Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          bNTgHZQ4SVXmncTcvENGq6VAknB+Iyl+0MQDkSj8Tqc=
Subject key identifier:   BF:6B:F6:C8:E8:16:D1:29:5F:BF:61:80:59:DB:92:35:ED:79:0B:D3
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019D100EA130D81CAF3035942BEB88E9BF47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          18A0
Signing time:             Sat 21 Mar 2026 11:01:27 +0000
Manifest this update:     Sat 21 Mar 2026 11:01:27 +0000
Manifest next update:     Sun 22 Mar 2026 11:01:27 +0000
Files and hashes:         1: 1-w6BP38irc8ikwIFmua621R4fsA.roa (hash: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=)
                          2: 1kWLQqjzDqKCBYLisG3Mmfema5k.roa (hash: hVqG2tcrXz55RsvzkU7NiBB4offN7X8Rc/q0zicjVfU=)
                          3: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (hash: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8=)
                          4: VlwwTSoRiE5X0lO1YkSOmqRJH_8.roa (hash: tELQUfXy5jxakYPvXfDeQLNFwxD9VNjFTkL9svhczLc=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: EUbnrMy7HR+gDhUFjmh6a7tx5ZEmptbv6k2RyGZLPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:10:0e:a1:30:d8:1c:af:30:35:94:2b:eb:88:e9:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Mar 21 11:01:27 2026 GMT
            Not After : Mar 22 11:01:27 2026 GMT
        Subject: CN=bf6bf6c8e816d1295fbf618059db9235ed790bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:01:95:a0:ba:02:56:6b:67:ad:d2:3e:f3:
                    25:7b:fa:ee:e5:d2:60:87:5f:74:98:46:fa:00:c9:
                    10:e1:c7:cf:bd:cc:4a:92:07:68:8e:89:22:68:ef:
                    aa:07:3d:66:7a:e0:ad:59:1e:c1:36:b1:50:52:73:
                    41:3a:a5:7e:62:fe:4d:52:94:25:ad:3e:d7:30:c6:
                    a8:2a:f3:20:f9:5b:43:c0:41:7d:ac:cf:8c:b8:f4:
                    eb:a1:89:93:a9:d9:43:93:a3:71:9a:c0:c5:7b:07:
                    1c:56:16:83:ce:08:5a:ff:70:49:6e:50:b5:84:52:
                    fd:1f:bb:c1:26:c7:a8:1e:2e:91:d5:32:d8:1b:3b:
                    25:b4:0d:36:ad:f7:70:14:2b:ef:9b:75:0d:6d:ce:
                    31:95:89:5f:80:ca:10:4e:56:08:fe:a3:04:47:93:
                    11:9d:09:47:69:d0:7f:a1:68:f1:3f:77:0d:5d:e6:
                    9f:93:12:b8:c9:66:ee:2f:e7:8f:97:79:57:2a:7f:
                    43:75:93:dc:e5:79:2a:7d:4f:45:9c:9d:20:a1:47:
                    0d:ec:b8:7d:94:b5:38:a1:c1:df:c4:7c:72:d8:ec:
                    34:17:85:70:08:99:bb:a5:60:6f:34:43:22:57:9e:
                    f3:43:54:01:c5:d8:12:86:0a:51:fe:5f:2d:f3:37:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:F6:C8:E8:16:D1:29:5F:BF:61:80:59:DB:92:35:ED:79:0B:D3
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:21:0b:0f:21:c2:21:f7:3b:b8:f7:34:b5:37:b2:4d:8c:
         f5:3e:12:8a:52:5c:6f:00:21:d8:4d:03:88:c6:cf:4d:69:c0:
         11:0d:18:08:8a:de:dc:e1:e2:20:bc:73:49:db:39:a6:4d:67:
         fb:d9:0e:59:0b:d6:0f:cb:04:52:af:59:c7:c2:20:49:71:90:
         5f:b9:c3:83:d9:66:d6:51:bc:a3:68:1d:ee:a7:9f:f7:92:c6:
         f4:00:ca:eb:d3:8e:51:c0:dd:64:8a:b8:e4:47:72:07:93:d8:
         bd:a1:99:61:e7:56:1e:92:67:27:40:31:f6:62:32:f2:fe:41:
         a7:96:e2:02:f4:0e:d3:07:c7:0a:6a:db:0c:85:11:6b:88:f6:
         0a:f0:3b:fc:4e:67:80:49:22:db:9e:1b:e1:da:30:63:7f:98:
         ab:5f:db:d6:4a:ab:31:41:dc:bf:e0:f5:c8:36:a0:ff:0d:b8:
         e3:6c:05:64:2d:67:aa:13:4f:f8:15:b9:a7:6f:65:2b:1b:32:
         dc:d5:79:4c:de:50:54:d7:31:54:82:59:12:b0:38:0b:ac:3f:
         60:91:33:d6:88:60:5d:80:77:6f:2a:d1:7b:ab:f4:a7:b2:b9:
         38:c6:27:a0:e1:fa:71:bd:fd:3b:41:0a:a8:6f:9f:0b:20:e3:
         06:9e:b4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:17:51 2026 by rpki-client