Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          /MDjTpo43mumO3NOUvwoxioHCN6BAQnwyhQl99iWId8=
Subject key identifier:   0B:53:36:F4:5E:D3:46:19:49:7A:F4:C6:F6:0F:D8:52:3D:02:B4:01
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       019D3074D5C5191D12B5523FA8065E3CA165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          1895
Signing time:             Fri 27 Mar 2026 18:00:56 +0000
Manifest this update:     Fri 27 Mar 2026 18:00:56 +0000
Manifest next update:     Sat 28 Mar 2026 18:00:56 +0000
Files and hashes:         1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=)
                          2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=)
                          3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: CKNNzQSvcYrT091X84AiQLn9KT+CgSXFtSsT2ldPgoU=)
                          4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=)
                          5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 15:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:30:74:d5:c5:19:1d:12:b5:52:3f:a8:06:5e:3c:a1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Mar 27 18:00:56 2026 GMT
            Not After : Mar 28 18:00:56 2026 GMT
        Subject: CN=0b5336f45ed34619497af4c6f60fd8523d02b401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:a0:a6:88:55:bb:1a:30:bd:40:6b:20:66:
                    3f:bf:18:a9:10:fd:49:6f:0a:15:4e:8f:5b:3c:57:
                    0b:a0:ee:c1:8f:7c:d5:83:75:b4:57:40:88:d0:de:
                    06:77:60:7e:ef:54:39:65:76:74:61:9d:7f:83:4a:
                    7d:69:d5:99:a3:e9:eb:c6:bd:36:3f:ae:4f:47:1c:
                    2c:de:b4:a0:1b:5a:c3:cc:b7:a1:c9:9b:60:9f:79:
                    4e:dc:1b:7f:74:39:98:c6:e9:07:0d:71:cf:82:ac:
                    ed:2c:60:b6:53:c4:58:c9:5a:c6:cd:51:85:a0:fc:
                    76:b8:94:84:d0:aa:e3:a0:9e:eb:f7:d9:6d:2b:03:
                    13:47:71:6e:14:8a:11:ad:11:cb:95:e7:d4:04:1e:
                    d5:af:cc:41:18:ed:c0:fc:a8:c8:92:05:7f:36:02:
                    f9:1d:0b:39:6f:5d:34:21:c1:c0:03:20:17:9e:e7:
                    33:84:d8:45:69:aa:00:c2:dd:e8:8a:e8:db:8d:3f:
                    dd:38:57:7f:02:3d:9c:ee:b6:07:61:2c:48:17:ec:
                    63:bc:33:8d:9c:a8:86:5e:58:15:4c:1d:b0:03:19:
                    82:c1:f0:ed:9f:cc:59:31:89:3b:c2:89:63:84:9a:
                    77:9b:40:25:85:b5:57:8f:fd:28:b2:7b:3e:43:41:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:36:F4:5E:D3:46:19:49:7A:F4:C6:F6:0F:D8:52:3D:02:B4:01
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:f6:4a:e1:b2:c3:e8:3f:28:a5:fd:a2:67:41:fa:06:2c:
         23:6d:47:a5:bb:f2:ce:3e:9e:be:a9:88:67:8a:e6:00:d0:69:
         2b:22:8a:02:d5:41:83:83:76:e2:e8:da:af:86:0f:3a:7b:e9:
         04:34:22:02:7b:6c:8c:25:e5:bb:8d:c7:ba:e2:43:18:ed:5e:
         f9:de:4d:24:8c:f2:08:4b:5d:af:c8:6e:22:9c:de:0a:2f:ee:
         ce:45:8b:16:c3:2a:cd:ab:19:b9:13:3c:b7:56:17:14:dd:9a:
         0c:8f:3c:87:c0:62:0a:ae:9e:b7:09:c2:a1:f3:db:ca:f5:8b:
         dc:44:e6:4b:83:07:c2:71:5d:c1:7c:4a:65:40:f9:41:2a:23:
         47:d5:1a:5d:3d:01:09:e7:92:d4:0c:75:b9:0c:8a:aa:f1:47:
         ad:2b:01:a2:a1:08:a8:09:b2:e6:09:cc:d3:82:cf:fc:bc:e2:
         7b:de:b5:0e:ab:4d:7a:ce:61:4b:24:50:17:a9:a4:c5:c4:46:
         60:16:89:04:b7:f7:ab:b8:20:45:fd:40:b0:a1:23:47:f1:df:
         b1:96:2d:82:21:a1:9b:5d:2a:c8:b3:e1:34:31:8b:ae:7d:bf:
         22:43:a0:79:64:f0:19:f3:48:d3:2d:09:2f:67:d9:ef:bf:7d:
         a2:c2:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:25:17 2026 by rpki-client