Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File:                     sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier:          TrLPH2i4xOKKowTl8/nYJETtiPJfxm9v43FuVMZrN1k=
Subject key identifier:   31:23:45:E2:3C:4A:D9:E9:B2:DB:E6:3A:37:E6:9B:1C:DF:98:6A:1D
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer:       /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial:       019D375341F60AB509FC9EFA8435B8660993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 02:01:36 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:36 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:36 +0000
Files and hashes:         1: DKBfBL9XpscAyTb6lcg_xLvLalk.roa (hash: 5NSHLTPIALI5PbSBvcpHj5DJzxIv6VgrTSWBYbfeE9M=)
                          2: FSwkeIpTkviwow4rp67ki1ll7vA.roa (hash: BiP8/RjkfCgTWSMXpx0VR4qahxKI7hYQ74iepcYZ9P8=)
                          3: LNUgrHeJH8_twF9tU9VX_RCIzvg.roa (hash: GLcXAgYTgm5r7GaYDlqmsk5yeyHe1dPhOHxa2XGFx2k=)
                          4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: wrp/jX06Yt06YzuGn4dpCf2mo3fgS6GbNqsB0THk5+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:41:f6:0a:b5:09:fc:9e:fa:84:35:b8:66:09:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
        Validity
            Not Before: Mar 29 02:01:36 2026 GMT
            Not After : Mar 30 02:01:36 2026 GMT
        Subject: CN=312345e23c4ad9e9b2dbe63a37e69b1cdf986a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:58:5c:da:4b:01:28:1b:3f:c8:83:35:b6:53:
                    3a:1a:5c:db:d7:6d:25:4e:02:5e:f0:48:36:2c:ab:
                    12:68:3e:ea:3e:6a:40:34:37:e3:cd:4b:8c:59:3e:
                    a0:e9:ec:14:e5:24:fe:09:29:fa:ff:c8:d7:0d:4c:
                    76:4d:1d:b4:4e:01:7a:e4:a2:fd:8b:b6:fe:c1:24:
                    7e:e4:80:54:97:cb:57:5b:ee:24:8d:9f:95:a0:77:
                    cc:c2:f9:a0:b2:cf:4f:5b:68:7b:df:df:a4:d1:94:
                    12:40:6e:f5:68:03:b0:4f:70:2e:b3:48:7f:85:b7:
                    d6:fe:0f:29:5a:3f:49:db:bd:be:39:26:78:4d:75:
                    2d:7d:d0:38:a8:5b:94:69:03:5d:70:1e:56:3d:aa:
                    e3:c3:b5:d3:7b:75:11:14:b2:1b:6f:13:9d:1d:f8:
                    e7:20:90:2a:5f:17:4e:00:f1:26:bd:a1:f3:5e:e3:
                    0e:bd:44:89:c3:55:64:a8:f6:f4:6d:b4:86:e1:b7:
                    1f:22:6d:ba:80:29:fb:1e:f0:ff:de:a2:d9:c5:9e:
                    71:a6:d0:d6:0b:db:ba:2e:a2:d6:29:a0:29:21:1a:
                    f3:67:2c:b4:ea:ae:0d:e6:05:8a:ce:5d:3a:34:99:
                    d1:3c:c6:86:9d:89:20:63:ad:9b:5d:36:8f:c4:35:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:23:45:E2:3C:4A:D9:E9:B2:DB:E6:3A:37:E6:9B:1C:DF:98:6A:1D
            X509v3 Authority Key Identifier:
                keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:71:73:e5:35:22:7c:a2:99:06:93:c8:47:22:83:db:48:e0:
         3f:59:c0:13:be:3f:f5:82:e6:84:89:28:36:cb:e5:f9:ea:83:
         9c:44:06:e8:ec:fe:c6:a2:06:3c:ae:b8:bf:1a:5f:ed:0b:38:
         9e:73:2c:02:87:63:c4:0c:bb:eb:70:4b:4c:35:cc:d9:b9:a4:
         45:0f:b7:99:d7:39:0a:65:ef:6a:5e:bd:e1:e0:3e:0a:de:1f:
         ad:3f:fa:8a:15:88:4d:43:ff:9e:bb:61:67:b7:f2:88:40:d4:
         65:d0:f0:ec:80:0c:80:23:43:d8:bf:ac:36:13:80:cb:4b:7c:
         ac:14:7b:8e:b2:94:a4:3f:b1:22:bf:10:5e:e5:a3:9e:71:51:
         33:43:51:3b:c0:44:b9:e9:bd:a7:8f:d2:ad:5a:5c:d6:30:2f:
         52:7c:32:ad:5c:fb:0a:84:e4:67:05:23:50:70:d7:ee:18:60:
         e3:5b:0a:bb:30:30:b6:7d:50:ea:23:fb:90:7d:25:90:10:00:
         f7:e1:7c:46:ee:4b:38:0d:a7:10:a0:1a:fc:79:59:7f:0f:b7:
         d1:b0:50:c1:fc:85:24:22:01:63:f7:5c:5d:6b:83:27:c8:90:
         86:c4:40:0b:8b:b7:bf:41:21:b5:76:b3:3b:e6:0d:2b:5a:83:
         04:78:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:05 2026 by rpki-client