Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File:                     0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier:          VZlIKdlOUVHFBDkWpVJR+WKYy7jK8FYWq8qkwq/QaeU=
Subject key identifier:   5B:7A:43:8B:95:91:45:A3:5F:EB:52:4F:55:25:2C:CB:74:95:D5:2A
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer:       /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial:       019CF2DFA537563AA118177216E21BBD40D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number:          1869
Signing time:             Sun 15 Mar 2026 19:01:08 +0000
Manifest this update:     Sun 15 Mar 2026 19:01:08 +0000
Manifest next update:     Mon 16 Mar 2026 19:01:08 +0000
Files and hashes:         1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: ghWPwzjiLJsK+/W/pAhpbMLj3Wc1SZRHYExy4D9ejzE=)
                          2: dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa (hash: 4z4Cff5T7C1kMcuabXqlqC9vzDBKDpLEEFDPaDQ1Shs=)
                          3: lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa (hash: aE61BcYLJ+s8wneEHCKlvN2g4ojZACwiHGtJ3iEG3YI=)
                          4: qgZQRIByCSALcE73ENt-q4UPqdY.roa (hash: GR9g1THKzvFcNqQhXU+wmTdELTKbBSkjvvOetVfO1p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f2:df:a5:37:56:3a:a1:18:17:72:16:e2:1b:bd:40:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
        Validity
            Not Before: Mar 15 19:01:08 2026 GMT
            Not After : Mar 16 19:01:08 2026 GMT
        Subject: CN=5b7a438b959145a35feb524f55252ccb7495d52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:6b:19:35:3d:fc:fa:71:eb:48:03:ec:99:
                    9b:9e:eb:b5:0a:a7:34:21:2e:20:ce:19:73:b8:c3:
                    e4:0b:d3:45:3c:76:8b:3f:b7:42:5e:ad:4e:1e:7a:
                    c3:cc:6b:dd:84:77:35:76:84:d1:3a:f0:fb:ca:07:
                    21:ff:ec:5e:cb:80:b1:25:ea:dc:6e:41:1e:12:95:
                    d3:bf:c8:be:56:94:56:c1:cd:a3:36:f7:46:01:90:
                    00:4e:1e:cc:7e:f6:37:b1:3c:80:43:0e:71:09:98:
                    cb:2a:f8:bd:23:6d:fc:bd:27:5a:90:6c:62:a2:10:
                    06:3f:08:54:92:37:f8:25:ee:2d:34:1b:2f:88:f6:
                    a5:46:c8:26:aa:99:42:4a:6c:10:a8:2d:4e:8c:05:
                    42:f6:ca:4a:cd:f4:4d:22:05:75:64:b6:c5:b1:2c:
                    a1:73:ec:34:0e:81:75:11:fc:7d:2f:c7:35:c3:94:
                    53:ca:25:ce:0f:5a:90:6c:65:b8:a6:6d:d4:e6:ac:
                    9e:0d:f8:74:c9:d4:1c:d1:2e:35:43:8d:b9:25:87:
                    7f:b6:41:0a:da:d3:e5:f3:73:0a:fe:a5:73:c0:82:
                    8e:e3:f0:95:03:f0:6d:b6:8f:0d:df:e4:81:31:3b:
                    67:b7:86:ed:b8:cc:d4:d9:17:11:07:41:29:bc:e4:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7A:43:8B:95:91:45:A3:5F:EB:52:4F:55:25:2C:CB:74:95:D5:2A
            X509v3 Authority Key Identifier:
                keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:49:20:6b:84:a5:ae:01:c1:94:fb:3b:5d:7d:73:04:3b:6a:
         74:55:08:e6:34:d5:29:29:36:9a:79:22:e2:08:4f:a6:be:86:
         0e:52:d1:87:b2:4d:fb:02:fc:eb:a8:e6:83:dd:96:8d:e1:67:
         1c:3c:22:00:25:3b:10:e7:55:e6:32:70:10:49:98:f3:01:0f:
         cb:5b:b7:0e:a5:51:80:e6:6f:ee:7b:47:a8:79:81:1d:6c:f2:
         38:5f:d4:02:0d:5e:a6:f3:05:89:4f:f4:7f:7e:84:1b:c5:5e:
         3a:39:5d:35:f5:7f:63:56:72:1c:d5:73:1b:72:c2:89:83:cc:
         9a:6c:09:8a:ed:f1:b4:7c:10:78:e3:cb:a5:46:62:71:d5:36:
         ca:55:90:94:7e:e5:65:27:46:82:6d:ee:5d:ce:8e:09:bf:45:
         83:80:eb:7d:3c:62:46:f7:51:71:e1:c8:a5:04:aa:31:ac:69:
         01:47:81:52:e9:d6:6e:88:8e:3f:c6:21:10:29:bb:fd:90:85:
         39:99:8c:54:cf:20:83:05:64:2f:1d:93:00:a2:42:d9:9f:38:
         ca:fc:db:f7:cf:eb:6f:92:95:d6:ac:28:6a:3e:88:1d:25:a3:
         e8:80:11:4f:5d:bc:b8:f3:9f:fa:d8:77:02:65:3a:18:31:7b:
         2b:14:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 23:40:01 2026 by rpki-client