Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File:                     A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier:          b7lEHQM+qzJfpu7bcRa7FfPZFzCz5x0z+2UEBXs9ofw=
Subject key identifier:   9B:DE:72:7B:06:D2:68:6C:2C:6A:43:3A:CE:BB:51:41:0A:71:C9:10
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer:       /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial:       019CE4EC35183FF4D966F1B31091083FFFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number:          1375
Signing time:             Fri 13 Mar 2026 02:00:11 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:11 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:11 +0000
Files and hashes:         1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: RLxb5d4vStVUbmawAt01IG/FRcbFQVFG0+Ha+Kc9GDQ=)
                          2: WxImH-LXs0d6zerX8rbJADEs0b4.roa (hash: 1hpI1k0NLPuLhvebFCrou0mJyF8538s4/VSeky9KzZw=)
                          3: bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa (hash: j5UJJAXCgmYG9UJK159eJdYgk2A4TavF4TUvXoNb9wo=)
                          4: jEFjyAFrXDcV4VZRl6Fg4c-tBbI.roa (hash: SCNZ1jcp85B9JQOpcfN9KIw7MGVU7KDV6MeoqHXZssQ=)
                          5: x9MYFIf2PoZ4-7JYUxzgREaOECQ.roa (hash: pgslKdJlC5emb7XS7811wddrmA1E6OgVQZWwLKWbTac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:35:18:3f:f4:d9:66:f1:b3:10:91:08:3f:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
        Validity
            Not Before: Mar 13 02:00:11 2026 GMT
            Not After : Mar 14 02:00:11 2026 GMT
        Subject: CN=9bde727b06d2686c2c6a433acebb51410a71c910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:b0:8d:f2:98:d5:8e:e6:81:d6:4c:28:79:
                    b2:cd:ae:d5:e3:0d:51:55:12:62:21:b5:64:8e:db:
                    ac:3f:48:b6:94:83:32:82:6b:1a:50:a4:06:db:9a:
                    14:aa:0e:9b:71:eb:05:9a:df:28:21:41:a3:30:ca:
                    ab:e2:70:ec:7a:e9:7f:e1:bd:79:dd:41:02:4f:ac:
                    88:d2:79:8f:26:65:41:a6:19:97:2a:ad:d9:df:d3:
                    aa:e4:f1:ba:68:eb:22:55:a6:b1:75:38:bf:35:d7:
                    08:82:43:3f:ce:71:4d:b6:6e:c9:3c:8c:41:4e:f6:
                    3a:ac:d9:1f:39:b4:cd:2e:1e:df:b4:7c:b5:7e:31:
                    6b:40:6c:de:41:46:48:8e:30:17:89:d3:5c:0d:50:
                    ae:61:ed:21:c4:96:16:06:d8:04:fe:53:11:d7:46:
                    1b:31:bf:8e:8c:e6:95:e3:53:38:d3:7c:48:3c:59:
                    7b:42:8f:b3:42:18:dc:02:83:da:84:61:41:1c:07:
                    d7:80:02:d2:59:c6:3d:05:af:30:97:56:00:cb:12:
                    de:50:17:55:be:09:90:26:b7:e8:ff:43:8a:17:9e:
                    76:62:4a:0d:63:8e:bf:fd:bc:c7:6b:fa:da:a5:db:
                    ff:4b:03:bb:80:75:8a:8b:65:f4:00:08:0a:2d:24:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DE:72:7B:06:D2:68:6C:2C:6A:43:3A:CE:BB:51:41:0A:71:C9:10
            X509v3 Authority Key Identifier:
                keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:e2:83:1f:b6:a0:52:a1:8d:37:54:0a:9d:ff:6b:96:1e:
         39:1b:f9:4f:fe:d6:ad:5d:73:c0:58:c8:1e:79:a0:12:8e:7e:
         6a:ae:d5:81:8b:1b:51:a1:6f:77:89:c2:ca:34:c0:93:0b:36:
         49:35:10:19:ed:dc:53:e0:11:9f:97:14:ee:df:7c:a1:b6:16:
         b5:3e:04:10:fc:9a:2d:c0:e4:b6:d6:28:c0:af:f3:c9:d4:e7:
         be:d7:0b:d7:2c:ef:7b:8b:23:91:f3:7d:eb:8d:02:15:f8:6c:
         1a:d7:1e:96:af:64:a4:7c:a5:c6:89:9d:ae:b5:fc:29:79:be:
         29:d3:84:04:f7:78:64:9e:fe:f1:42:20:5b:a6:7e:12:77:b4:
         11:7f:8b:9f:f5:40:36:e2:4f:90:c2:2b:a5:3d:2e:25:b7:29:
         30:c4:dd:51:26:39:f0:94:25:3f:6a:37:d3:b0:b0:08:9d:ab:
         db:bf:56:a5:0d:b8:17:58:73:8b:75:0d:35:39:22:4e:59:6f:
         df:0b:21:9c:74:f9:f9:76:f1:2d:24:cc:26:88:90:57:01:d6:
         f5:82:e5:7c:e9:76:ec:d1:e4:11:7b:ad:3d:d6:ea:e3:77:7c:
         62:3d:1d:76:3c:32:63:e1:c8:bc:84:6f:34:77:4c:fe:8b:01:
         93:e5:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:22 2026 by rpki-client