Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          pyV2/I4lWrXufdYD40tdqkOm/hb6/X4YIPUQ+zJ+GoQ=
Subject key identifier:   71:05:75:D5:30:AB:4A:D9:B7:2D:94:E7:50:57:37:35:C6:C8:D0:10
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       019D37C069752EBD092CC97295501BDF3A3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 04:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:49 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: vzz/VCj0PUjQJjYVi9fpsAmGZf3TpGstNvzr3Ly8gQc=)
                          2: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (hash: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=)
                          3: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (hash: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=)
                          4: pUQRSDfWqJEoJFfVuZVUVOmlYsk.roa (hash: 9jvQHXY6BnSchwKk/mPiFTBcmMYYo7JbR6ZjMBc/ZDo=)
                          5: uLHH6IqO22bZWZTgO9nKR2wQbJE.roa (hash: laj7eTzK3jKEChy9oG/lzbHF9H3dpCdbB2ksudV3h+Y=)
                          6: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (hash: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:69:75:2e:bd:09:2c:c9:72:95:50:1b:df:3a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Mar 29 04:00:49 2026 GMT
            Not After : Mar 30 04:00:49 2026 GMT
        Subject: CN=710575d530ab4ad9b72d94e750573735c6c8d010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:71:e4:5f:e1:63:00:fc:5e:19:a1:c2:b4:
                    32:4e:95:27:89:17:83:22:b0:6a:d3:9d:ac:9f:06:
                    3f:e8:ac:ee:25:37:46:97:30:01:7e:52:2c:87:17:
                    a5:d4:d7:81:94:27:4a:22:86:cc:2d:cf:a8:e0:8a:
                    c9:86:f0:bf:af:f8:89:6d:32:29:58:d8:46:e4:e1:
                    46:b9:f2:ec:f0:b2:79:6d:d2:ab:3a:30:8e:ce:24:
                    b6:fe:38:84:59:fe:60:94:7c:c0:0b:75:21:b8:32:
                    c1:d4:9e:ae:6d:ee:7a:84:ee:52:01:63:87:67:2f:
                    01:98:27:bd:32:23:08:07:ab:a9:c7:68:97:4b:cf:
                    43:c8:62:ad:a0:2b:7a:25:b0:1f:74:78:78:ec:0e:
                    f4:c7:bc:d2:f6:74:6f:b6:56:fb:03:0b:cc:fc:22:
                    5e:d1:86:94:de:e0:92:b2:d4:50:bb:d9:fe:01:6e:
                    ab:fa:c5:38:d1:06:d6:db:f9:ad:d0:3d:4e:52:b3:
                    ab:61:1e:2f:45:10:83:0f:1a:cd:06:fe:5d:a0:4b:
                    77:6e:38:2f:cd:b6:ea:a1:89:b5:00:89:1f:92:90:
                    c1:c1:63:31:b4:31:e6:18:45:77:5d:13:90:4d:08:
                    54:7d:da:8e:4d:21:55:5e:83:0d:38:57:5d:6d:98:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:05:75:D5:30:AB:4A:D9:B7:2D:94:E7:50:57:37:35:C6:C8:D0:10
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:5f:2d:7a:fd:5f:3f:48:30:84:7b:bc:07:26:d4:50:a1:
         e7:90:98:f2:c4:c7:5e:e6:de:3e:28:40:9f:9b:87:12:38:18:
         46:8e:e6:20:e6:01:0a:8e:85:e7:06:2b:79:d0:7a:b9:fc:02:
         0f:13:2b:03:0a:bd:7e:53:b6:8d:98:e8:b9:41:60:e7:75:b0:
         ba:84:30:57:b6:7c:d0:bb:9b:c2:3c:00:77:0f:cc:e1:3c:e8:
         3b:c2:17:51:85:98:d0:40:cd:28:6a:bf:27:95:f1:e1:8c:ae:
         6a:3e:ce:0e:bd:01:52:f5:0a:58:a1:45:dd:35:0c:41:88:9f:
         d5:0b:30:1a:52:6e:31:99:b8:33:1a:1d:5a:a3:e7:2c:f5:0f:
         b7:2b:11:28:a3:a6:cb:ab:6f:76:e1:96:3e:2d:6d:d1:61:b8:
         8f:8d:d6:3c:86:46:91:a6:8f:cb:db:c7:64:4d:19:22:83:10:
         a0:08:30:89:20:67:6f:cd:c1:26:a6:56:3b:fa:2b:99:08:e1:
         2a:74:28:c2:d1:79:f7:d6:e2:03:73:04:cc:1f:6c:90:e9:63:
         b3:38:d2:a4:4d:7b:60:c8:6e:b7:3d:b8:ba:14:36:a5:a3:43:
         e8:8b:dd:d6:2c:6c:5b:e0:5c:58:a9:b5:6f:f1:81:5d:6c:c5:
         4c:35:41:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:27 2026 by rpki-client