PSaEUxks+gqrCM9n7vdattQCJR6qYVTo0H/ICFPWs=)
                          3: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: dDEs+KfcyKvAlKtykGQpl6iIJFepe70TO/aJOvx/Z78=)
                          4: OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa (hash: 7l0K8yYViyqwamqByXDtNcYGRuw4fCtQkRZ/3UwAsLE=)
                          5: OoGvPehNjKU6hE3SxfV0wILIsN4.roa (hash: 7Php/xkVqP8tmnrDY7MQsYCSTzCCLDFw6kgWF4S8f2I=)
                          6: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 15:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:21:38:89:e8:7a:ac:a5:ec:6e:b2:7b:0f:e9:2e:2b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Mar 24 19:00:46 2026 GMT
            Not After : Mar 25 19:00:46 2026 GMT
        Subject: CN=549b184fc87212e8c856bdeafc4f3a239727b308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:d9:e0:70:15:eb:3e:4f:52:23:06:a5:dd:
                    be:cc:3d:c0:1f:65:17:e4:5f:3b:d5:a4:a3:fd:6c:
                    4b:52:a7:d2:17:5c:7b:05:82:94:e1:b0:25:5f:13:
                    e4:31:1c:da:ef:94:5a:10:88:5f:e6:43:45:40:44:
                    c1:fa:6b:03:42:bd:94:6d:02:02:14:7a:04:c8:29:
                    6a:72:ec:0f:1e:4e:2e:81:d3:a3:7c:a6:77:7a:52:
                    28:33:1f:e4:98:a2:96:0d:ac:c1:01:08:38:4c:0c:
                    5d:3d:83:61:58:5a:35:65:f7:50:e2:1c:df:ce:d6:
                    f9:90:72:32:6b:53:68:8c:a9:f8:ec:b6:eb:14:e2:
                    08:9e:63:58:2f:2d:9d:39:0f:ea:60:87:5a:34:6c:
                    65:10:8a:f8:ac:b5:6f:11:97:31:c7:69:04:30:ba:
                    6f:37:41:2f:1b:22:c2:a9:7e:8b:15:09:94:0d:2c:
                    45:5b:3f:3e:26:68:68:ba:30:db:55:a3:82:28:4a:
                    51:4c:35:5c:43:7a:68:35:92:77:9a:4d:bd:11:27:
                    79:82:8b:d3:1c:59:03:e4:73:0d:27:ec:94:f9:2d:
                    6c:62:e7:69:04:27:99:65:bd:73:8b:40:2f:ef:62:
                    24:ea:62:1a:da:a3:ec:05:34:93:5d:9e:52:07:b7:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:18:4F:C8:72:12:E8:C8:56:BD:EA:FC:4F:3A:23:97:27:B3:08
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:93:50:6d:f4:22:14:f9:69:59:14:28:40:a4:65:8b:7d:4a:
         d6:53:2a:35:2e:f8:12:ba:29:27:1b:ed:7d:c4:08:08:8b:3a:
         14:92:c7:d1:f4:18:63:8a:f2:05:ce:e1:f1:8a:1c:6e:62:fd:
         99:c4:44:73:28:c9:53:26:c6:ed:1d:86:d5:e5:fb:22:91:34:
         75:37:41:c4:e9:1f:10:d6:72:c7:d9:7d:e1:04:66:df:64:d6:
         17:47:fc:49:74:22:8e:fa:73:43:07:a1:f6:32:bb:e7:5a:b0:
         0e:63:43:fe:1a:f4:f7:e5:70:30:49:5f:95:a5:7d:4e:dd:5e:
         c7:dd:1c:ee:25:22:5c:db:e6:a7:1a:0c:4c:68:ce:d5:1b:98:
         0f:f5:fb:71:aa:12:a5:c5:c8:d0:f2:7b:d1:bf:3d:ef:d4:af:
         fe:93:41:d9:fb:86:4f:dd:73:3d:32:14:d4:50:3f:b7:83:97:
         03:19:1c:d7:9f:57:2d:88:64:7e:9f:a2:be:28:96:2a:ba:3e:
         74:c1:93:ce:90:f9:44:5b:41:ca:f9:1f:8d:45:95:5f:2f:bb:
         e7:1d:17:fb:f4:c4:bb:33:80:57:0e:5f:ec:fa:8a:3e:f3:62:
         3d:fe:dd:92:2a:9c:09:2e:c7:5b:25:8e:45:92:8a:42:2d:96:
         dc:4b:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 01:17:55 2026 by rpki-client