Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File:                     71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier:          dlFE7CVhZ1fWLoYWSyYba2TR84rO1JdSq6jbNnG3lro=
Subject key identifier:   94:C3:F7:BA:75:73:43:E8:06:7A:04:DA:8B:7B:7E:CB:EB:95:39:B9
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer:       /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial:       019D06D47B5C7DB470FACB7453EBD8C7D1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number:          1878
Signing time:             Thu 19 Mar 2026 16:01:21 +0000
Manifest this update:     Thu 19 Mar 2026 16:01:21 +0000
Manifest next update:     Fri 20 Mar 2026 16:01:21 +0000
Files and hashes:         1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=)
                          2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=)
                          3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: V71wZBFTl/O0BD2j/Ot63exUcJGd/LhEYcNvpBlGkUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:d4:7b:5c:7d:b4:70:fa:cb:74:53:eb:d8:c7:d1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
        Validity
            Not Before: Mar 19 16:01:21 2026 GMT
            Not After : Mar 20 16:01:21 2026 GMT
        Subject: CN=94c3f7ba757343e8067a04da8b7b7ecbeb9539b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:a0:76:50:c4:1b:86:f0:91:43:20:ee:03:
                    b6:75:82:3a:6e:72:13:8c:5c:46:c6:aa:e2:32:7e:
                    9d:17:bf:72:dc:86:32:97:b0:aa:80:7a:75:2d:93:
                    e4:29:2a:a9:e2:dd:3b:5d:44:85:e4:9e:45:19:25:
                    a0:0d:ff:1f:d6:b6:84:48:fb:be:6e:ae:24:d2:92:
                    ac:95:97:be:c4:54:8b:54:30:c1:93:54:df:fa:a3:
                    9a:6d:6b:81:df:1a:46:5a:ed:16:b0:9f:90:31:ec:
                    2a:ee:b7:1b:36:3c:bc:56:90:cc:7c:c5:d3:c8:bd:
                    00:5f:29:50:ac:62:a7:27:0a:e8:9e:1b:31:4e:86:
                    54:b0:7c:dd:de:2b:1f:70:03:5e:d2:15:26:e5:8d:
                    c1:7e:65:e5:1c:d8:31:93:2a:82:9c:e4:e4:4c:2b:
                    19:25:a7:d0:1d:52:0e:31:bf:dd:65:e2:4a:d6:54:
                    cf:00:f3:3d:1d:89:20:9c:ba:fc:35:2d:17:f9:e4:
                    41:2a:d3:15:0c:9b:5d:e5:c0:4b:f9:3f:cd:ca:7d:
                    0e:9f:f2:c5:a0:e1:4b:b1:5b:1f:08:e7:7e:f9:b6:
                    84:ce:10:72:78:72:93:0c:65:66:dc:b9:73:7b:5d:
                    76:51:a8:d7:71:c7:19:09:c5:dd:99:b7:f0:47:c6:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C3:F7:BA:75:73:43:E8:06:7A:04:DA:8B:7B:7E:CB:EB:95:39:B9
            X509v3 Authority Key Identifier:
                keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:e3:23:85:50:5c:e8:a4:04:50:79:d3:31:87:eb:20:3e:
         d8:c9:80:cd:16:6b:22:fe:a0:09:bd:f4:15:01:f9:86:27:18:
         ed:87:39:17:67:d2:1c:e3:c6:f4:20:88:10:50:1e:31:25:4e:
         e7:d3:0f:15:65:e2:8f:5e:8a:72:35:ec:ba:35:ea:77:3e:4f:
         65:5b:0f:d8:2f:f0:c2:fd:7f:d3:c1:73:06:eb:f8:37:6e:09:
         92:8b:80:0a:ef:79:90:d4:76:9c:0d:28:6c:ef:88:81:32:69:
         b8:a7:87:e8:6d:3a:ad:cf:e1:2e:dc:08:ff:f4:a2:12:46:e1:
         84:9d:4d:3e:67:e5:ef:54:b0:b4:d6:b9:f6:38:21:76:50:fb:
         3f:9d:50:e8:ba:ba:c7:ed:d4:30:f9:dc:f8:cd:64:94:b3:a8:
         04:a8:43:73:bb:6f:81:fc:43:d9:5e:e6:cd:93:1d:1c:ec:7d:
         73:a1:2e:85:5e:4e:64:3e:b2:74:e1:01:82:de:c4:1f:14:db:
         f5:11:9c:5f:b7:3d:3f:1d:1f:ea:e3:3a:44:1f:71:fb:bf:2a:
         b3:c8:2d:5f:0f:84:23:1e:75:a2:42:a0:82:1f:23:5a:77:41:
         e7:b9:81:e5:7e:b4:28:12:30:ec:a6:cd:e5:7a:38:0b:29:af:
         2b:2a:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:13:08 2026 by rpki-client