Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
File:                     dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json)
Hash identifier:          bBkgZtZyh0Q+vY445viWjfIIpvq46p14py1nV7jMWjg=
Subject key identifier:   CE:99:4F:EB:12:2C:DE:F1:04:59:C7:53:14:4F:26:65:5C:63:36:45
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Certificate issuer:       /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial:       019D389BF79678927DBE78D497CEC1410033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
Manifest number:          04FE
Signing time:             Sun 29 Mar 2026 08:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:38 +0000
Files and hashes:         1: RIKPxzN612TS7QdYx0yhnbfdgCk.roa (hash: 07oY6OiufBnwXNFc8F9BHYyCv8CtgRF58yYSOyMr920=)
                          2: SLrQ1knzFhgHD__1U04Q5GQJX3U.roa (hash: AVeAooocOWwYiMM4BHVrd1TGE917Rw4KZCVXlSQ+oDM=)
                          3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: l/Q+6rxnFU9BcQugtLkZ4dcUnVmCf3J9lnhaRxKjZwo=)
                          4: ryBPgXvA-kuwL8ute7lp1pTeuxA.roa (hash: aMotHhiy0ZyL5y70ElZdApnRGo5oHKFlodbC24Zl6LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:f7:96:78:92:7d:be:78:d4:97:ce:c1:41:00:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
        Validity
            Not Before: Mar 29 08:00:38 2026 GMT
            Not After : Mar 30 08:00:38 2026 GMT
        Subject: CN=ce994feb122cdef10459c753144f26655c633645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:34:c2:3b:40:cf:37:d4:27:e0:86:1c:97:
                    3e:d7:bd:da:16:aa:8b:79:c4:d0:65:e0:e8:cf:57:
                    82:7b:b8:c2:11:64:fb:af:cb:83:e7:43:18:7c:03:
                    af:4d:4a:b4:94:bb:cd:12:f6:79:cb:63:59:a3:4d:
                    cf:5c:4e:e4:d0:3d:33:23:c3:ef:2d:1b:ea:16:01:
                    ae:57:00:d7:c4:8e:a3:8f:49:9f:3f:ec:60:be:c8:
                    ea:9c:1a:d5:c7:50:d7:ec:1e:ef:a2:c0:27:b1:f2:
                    92:eb:d8:df:66:94:3f:4f:2c:eb:97:59:fa:9e:20:
                    38:fd:ca:9b:22:84:04:64:bb:83:23:e2:b4:85:d0:
                    02:21:dd:7e:16:38:3f:fe:76:28:44:7c:89:96:1a:
                    50:70:38:bb:c6:b6:72:1b:22:bf:29:a5:ee:55:d7:
                    27:50:92:d2:0d:bb:c1:86:2b:63:f0:53:e4:5d:a1:
                    e2:3b:a0:ed:83:7f:10:bf:03:54:63:9d:e6:06:54:
                    6b:26:90:98:e4:67:9f:b0:78:ff:22:ea:56:34:38:
                    7e:fe:d7:a8:0c:2e:be:a3:e3:32:a1:4d:29:73:5b:
                    65:b9:ff:b7:e9:dd:53:59:51:e3:21:bb:5a:c2:7f:
                    29:c1:35:1c:ff:aa:30:03:ca:6d:3d:db:ee:1c:71:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:4F:EB:12:2C:DE:F1:04:59:C7:53:14:4F:26:65:5C:63:36:45
            X509v3 Authority Key Identifier:
                keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:22:3c:ab:73:f3:a7:35:2e:44:8c:78:cf:b7:e6:4f:e3:
         5f:8b:7c:27:8e:2c:d7:fc:11:36:64:ab:36:ec:2b:5f:d3:5b:
         99:f4:0c:3c:9a:cd:26:67:90:a1:96:38:69:96:a1:03:58:2b:
         81:cc:9c:a9:96:dc:cd:03:81:29:13:4b:f9:b3:33:91:2f:cf:
         5f:75:7b:d3:5c:e7:d8:b1:55:2a:14:07:b6:e8:84:bf:0f:fb:
         8e:2b:0e:65:8e:3c:c9:fa:e8:df:18:ff:f6:35:82:01:16:4f:
         d8:69:1a:2a:9a:34:c5:c3:4d:40:bc:61:cf:4f:08:22:d6:cb:
         10:e0:72:34:6f:33:b7:17:a6:d4:e4:ed:36:29:ee:a1:53:76:
         74:21:d7:99:32:3c:b9:c0:62:19:6e:5e:51:e9:bf:27:5b:3e:
         52:f9:33:61:9e:33:f2:df:a3:74:0c:a4:a8:5d:3a:c2:54:af:
         b6:d1:97:5c:6d:bd:aa:65:91:e9:ec:81:77:fd:b9:5f:c9:a9:
         3b:6e:fa:07:d8:f9:78:8a:56:b6:78:f5:da:25:0a:4e:36:eb:
         e9:ed:f5:02:14:9e:41:b8:79:73:79:16:c5:69:39:1d:7e:85:
         52:82:0c:25:ae:dd:cd:11:bd:af:88:4c:8d:dd:bf:db:e9:51:
         3e:79:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:38 2026 by rpki-client