Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
File:                     mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft (raw, json)
Hash identifier:          7ozdPH2Cm5oy47tYGdv7a1zeW7yWGB0iAuFLKfKc5eg=
Subject key identifier:   DA:3B:E0:8F:57:37:D2:59:67:58:1D:70:10:54:11:1E:D2:CB:01:A4
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Certificate issuer:       /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial:       019D3AC2301E8AC1E9A48784D430B074C0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
Manifest number:          04F5
Signing time:             Sun 29 Mar 2026 18:01:37 +0000
Manifest this update:     Sun 29 Mar 2026 18:01:37 +0000
Manifest next update:     Mon 30 Mar 2026 18:01:37 +0000
Files and hashes:         1: 44GZoGx_x8dNbf6nAHGQWZ2UU-0.roa (hash: xOyAbQB+vtc/E2mAsjnBi6TB+IYXWamM3kKT53UfHyM=)
                          2: TL-Meh5RdJ5l-MnmJkkhyn9w2W0.roa (hash: EzgEDoIb1JMS2mx6GVUnK7xYt0JpP8wDuzJo3jdvw+I=)
                          3: mABcrs9FblDGzEalDK2YOItidt8.roa (hash: Xv28kswuEga9eK7I4vSocGSlX6M7h4HWv2G4ZfF2/ck=)
                          4: mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl (hash: DPwvysPcHoCLl2qD+IT4gkdlmU/lregxs6hy38Opf2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:c2:30:1e:8a:c1:e9:a4:87:84:d4:30:b0:74:c0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
        Validity
            Not Before: Mar 29 18:01:37 2026 GMT
            Not After : Mar 30 18:01:37 2026 GMT
        Subject: CN=da3be08f5737d25967581d701054111ed2cb01a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:d1:04:ff:58:c9:85:c1:19:eb:92:b8:e8:
                    2a:a3:ee:45:6b:75:a4:1e:44:46:fd:ec:14:aa:93:
                    de:21:72:75:ab:db:02:63:5a:f7:71:2c:09:d6:2a:
                    74:44:02:dc:e3:92:fa:fa:9d:bc:d8:72:c0:81:bb:
                    6a:53:3a:a4:18:22:13:78:00:b2:bd:5d:68:cf:92:
                    22:1f:4c:e9:02:d2:4f:2e:f2:2b:df:82:e4:fd:33:
                    6f:9d:f2:f8:af:08:e4:a1:0c:b4:ce:1f:b9:0a:b8:
                    06:f0:a5:13:83:51:6f:84:56:70:26:24:dd:45:8f:
                    0c:59:53:98:3c:86:a2:62:a8:1d:e0:cb:37:06:17:
                    4f:20:f4:2f:1f:e6:b4:46:b2:fa:86:82:83:ed:ca:
                    b3:06:29:87:ad:86:44:27:23:e6:6c:55:f0:0e:f3:
                    a6:f8:47:92:1a:07:2b:75:0e:97:27:ab:b3:3b:93:
                    ff:5a:33:5b:3f:64:b6:6b:70:50:66:f6:d4:7a:e5:
                    a5:fc:22:08:3f:f1:7c:b2:59:41:05:ba:5c:7c:89:
                    8b:4a:a5:ea:c3:5d:37:3b:9a:2c:aa:d9:59:7b:aa:
                    76:24:a1:df:ba:0b:5e:b0:ed:02:8f:35:0b:b5:c0:
                    97:1e:05:c3:47:0b:ae:2e:69:7e:b5:82:f2:9c:39:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3B:E0:8F:57:37:D2:59:67:58:1D:70:10:54:11:1E:D2:CB:01:A4
            X509v3 Authority Key Identifier:
                keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:81:d0:d2:26:87:cf:46:57:5c:d4:89:5d:3a:d2:69:82:ac:
         14:42:21:82:de:26:02:36:31:3b:50:2d:a9:fb:a7:5e:63:7f:
         50:fb:ad:8a:94:ee:07:4d:62:f7:f7:dc:4c:d6:c6:94:fb:74:
         0e:cc:4c:ba:c9:f7:3a:3d:ff:23:48:d2:2f:9e:6f:1e:a5:a1:
         04:ce:e1:29:91:04:43:2c:fd:b6:e2:38:cd:c3:a9:7d:74:e1:
         c5:b5:30:9f:cb:05:21:35:1d:91:a8:ee:54:ab:ee:f1:b9:b3:
         df:74:c1:4c:49:50:3b:10:cc:24:6a:dc:b7:9f:2a:11:e6:c7:
         a7:56:a5:44:d1:76:bc:88:90:d7:d5:bf:08:9f:60:89:bc:37:
         6c:0a:26:5c:2a:d5:40:07:0c:cd:a8:b1:e5:44:c5:5a:1e:a3:
         5e:8b:4a:20:33:83:a2:ca:fe:45:7c:51:9f:a8:22:c9:0a:bc:
         31:11:d9:90:79:65:17:41:e7:af:0f:8c:c7:cf:a9:73:41:4b:
         6f:39:34:28:37:e8:2d:e2:f0:8b:80:bf:70:5e:d5:bc:a2:62:
         2b:b7:36:ab:6f:0c:c6:be:25:e7:fb:c7:84:74:59:19:b4:b8:
         40:d0:99:38:86:a6:0e:b8:2a:6a:7b:8e:e3:bc:55:55:41:e4:
         ee:fe:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:27 2026 by rpki-client