Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File:                     M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier:          rrZKYztkmS8RhHjQa2F2Nizls4Mg2pJ+JR/anxRMWgw=
Subject key identifier:   94:27:13:51:40:ED:17:93:EB:B4:B2:74:37:78:67:6B:DA:F6:A6:3F
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer:       /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial:       019D37894E2F5CA8F2D5AD8D77C44BD5B2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 03:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:38 +0000
Files and hashes:         1: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (hash: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo=)
                          2: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: ZOUJjjYQfdH5z35EOWml6FWkwbuU4Xhv6VamZDBQu7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:4e:2f:5c:a8:f2:d5:ad:8d:77:c4:4b:d5:b2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
        Validity
            Not Before: Mar 29 03:00:38 2026 GMT
            Not After : Mar 30 03:00:38 2026 GMT
        Subject: CN=9427135140ed1793ebb4b2743778676bdaf6a63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:85:0e:d5:89:7f:d7:fd:b8:c4:57:b2:33:
                    3f:be:85:1a:84:69:05:4a:30:3e:b6:a1:b2:13:95:
                    30:8f:e2:6a:29:be:09:34:26:61:73:7f:0f:34:ca:
                    d7:b5:51:01:59:28:3c:f5:30:e0:07:62:fd:f9:a0:
                    5b:57:49:33:47:9e:57:9c:98:ce:48:8c:89:76:47:
                    95:3b:59:f1:23:c9:e6:92:00:e6:b8:03:ed:b9:54:
                    ce:22:17:9d:c9:f3:74:d3:d2:9d:ad:be:28:d7:29:
                    a9:a2:7f:e1:3e:9d:e7:50:42:45:3b:95:16:73:d9:
                    16:11:6e:d0:1b:14:57:ef:cd:84:b6:06:00:de:82:
                    19:e8:e6:90:87:e9:3b:1b:0c:ee:35:fa:f5:9c:2e:
                    ee:49:a4:df:5d:4c:c7:06:7b:3a:4d:c4:4a:be:6c:
                    00:da:06:0c:3f:18:e7:cf:a5:c4:1d:51:4b:93:81:
                    fa:e9:32:12:a8:43:e2:26:7f:b0:3b:ed:45:d0:d2:
                    65:79:09:25:3b:17:b4:d1:cd:75:2d:f3:4d:b8:c0:
                    70:07:a7:cb:cb:bf:14:75:4a:e2:07:f2:a4:39:6f:
                    f6:d3:75:23:8b:8f:b4:18:bd:7d:8e:ce:ba:85:eb:
                    c0:2b:dd:b7:6b:3e:06:62:7e:c5:77:ac:e8:14:4a:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:27:13:51:40:ED:17:93:EB:B4:B2:74:37:78:67:6B:DA:F6:A6:3F
            X509v3 Authority Key Identifier:
                keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:1d:ed:06:67:67:5a:58:fb:04:0f:62:9d:2c:a2:ef:87:
         be:b1:58:9e:89:8d:47:ae:90:28:1b:48:cd:97:35:11:8e:6e:
         b2:5f:b2:fd:ab:96:6e:3b:8b:4d:04:f1:da:6f:fe:6b:d5:b0:
         85:3c:b1:20:18:ad:6e:15:d1:6d:9e:66:24:f8:66:72:be:cb:
         39:40:bb:23:26:c6:08:10:a1:d5:6a:79:1d:08:73:1c:f2:99:
         ea:27:55:93:a0:e9:15:ee:c6:f5:ca:79:a0:be:31:e3:f6:21:
         cc:c0:66:c3:bd:6f:85:3a:71:ff:a6:75:4d:48:b7:34:97:1c:
         0d:14:f3:eb:b0:2c:f8:26:51:73:9e:32:7c:93:e1:c5:04:54:
         ac:f1:e1:db:4b:e7:3f:00:da:73:c7:3f:68:fb:b1:dc:50:9c:
         c8:87:3b:6c:dd:cd:7d:64:0e:2b:15:44:eb:0b:67:07:32:62:
         9e:c8:c0:32:ef:d5:9d:45:ce:99:e3:61:d1:20:44:b9:1b:b5:
         63:27:26:a7:0e:fd:bf:99:33:7c:a6:06:fe:fc:04:73:9f:54:
         93:ff:5d:e1:9f:a6:0f:63:c3:07:81:a4:0c:cd:5c:ed:f9:a5:
         df:30:ea:c2:d8:a3:e0:a7:08:2e:29:33:45:73:b8:65:1d:04:
         7f:17:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:06 2026 by rpki-client