Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File:                     2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier:          rST0eRbSmg6/A7upioIUBxQuHTpBhYKbI6p7vqHWFkw=
Subject key identifier:   56:27:4C:03:F3:52:CC:55:DF:4F:AB:0F:65:78:AD:C1:56:89:08:73
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer:       /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial:       019CEFDED03B3CEB7B73559A0568500CD830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number:          0932
Signing time:             Sun 15 Mar 2026 05:01:22 +0000
Manifest this update:     Sun 15 Mar 2026 05:01:22 +0000
Manifest next update:     Mon 16 Mar 2026 05:01:22 +0000
Files and hashes:         1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: 72WvAF8YMWOoSmwUsFM3GC3Pd1R6gRHuDoTqQGCdd6s=)
                          2: I-cmXuRRTQgMauzqhYZq1qS7jd8.roa (hash: +mhQlm2zpG1YAxHqc5888PjYzkQLufmoxeIELPBtTRo=)
                          3: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:de:d0:3b:3c:eb:7b:73:55:9a:05:68:50:0c:d8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
        Validity
            Not Before: Mar 15 05:01:22 2026 GMT
            Not After : Mar 16 05:01:22 2026 GMT
        Subject: CN=56274c03f352cc55df4fab0f6578adc156890873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:c4:3f:6b:9c:22:2c:e8:13:c1:aa:d1:df:
                    32:91:a5:64:43:9f:e8:bb:2f:fe:1f:4f:3e:1c:da:
                    1c:e9:78:51:be:18:14:8c:3f:8d:76:83:ec:b4:84:
                    23:8e:a5:26:fe:3f:ad:82:cd:a5:2a:52:ed:7f:7f:
                    b8:6c:7d:42:86:7a:c7:05:11:c5:03:73:c6:63:fb:
                    e8:48:92:f1:99:11:2c:23:5c:f5:d8:77:37:a2:c1:
                    4b:45:36:9c:37:1d:2d:7a:17:ee:7c:20:46:f7:70:
                    92:d3:16:39:1f:9f:d2:01:11:04:54:99:d0:1c:de:
                    bc:cb:26:4d:85:68:53:e5:d6:76:0d:29:2c:fb:37:
                    b0:64:5e:49:4c:e4:bd:9d:6b:9c:57:80:a2:2a:42:
                    7b:d8:41:e4:d7:c1:39:29:65:8e:b6:51:0e:62:6a:
                    ce:06:06:a8:70:51:43:08:db:2e:4c:fa:7f:be:c8:
                    bb:98:17:82:1d:e2:29:ca:40:dc:ec:e5:d8:6a:5a:
                    c2:d7:1c:8a:c1:49:e7:f1:f4:b7:de:f1:08:d6:d3:
                    d8:ae:cb:22:4b:ad:97:ea:93:e7:b7:82:7f:64:03:
                    79:4b:dd:c0:f6:8f:5e:99:90:35:26:ab:5f:ee:b3:
                    b3:6f:9d:af:21:84:ba:d6:82:d9:79:1d:ff:8e:9d:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:4C:03:F3:52:CC:55:DF:4F:AB:0F:65:78:AD:C1:56:89:08:73
            X509v3 Authority Key Identifier:
                keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:29:41:b7:3a:46:10:63:62:e0:e8:0c:f2:59:24:c8:33:
         a1:0a:c8:04:84:ca:a8:db:56:8f:6c:e8:97:3e:59:4b:c6:82:
         8a:8d:78:82:95:c1:53:b5:a7:18:29:e6:54:2c:fd:d2:7a:d2:
         d0:52:4d:62:76:80:91:ce:22:65:5a:d2:8e:27:f0:b7:6d:77:
         e9:06:21:5b:a4:47:68:33:00:3b:91:6e:4a:24:0b:32:27:bc:
         dd:6d:80:0d:73:45:f5:10:03:9e:6a:ea:e1:5f:45:20:0e:04:
         1e:c9:6f:05:8c:67:89:2c:01:72:0b:22:fd:d1:32:84:6e:ae:
         c0:c7:69:09:50:b6:c8:99:cd:1c:03:63:0a:a3:fb:29:8c:91:
         ae:dc:b8:07:93:79:b4:5a:65:44:39:f5:4d:6a:fc:20:64:04:
         68:cf:08:35:4d:59:5f:20:ec:6a:32:48:59:9f:13:07:3d:71:
         f9:95:d7:1e:67:7b:80:04:ea:b9:89:fc:9b:ee:f6:c8:d1:09:
         8c:14:87:5f:23:86:91:62:04:72:81:8a:69:87:e4:ac:18:f5:
         08:09:6d:bc:75:31:b8:01:fa:3b:73:bf:55:c7:dd:8e:f7:7f:
         ce:b9:f4:8b:35:f8:e8:ab:e7:f2:90:e0:8a:4d:36:e2:8f:01:
         0d:81:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:24:59 2026 by rpki-client