Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          U9P6ElkE7cUwGVPWcxkyF1WYe/GfInuqORnBjQmW4m8=
Subject key identifier:   9D:63:37:DA:74:17:7D:81:72:68:9B:42:5E:DD:05:09:A6:87:C8:06
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       019CE825182D0BD3C38CC3DDCF6682BD28E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          033B
Signing time:             Fri 13 Mar 2026 17:01:10 +0000
Manifest this update:     Fri 13 Mar 2026 17:01:10 +0000
Manifest next update:     Sat 14 Mar 2026 17:01:10 +0000
Files and hashes:         1: T5e0TgseHoV5T0D1V0ELGlI9FBc.roa (hash: Q9H/hI7Y9VsQ4ugMF8ryTSl2yPuCfHdqE0UId9QIWbI=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: +DjzZL9D3ocIX+5Vyzfn1pkjm287xswya29o+Gg3qMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 17:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e8:25:18:2d:0b:d3:c3:8c:c3:dd:cf:66:82:bd:28:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Mar 13 17:01:10 2026 GMT
            Not After : Mar 14 17:01:10 2026 GMT
        Subject: CN=9d6337da74177d8172689b425edd0509a687c806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:a6:bd:a8:ed:43:f3:ba:ee:ff:c7:55:25:
                    a8:f8:d4:73:3a:98:e0:aa:23:b7:69:3f:08:c8:6b:
                    13:39:3c:58:f5:44:67:0d:44:d2:00:0d:73:87:9a:
                    12:b1:15:7c:08:89:3a:a7:60:ec:14:95:f1:4e:c6:
                    94:b8:23:64:d8:d1:d1:d7:9b:bd:ff:99:41:ae:fb:
                    c5:ac:be:31:bc:50:cf:c5:ec:7a:70:4b:d6:6d:95:
                    4a:a9:ae:c5:d1:79:b8:a0:56:2c:2c:3a:e0:8d:89:
                    25:e2:5c:c6:6a:2c:75:ae:2d:1f:15:cd:6c:fb:50:
                    a0:c6:9d:b9:5d:85:7e:75:02:ee:c2:4e:17:da:88:
                    17:1f:2e:49:1f:89:f8:5e:af:e5:97:a1:60:3e:f7:
                    69:e3:34:71:49:67:af:e3:9f:2b:7e:4d:41:c7:51:
                    e9:c0:8e:be:00:cf:54:fa:81:9d:0e:7f:9c:a7:31:
                    03:c4:2a:54:71:7f:cd:bb:a2:4f:61:fb:0d:c7:48:
                    57:58:e3:03:07:5f:5b:33:41:8d:af:9d:66:ca:cf:
                    36:0e:a7:6c:da:52:cd:66:62:62:56:1d:47:87:e9:
                    11:27:20:70:5e:76:0d:bb:fa:8a:1c:5c:d2:ef:c9:
                    e0:0d:ee:30:f3:aa:9d:7f:f7:fe:74:17:7a:94:8f:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:63:37:DA:74:17:7D:81:72:68:9B:42:5E:DD:05:09:A6:87:C8:06
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:39:20:db:f8:26:a6:e2:35:8a:e6:f5:bf:c4:44:6b:14:
         d3:0d:61:1d:1f:3c:70:be:2b:09:47:4f:97:81:15:07:b8:06:
         07:50:f0:81:44:62:5c:10:22:03:65:d0:33:f1:1a:7d:5f:43:
         8c:53:25:ad:ee:83:e7:e0:82:37:a3:a6:91:38:28:c2:73:05:
         f8:68:cb:d7:e7:2d:8e:b1:b9:c2:07:f1:22:7a:eb:9d:fa:9a:
         45:66:09:25:51:d1:6b:03:3d:ae:62:e6:12:40:7f:c1:07:aa:
         72:6a:8f:fd:60:b9:a8:2d:1a:f6:2b:d8:8a:92:3f:a2:ef:12:
         c8:ac:9d:47:e1:a6:17:f4:10:94:98:f1:0d:41:c2:78:1d:ed:
         34:6f:1c:77:1d:f5:c0:a0:a7:25:25:b0:fe:78:7f:e6:4a:17:
         df:e0:b1:bd:a6:c8:50:9e:57:24:2a:66:69:dd:00:f0:ac:08:
         5e:0d:76:f3:48:f9:3b:46:06:1e:f1:65:cf:17:f9:24:a8:38:
         e1:c0:b2:46:86:b2:ad:da:97:ab:ae:e4:e9:c8:a4:b2:b5:37:
         f9:5f:43:eb:47:c7:07:d7:2d:d1:e3:b2:8e:17:e4:8f:68:32:
         54:3e:5e:d0:b9:5b:43:f3:3a:5e:30:63:36:d9:83:e1:3b:39:
         73:0f:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:51:05 2026 by rpki-client