Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File:                     svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier:          dAfPZc22Vus6c0PqAQvba9gBlil5tbsssMVUFN4wXUQ=
Subject key identifier:   B1:57:E7:9C:C1:EB:F2:AF:26:C8:9C:81:71:D8:51:BE:50:6B:2E:65
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer:       /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial:       019D37F7350496DF7ADF02EF64AEED7702FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number:          1135
Signing time:             Sun 29 Mar 2026 05:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:40 +0000
Files and hashes:         1: PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa (hash: NUmc1QVEGYCgpRZW6pi+g/fleA3EF++2rMWcLNwzwmc=)
                          2: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: 3xC4KPsUX1oAREmukeC4V25f9WP49vuFRulfK+yR+eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:35:04:96:df:7a:df:02:ef:64:ae:ed:77:02:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
        Validity
            Not Before: Mar 29 05:00:40 2026 GMT
            Not After : Mar 30 05:00:40 2026 GMT
        Subject: CN=b157e79cc1ebf2af26c89c8171d851be506b2e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:72:3d:8f:b9:cc:01:fe:9a:0a:9d:0e:f7:
                    31:ce:2f:8a:6f:05:53:6f:26:8f:4c:12:f4:28:17:
                    d5:84:39:4a:06:14:c9:a4:fd:8c:df:db:b3:2d:b5:
                    b7:bd:7a:a1:46:f0:6f:8a:33:0e:0e:d7:ba:54:6f:
                    59:61:27:ea:f7:d4:a4:a1:6f:f4:cd:eb:ed:0d:fe:
                    39:60:3a:bb:1c:7a:97:48:1c:6b:fe:0e:22:33:27:
                    cb:c2:44:3a:9e:50:fd:04:c2:14:c9:d0:81:73:e0:
                    ca:c1:98:dd:a8:3a:4a:45:9a:0f:2a:df:34:1f:04:
                    0d:e4:74:e9:4f:39:b2:93:1e:f3:21:70:20:9b:d4:
                    a5:86:5a:74:a5:ec:b2:a6:5e:a6:12:1d:f7:ca:03:
                    82:22:e6:61:ab:9b:79:c5:3b:04:6e:76:57:4f:47:
                    c1:68:da:b6:9a:f0:87:dc:c9:bb:83:04:05:6a:c9:
                    92:79:b9:62:30:96:ab:e5:cc:f0:85:33:fa:77:8a:
                    67:79:6e:df:35:ad:eb:e6:92:8f:63:a3:fc:a3:be:
                    f0:1d:71:7b:25:41:dc:d6:c7:81:f6:e7:a8:79:3d:
                    79:18:ee:2c:ee:48:4e:3a:4c:9a:23:9c:66:f8:c7:
                    ba:95:e0:dc:27:ef:52:42:ac:e0:6d:01:42:27:62:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:57:E7:9C:C1:EB:F2:AF:26:C8:9C:81:71:D8:51:BE:50:6B:2E:65
            X509v3 Authority Key Identifier:
                keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:da:9a:1f:f2:49:54:4d:aa:7d:62:ff:3a:21:25:9d:68:
         8e:bc:3a:7e:91:ab:1c:d2:ce:62:26:ad:8b:77:1e:7e:98:e3:
         d3:4a:b2:81:44:ec:f3:05:a3:90:b0:c8:4d:dd:d1:05:b8:6e:
         fa:84:b7:87:37:87:11:33:59:e7:d1:ca:cf:08:5a:ef:ef:56:
         81:d0:76:49:b5:b6:a4:49:40:f9:94:e9:5b:e5:33:55:57:30:
         b9:33:11:04:e0:b8:ac:a2:10:0f:9f:20:f4:b0:76:fa:48:93:
         c0:c6:b6:93:b7:d1:fa:68:c5:87:85:4c:71:b3:4f:7e:56:cc:
         56:06:fc:56:50:19:b5:dd:77:98:3a:20:65:00:58:2c:5e:75:
         85:0e:0f:8b:e9:ce:52:5e:8a:7f:ec:54:bd:a8:1d:81:0e:e3:
         17:4f:32:fd:36:c0:0d:4b:04:3e:9f:1a:f4:60:ba:f9:ae:3d:
         55:cc:83:8f:57:23:28:c7:e9:58:1a:48:6b:60:cd:fc:5e:2c:
         00:74:d1:23:1f:ba:02:60:a0:2e:36:09:4e:b4:13:6b:f3:9d:
         0b:37:63:b4:24:c5:74:78:07:ca:8b:70:11:87:4a:b3:51:af:
         e9:c7:63:76:17:f6:01:0c:d9:47:ec:a0:0e:66:55:60:1a:2f:
         29:e4:87:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:44 2026 by rpki-client