Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          gE/QdApiE/uFqf+poo0VWR2BlUD88O+UaFkj4BLM1yw=
Subject key identifier:   AB:5E:9C:92:59:E8:99:76:64:D5:91:91:E3:A9:4A:35:05:68:8D:08
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019D12A2448B668EAE07825F32B47E8B8C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          0629
Signing time:             Sat 21 Mar 2026 23:01:57 +0000
Manifest this update:     Sat 21 Mar 2026 23:01:57 +0000
Manifest next update:     Sun 22 Mar 2026 23:01:57 +0000
Files and hashes:         1: FQXBjAd3Dnc1J9QyFOiM0wLQijQ.roa (hash: 64JwonKPGO05f6cKy1kGP317euMNwxh4v/Kd97Zrixk=)
                          2: Hbb2tJo76oQa-wtw39RcEwlrnXM.roa (hash: zQKmQxHagrt8snJj/oZAtBi6Ifdl6mTU9nAZ70t8Osc=)
                          3: VNBOO8P6mkX9aew0cn-Kdehk6rE.roa (hash: b079DtAWi+r0sT4AC8Tk8haPaIa/jl6bQiwLRkAOdcE=)
                          4: XmOJsEGeK1X1k4sjTD8axMQNgIo.roa (hash: 62rzs7DtWMOgiQjH9Y4WSH2h0Vk4tGyGCEaC6rrLo7A=)
                          5: evZm8lwJ83Ra2gzpHn4lhHkJDzg.roa (hash: 54FCOYYN42LEii2+4I3cfpiMUraNJ7gBfh9JPajAgpM=)
                          6: gvnOqyA9yS9fC_0IndVo0nLKxi0.roa (hash: YIdIEEO7s/IVaedtwWuT+dklb2cM9dk0cP8F29Lf9ao=)
                          7: hgzWYX75YIVr9-Fa-K5n1VgEzh4.roa (hash: Tyh/z0nHaYyQHgjz1bbuG9Z7KXkDQwBPffpAutwwQZI=)
                          8: iB1yqzobHZgkeYyjgD24fdDMrSI.roa (hash: zZkMxbemW0AGoPi/lyDYstjw3mF8p7nYB8fNtwbbBHY=)
                          9: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: Ez1tPvps/jogzisn+IGc2hAKWTqUp38LAsV9x8SBNfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:12:a2:44:8b:66:8e:ae:07:82:5f:32:b4:7e:8b:8c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Mar 21 23:01:57 2026 GMT
            Not After : Mar 22 23:01:57 2026 GMT
        Subject: CN=ab5e9c9259e8997664d59191e3a94a3505688d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:44:ea:7f:a5:2c:9e:5a:80:25:bf:2f:ab:
                    b0:4c:1a:ae:45:ea:3d:9e:74:33:bd:df:eb:a6:ca:
                    ab:d2:da:23:d1:5e:50:47:a1:b9:45:c3:49:2e:9d:
                    89:1f:7c:92:ad:21:71:32:a4:54:2f:69:42:a6:b2:
                    12:33:ba:8e:90:8e:78:29:32:77:b8:06:2d:c3:82:
                    63:a7:dd:9b:82:af:52:ba:c4:76:73:fb:4d:5a:9e:
                    16:6a:cc:70:39:80:a1:cd:a5:58:f0:f8:ae:47:9d:
                    11:53:d2:5c:3c:ae:f5:d5:55:c9:25:11:00:6c:3d:
                    6b:a3:0d:dc:65:a6:83:14:90:65:64:ef:e1:af:d1:
                    94:87:10:a3:82:c1:12:76:ba:20:55:ee:2f:90:ea:
                    50:b1:5e:aa:14:25:9c:b5:68:12:7d:3a:59:e0:03:
                    ad:e3:53:d0:ee:f9:3f:f1:d0:76:a1:09:18:46:3f:
                    66:f2:68:49:c2:79:0b:26:ba:ae:48:de:bd:3a:e6:
                    77:3c:5d:76:c0:66:83:3b:93:b5:23:86:12:76:52:
                    c2:09:10:9a:de:36:a4:2d:40:bc:f7:92:aa:e6:0d:
                    4f:7d:83:d0:89:07:fb:8d:31:22:74:5f:67:62:7a:
                    9e:24:15:7b:75:90:ea:5d:34:5a:5e:6f:69:b3:f8:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5E:9C:92:59:E8:99:76:64:D5:91:91:E3:A9:4A:35:05:68:8D:08
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:12:c0:09:46:e4:56:4c:bd:6c:e3:11:c2:99:ec:be:cf:33:
         3a:82:55:41:12:6d:2b:e4:d9:53:53:4e:01:9e:7f:1c:e6:26:
         f4:e8:68:ba:ba:8a:27:08:7a:b5:77:f3:7e:34:60:09:c2:7c:
         62:fb:ec:ac:28:dd:42:36:00:fe:02:7a:a2:12:15:2f:a8:71:
         55:c5:ba:bf:1d:20:ef:5b:e1:9c:09:65:a3:e0:a1:07:04:3a:
         6f:1b:0d:62:61:1e:5c:b2:10:e1:b5:86:c7:e2:4c:25:18:08:
         27:16:83:e6:72:f0:21:d7:fe:db:9c:db:f2:f5:00:e5:08:b9:
         7e:4a:f6:85:05:d0:88:ea:0d:11:03:61:8a:56:fb:c2:70:ec:
         30:25:c2:e3:6f:d5:06:fc:3d:5a:fb:34:02:c7:e4:46:d6:ab:
         1c:02:7f:6b:ab:cd:a2:fd:2d:da:c6:2d:e9:80:84:6b:3e:2b:
         be:5e:4c:ff:bb:61:2a:e1:03:0b:04:e3:ac:0b:52:ad:89:b5:
         06:51:6c:8f:cf:4e:24:9c:29:cf:88:49:92:80:4a:64:d0:6d:
         33:0a:f6:04:27:ea:5d:45:df:6f:86:1c:d2:4f:7c:65:bf:21:
         16:f3:e5:9b:42:3f:03:23:d6:a9:50:dc:72:6d:2f:ef:99:49:
         d6:9e:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:37:47 2026 by rpki-client