Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
File:                     sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft (raw, json)
Hash identifier:          4l9QOSNBnPMpTkQ8CCrgH0GMbFr3lQ5yY4915NJ4g+s=
Subject key identifier:   04:37:AA:CA:91:D3:A2:10:A1:4C:07:12:F5:7B:35:E7:3E:5E:3F:3F
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Certificate issuer:       /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial:       019D37F6DE2CCD0305D15CAD34DFB22AEE82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
Manifest number:          0A9D
Signing time:             Sun 29 Mar 2026 05:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:18 +0000
Files and hashes:         1: gUx1Nw3tICZQ91Z66Dc_ZM3oKZU.roa (hash: qMVuUtEMmH0F6gZUJxcIjMLQShefrpmgEA8LuMyQ4iE=)
                          2: sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl (hash: qMmeuMUMVKBXnRIK7XTfsnrF+AU+zyh9j5uWjMK1ZDg=)
                          3: yggEv9ui6ICKlWbapXbZI_19UxI.roa (hash: wbaiUJKmCM34k4K4JfRSlpVn14tN3ETSC3SnnG+xIY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:de:2c:cd:03:05:d1:5c:ad:34:df:b2:2a:ee:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
        Validity
            Not Before: Mar 29 05:00:18 2026 GMT
            Not After : Mar 30 05:00:18 2026 GMT
        Subject: CN=0437aaca91d3a210a14c0712f57b35e73e5e3f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:ab:13:7b:4d:01:d1:0e:51:11:b0:34:3e:
                    e4:e3:b3:e8:b4:88:08:69:ad:8f:f6:1d:08:78:6d:
                    69:c3:71:de:e6:d2:28:bf:9c:13:43:58:e6:4e:ab:
                    ad:32:0e:a9:34:02:88:89:ea:f4:88:fa:e1:b9:d5:
                    ba:0e:7a:e3:0c:f6:56:c8:b8:1d:79:5f:01:4f:d7:
                    d6:7a:a9:f4:70:6e:9a:97:60:95:4d:5a:b5:5e:72:
                    b5:24:25:ec:db:9e:c0:b2:19:5e:23:ad:12:2f:0a:
                    3d:33:cf:f8:5a:e0:bf:c5:3d:0f:d1:5f:c4:15:1c:
                    44:d0:3b:5d:0d:73:ed:cc:5b:99:b4:89:83:a1:e0:
                    61:33:b4:ce:4f:45:b8:bf:da:96:d9:1a:ad:4f:ae:
                    ab:76:fb:8e:5a:d7:78:69:b7:84:94:fc:7e:29:76:
                    59:47:52:f2:3b:13:7b:ec:bd:ed:3e:21:77:7e:62:
                    9b:7b:2a:60:06:36:ae:41:16:41:ba:fd:99:a6:95:
                    91:46:75:15:ad:63:93:13:e3:a8:d0:84:77:36:36:
                    7f:c3:06:5e:e4:da:b4:2a:38:a4:1c:b7:dd:49:9a:
                    78:e2:2a:e3:32:a9:cf:6d:32:c7:1d:86:f3:e5:93:
                    24:63:f6:b1:4b:db:52:bc:15:3c:29:6c:31:af:55:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:37:AA:CA:91:D3:A2:10:A1:4C:07:12:F5:7B:35:E7:3E:5E:3F:3F
            X509v3 Authority Key Identifier:
                keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:60:7f:d9:fc:13:e4:0c:d3:a4:56:75:42:ec:57:70:75:f0:
         20:eb:59:be:92:56:98:88:04:cc:4c:43:fe:4d:d7:e6:93:0f:
         d8:d3:43:26:36:41:3e:19:e3:8b:1a:9c:65:e8:4b:4c:63:f1:
         fd:ef:ae:30:7c:f3:aa:d7:09:1d:9f:b0:e6:c3:25:23:c7:da:
         ea:d2:2e:54:91:df:47:8d:47:d3:13:bc:c0:6a:1a:af:b2:75:
         56:5b:62:bc:9e:f9:42:db:e3:03:40:4b:0c:95:b2:eb:e7:9b:
         fb:46:ee:38:4f:7e:8d:ed:e3:5a:83:a0:05:58:1a:0f:bd:d5:
         fa:4f:ee:e3:d8:d8:49:4d:09:39:e6:9d:90:d4:98:22:a7:11:
         5f:ed:a1:bb:80:3b:45:77:f1:43:a8:a7:98:72:84:cf:3d:d9:
         3b:a7:e9:3d:ff:f7:26:be:d0:bb:70:89:28:40:71:fd:93:fe:
         78:d9:02:49:0b:d1:cd:15:fb:1d:04:44:8e:e0:f3:41:b5:de:
         39:33:3b:8c:05:46:1a:02:0e:d8:9c:eb:69:fe:76:d4:c0:dd:
         59:db:05:b6:a7:0d:86:3f:ca:20:a8:9a:6b:2f:73:be:a3:12:
         43:4e:db:30:c9:9a:cd:54:ba:48:37:48:d6:14:79:33:18:6e:
         33:e8:c4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:17 2026 by rpki-client