Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File:                     R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier:          tLavqc6gzIedqD1gR0bSgSQrRblduxRbKmXH45unUCU=
Subject key identifier:   C1:94:2A:D4:81:8E:1B:01:6D:9D:F0:65:0B:B1:7E:6B:C8:BC:B4:AE
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer:       /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial:       019D39AF72419EDB5B8A744CF3AF3CF0E237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number:          1898
Signing time:             Sun 29 Mar 2026 13:01:32 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:32 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:32 +0000
Files and hashes:         1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
                          2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
                          3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: EF/jlJE0skwPIjD+cx+3QDQbFoVQsWSUQTc1HnLm+MQ=)
                          4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:72:41:9e:db:5b:8a:74:4c:f3:af:3c:f0:e2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
        Validity
            Not Before: Mar 29 13:01:32 2026 GMT
            Not After : Mar 30 13:01:32 2026 GMT
        Subject: CN=c1942ad4818e1b016d9df0650bb17e6bc8bcb4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:a4:09:b5:67:83:ad:24:df:b2:18:88:d6:
                    ae:2f:f5:e8:25:b7:f4:d5:e8:35:94:ab:c3:f2:c1:
                    48:93:b6:34:ed:70:24:44:48:ad:54:6b:da:fa:e8:
                    14:cc:c1:5a:a0:48:2c:3a:8f:f7:28:16:b0:1e:3c:
                    33:f9:e1:40:52:80:48:08:40:05:82:b1:b3:70:a1:
                    56:ba:61:8d:e1:73:78:a2:a4:6e:89:92:4f:82:f3:
                    1f:ac:b8:cb:b1:88:63:ec:a8:d9:d7:80:67:89:21:
                    69:0d:0d:fd:74:ee:f4:e8:19:f3:99:6e:1a:e0:90:
                    25:a7:c8:c0:cb:1a:21:7b:79:bd:c7:fe:ae:e9:d5:
                    98:ca:ec:29:b0:62:af:85:6d:59:cb:66:30:99:21:
                    e9:ee:63:ae:d8:2e:47:e2:4a:58:b8:a7:b5:fd:4f:
                    b2:82:ca:60:63:b2:3e:c7:6d:4a:63:c7:63:ee:e2:
                    26:8a:0d:40:17:11:49:d8:e3:e8:45:90:49:dc:2f:
                    8a:93:3c:be:9c:59:9d:f8:72:8b:66:ae:d7:3e:18:
                    94:ea:e8:af:3d:f4:0a:b9:88:9e:d8:fc:8e:91:94:
                    cd:14:6f:3a:d7:74:2d:24:05:c4:23:ab:9c:46:15:
                    d0:2b:82:6b:a3:1d:fa:e2:8e:f3:b8:51:51:e2:85:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:94:2A:D4:81:8E:1B:01:6D:9D:F0:65:0B:B1:7E:6B:C8:BC:B4:AE
            X509v3 Authority Key Identifier:
                keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ec:d9:6b:2e:ae:6d:7e:0c:43:75:a3:7d:cf:4a:14:df:24:
         cf:eb:7b:48:89:d4:ee:e9:f9:63:99:51:a2:a2:df:24:3b:44:
         bc:ed:ed:8f:80:7a:ac:d1:70:c3:56:ea:b6:90:ad:81:fc:e8:
         9e:7e:1f:36:2a:94:f0:17:81:cd:20:89:ee:98:d7:2a:c8:26:
         23:ab:01:88:cb:17:b3:ad:59:3c:0c:47:7c:c7:0e:8f:56:87:
         b7:f5:91:fe:60:d9:b4:52:3d:60:6d:8a:82:a1:4e:57:04:d3:
         51:8f:43:d4:4e:79:59:e6:59:4a:a2:85:6a:30:f6:e5:ff:6a:
         cb:60:fc:a3:ae:4b:f5:8a:96:b0:2e:47:f7:72:83:2c:45:5e:
         de:62:fb:b4:31:16:19:9c:08:11:33:bf:d1:60:07:d1:1c:f6:
         26:29:7f:12:0f:a7:e9:a8:a4:7f:89:4c:42:af:27:47:9e:e7:
         38:db:67:9e:c6:bb:17:dd:ec:84:34:d6:99:af:7f:90:97:fa:
         ab:73:a9:06:97:55:9c:6c:60:be:61:c0:94:86:a5:99:53:e4:
         5f:d8:3a:a4:ef:34:bf:92:44:7d:4f:2f:68:f0:89:03:96:bd:
         5d:f7:97:5b:fd:31:41:0e:95:90:ea:a2:76:08:e5:b2:7f:ac:
         03:14:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:32 2026 by rpki-client