Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          VhSPog1+NdNoARv+fjG71h6xCC7Q7Pt4Pz1zNJBaP4U=
Subject key identifier:   6D:5E:A3:EC:97:AB:68:76:7E:38:F8:04:6A:A4:A6:60:49:CD:C9:F0
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       019D37C094735292B2196411BD2885498959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:01:00 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:00 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:00 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: MVMzqkIXb/D1x12GyQQmdTEN70qvf6ODP6cDqFkqJfk=)
                          2: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (hash: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0=)
                          3: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (hash: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA=)
                          4: kj8-3DtT32XqscwKCiQPzi9o7X4.roa (hash: VlQ7LnPKpNwk4BdUZ5Ryr+mzC2TSKzAr4UDFF48gtfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:94:73:52:92:b2:19:64:11:bd:28:85:49:89:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Mar 29 04:01:00 2026 GMT
            Not After : Mar 30 04:01:00 2026 GMT
        Subject: CN=6d5ea3ec97ab68767e38f8046aa4a66049cdc9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:e2:09:52:39:d6:f3:c1:5f:f8:94:2b:df:
                    f9:5d:2e:c3:0a:61:39:d3:78:88:33:ec:05:18:37:
                    aa:ad:6c:ba:7f:cf:85:38:62:4b:b2:77:16:0e:6d:
                    30:8a:8c:0e:b0:c0:56:24:fb:05:ec:db:30:37:0b:
                    12:d1:fb:d4:5e:66:a3:65:ae:f4:29:80:38:6e:a5:
                    3f:d7:55:4c:22:bf:50:f5:4e:78:dc:4b:9f:42:bc:
                    63:6e:0a:e9:35:28:45:ce:4b:90:af:b6:f0:4b:f7:
                    b5:5a:5d:f6:1b:44:d4:ca:4f:90:cc:89:a7:2d:5c:
                    e6:a1:e1:5e:8e:ae:ec:86:c3:0c:df:84:f3:71:f8:
                    8e:bc:f9:3f:90:1f:26:cc:60:07:04:f0:7d:eb:46:
                    3c:f0:84:7c:3e:a8:bd:99:80:57:20:9a:70:c7:f9:
                    09:8c:01:3b:b4:b9:84:f6:04:0c:01:24:fc:9d:11:
                    7f:85:9f:d7:78:95:38:13:ef:e2:5c:45:ea:75:70:
                    de:ce:9e:1e:2a:f2:03:14:40:41:0b:2a:52:7a:33:
                    bf:dd:a7:1d:53:93:c6:54:6e:b4:1c:cc:33:4c:27:
                    71:03:c3:5d:89:69:f4:d8:83:6f:85:10:5c:8b:c8:
                    68:fe:47:90:6a:92:82:ef:96:f9:98:e7:0c:35:34:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5E:A3:EC:97:AB:68:76:7E:38:F8:04:6A:A4:A6:60:49:CD:C9:F0
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d7:f5:5a:fc:d8:9a:65:bc:93:6e:8c:c6:47:9c:1e:78:74:
         7a:69:6d:20:1f:bf:15:40:03:00:39:7e:05:91:a7:4b:e6:ed:
         d6:84:b5:5b:04:9b:dd:36:4f:05:ac:f7:af:70:7d:16:ef:14:
         e4:ab:01:1f:f9:ba:95:06:de:1c:6b:96:bc:59:cc:94:8d:51:
         cb:4f:83:dd:33:be:96:43:0e:af:db:46:f2:c4:88:04:bc:52:
         ee:63:00:23:41:00:41:f8:c2:4b:1a:39:69:5f:89:16:20:69:
         56:60:70:a4:28:fb:f8:1b:a7:23:b4:71:cf:8f:c6:bf:2a:27:
         d1:23:1a:5f:33:4e:e7:1f:d9:28:f1:fa:d8:a7:66:fe:d1:39:
         11:40:03:6e:a3:51:fc:8f:5e:46:91:5d:cd:71:57:b1:62:dc:
         97:1c:54:ba:e8:f4:ba:71:52:0a:53:f1:43:1b:94:7c:51:66:
         65:ca:55:b6:28:8d:5f:b5:ab:2b:f6:b9:ac:03:62:7a:98:82:
         0a:7c:9d:a5:37:60:68:42:4c:08:e3:46:67:a6:dc:24:19:0f:
         d3:c6:a8:94:33:a8:cd:40:57:e4:ad:01:99:90:ef:0d:db:15:
         65:a7:d8:89:f0:00:b5:a6:ca:87:7a:83:3a:83:9c:ba:1d:e1:
         c2:23:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:42 2026 by rpki-client