Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          mKRgFnBGCf9YUJVZO5pbHnn/BTTmt5yWCA0wk9sXFFY=
Subject key identifier:   84:B3:BB:54:A7:8F:5B:CF:37:AE:98:D5:AB:64:E2:CC:10:BF:7C:2A
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       019D371B230D1432137E96742D25CAF9E9AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          1166
Signing time:             Sun 29 Mar 2026 01:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:18 +0000
Files and hashes:         1: 1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa (hash: kC5aY81+7wV5FaAuCbcDPO88uURjqA0og191H8ou4nk=)
                          2: IArcm7KHrcc-PY-XbMM0EYnJC8o.roa (hash: D8OnazQ4CkBXy0mTUKLIq9zAP3v8FKdV/2bmVQK5YE4=)
                          3: Wsun9qUEkz7Qte-mPAle0T2WkOc.roa (hash: 3L85Zuxdwbe+qNboOx36lUzHEqWROzqfxPyAEkPek0w=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: Owck1AzAibIJWMAYdYjVFCVlhqrejdMJhFn+udOHVsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:23:0d:14:32:13:7e:96:74:2d:25:ca:f9:e9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Mar 29 01:00:18 2026 GMT
            Not After : Mar 30 01:00:18 2026 GMT
        Subject: CN=84b3bb54a78f5bcf37ae98d5ab64e2cc10bf7c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:71:a8:ac:05:03:d5:77:ee:26:77:9d:1a:
                    26:25:fb:99:5e:91:b4:93:bc:b5:75:0e:e9:d2:db:
                    78:00:63:79:0f:20:d1:28:ec:02:e2:04:66:3e:b4:
                    8e:9f:31:0a:4b:cb:51:14:aa:a6:c0:de:99:d4:ef:
                    72:c0:b9:98:8f:cd:82:2e:00:52:b5:75:15:3d:a5:
                    7c:a9:09:e9:a2:5f:42:0f:52:e5:02:b0:28:9b:69:
                    b4:78:7e:21:2a:13:65:16:04:a6:47:9f:19:6a:3e:
                    01:9a:81:b4:2b:1a:10:75:7b:5a:00:4f:de:0d:bd:
                    2d:08:11:a8:71:91:c3:87:c8:89:66:49:8e:ca:fb:
                    55:b8:7d:f0:33:c4:20:a6:32:1e:9f:12:73:de:9b:
                    53:1e:b3:5e:7f:6a:85:24:ce:5c:c5:fc:0d:cb:f3:
                    69:7e:01:1a:df:ba:50:40:a1:28:0e:34:c5:d2:d9:
                    0d:86:89:64:80:4c:9a:f3:18:19:51:c2:28:58:1d:
                    19:29:4b:73:80:ef:01:c2:f1:22:9b:e5:f5:18:88:
                    e8:8d:26:e1:c3:bf:63:3b:fc:05:2b:6a:9a:83:b1:
                    64:b9:24:0e:a9:c5:15:8f:da:22:5f:72:0d:36:8c:
                    39:5a:45:c9:ec:77:b9:b1:2d:f9:32:12:df:a0:77:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:BB:54:A7:8F:5B:CF:37:AE:98:D5:AB:64:E2:CC:10:BF:7C:2A
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:cd:e6:e1:23:8a:b6:7d:b7:8c:b0:7b:cf:fc:d0:f6:a8:cb:
         ff:3b:cb:d2:33:be:2a:35:68:ed:cd:e9:f3:b6:59:69:ad:7e:
         2d:94:ce:3e:62:0f:17:c3:0d:74:97:04:81:4a:07:ef:25:ea:
         3b:b8:06:e6:be:5e:b5:9d:41:41:8b:4f:ba:e0:3a:2d:82:ca:
         1d:2f:ad:9e:ac:7b:83:5a:40:22:b4:a4:80:03:a1:60:3c:9f:
         41:03:ee:c8:c3:7b:ec:5c:7b:1d:f7:5a:5b:ff:31:76:25:6f:
         5e:b8:3a:7d:bd:c0:51:8c:48:4a:ba:12:68:e1:26:9c:b9:db:
         d3:7e:25:a5:4d:c6:e9:83:c1:b4:e6:ae:24:19:dc:e6:2b:29:
         2a:e9:b2:01:fa:a7:67:fd:ed:21:c8:fd:5a:e9:59:8b:f6:0a:
         80:63:e4:7d:b9:4d:c7:6a:28:5d:a2:13:e9:ae:c2:69:fb:2c:
         0b:0c:81:e6:7e:ab:b5:4b:88:93:19:85:02:b9:60:f7:f1:37:
         a4:b1:ea:2f:c7:58:a9:21:d8:6a:46:02:09:25:3f:ce:9d:05:
         6c:bc:f4:f0:f6:73:5c:26:cc:19:6e:5d:25:3a:26:b9:ff:15:
         3b:76:78:89:42:23:05:34:c9:5f:9a:06:a9:e2:49:f7:74:f1:
         21:66:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:42 2026 by rpki-client