Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          V7HaYQcr+vPyJOxwxrShO2isCb3DjvsUGxCXPoE3LXE=
Subject key identifier:   FB:38:BE:4B:EC:9F:DB:A6:E3:9A:C2:A5:40:3F:86:32:EE:1A:07:AE
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       019CE4EC949FF6EF33051922403948D690FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          1663
Signing time:             Fri 13 Mar 2026 02:00:35 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:35 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:35 +0000
Files and hashes:         1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
                          2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
                          3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: fLW3stT2S0h9/MwJKaytFiQBTHXioFQR6TGSX8OxO7k=)
                          4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
                          5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:94:9f:f6:ef:33:05:19:22:40:39:48:d6:90:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Mar 13 02:00:35 2026 GMT
            Not After : Mar 14 02:00:35 2026 GMT
        Subject: CN=fb38be4bec9fdba6e39ac2a5403f8632ee1a07ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:8b:79:72:99:fe:40:67:95:4e:61:6f:c1:
                    b0:80:65:fb:c1:a5:61:5f:ad:d6:5f:e4:da:49:6c:
                    ed:62:58:30:dd:d4:b0:5e:e8:df:70:59:89:cb:62:
                    65:d4:f0:d6:b9:f0:34:2e:a7:8f:e4:45:cb:42:fa:
                    92:5b:cf:1a:b9:2a:af:b1:27:2f:06:c0:00:e9:80:
                    97:c5:6d:e9:85:e0:e0:84:5d:7f:47:d9:10:b5:85:
                    8e:07:9b:e6:fd:ea:e7:8b:3f:d1:74:7d:a3:82:4f:
                    26:75:2f:ba:1b:fe:b4:81:dc:f8:92:29:cc:0b:ff:
                    4d:93:ed:e2:0c:23:7f:e4:9f:5d:d6:cb:fe:fc:cc:
                    dc:f5:51:b3:7f:f4:23:56:0e:e7:01:1f:b6:27:3a:
                    88:ee:0b:61:54:b6:8b:6d:7f:18:9b:b8:26:fe:38:
                    de:fe:ef:e5:d1:38:b9:4a:51:90:bd:05:61:f5:4e:
                    44:82:d5:c7:93:d2:75:15:e7:a7:57:28:57:35:26:
                    68:af:36:62:c9:5b:d9:1c:7b:0b:8e:f8:d8:06:b8:
                    fa:93:4b:a3:90:3d:9b:97:9f:2f:af:43:63:9a:51:
                    60:1d:5f:71:34:be:7b:99:ee:03:72:c4:94:bc:4c:
                    a0:57:78:50:b4:b9:9a:e2:23:eb:7b:28:82:8b:4a:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:BE:4B:EC:9F:DB:A6:E3:9A:C2:A5:40:3F:86:32:EE:1A:07:AE
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:d3:f1:08:4f:24:8d:cb:61:b3:89:b0:f4:3d:cb:63:43:
         6d:b2:b1:ca:2c:5a:dc:f7:61:eb:f1:30:b6:65:cd:9d:21:e4:
         f5:a3:84:af:b0:50:e0:4f:ec:48:bf:d9:b8:25:c8:ac:9e:80:
         c8:c7:20:89:0d:fd:c1:a4:ea:39:92:be:f6:f2:3d:16:7a:77:
         10:96:68:58:a0:75:e9:9a:44:8b:13:d1:fe:50:1e:92:f9:34:
         8e:d5:b2:c7:29:ad:bf:e3:15:3c:81:74:40:f1:b4:a0:5d:8b:
         1a:21:fd:9a:5c:65:2d:75:6c:65:f7:ee:4e:b7:ba:17:d8:24:
         ab:4c:34:18:f3:63:7b:9f:6f:e8:3c:68:23:56:bd:27:c1:33:
         96:61:b2:9b:f9:88:f3:38:c6:94:3c:08:5b:a9:0e:bc:41:14:
         9b:8f:1a:98:5b:ea:08:d8:9e:12:fb:0c:95:e1:9f:d5:c6:81:
         44:d1:ba:7f:44:79:c1:e0:c3:53:55:1a:43:c2:45:7a:c7:05:
         03:b1:8e:4a:a3:d0:86:78:26:8b:7f:88:ae:1a:6a:a8:9d:90:
         20:05:c8:55:d9:a9:01:49:c8:c1:42:95:a4:e2:b8:cb:bb:f6:
         1c:be:8f:39:a4:55:55:7e:f6:d9:d7:9e:31:6e:5f:ad:e4:ce:
         92:9c:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:49 2026 by rpki-client