Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File:                     4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier:          l/UsU3QaNGrW6W52KsOw2ruvZ1QPsQQSZ2XZ4UIa2Sw=
Subject key identifier:   13:F2:F1:CF:D4:0B:95:89:F5:BD:BB:EB:35:DB:8F:69:50:15:C4:25
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       019D0D448A267A7470E5DB9A9A69E98C356C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number:          1321
Signing time:             Fri 20 Mar 2026 22:01:28 +0000
Manifest this update:     Fri 20 Mar 2026 22:01:28 +0000
Manifest next update:     Sat 21 Mar 2026 22:01:28 +0000
Files and hashes:         1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: 6kQfwQNMqH3XDDsueVPC/U8v5zZCsRchzesRl0l0W8M=)
                          2: B4XqtMRju7ct1VHWSys1ZmsVDvA.roa (hash: dT4gZYld/5NxZfQ/re1cqoiLPKYDPvy18QhmjeiLxrE=)
                          3: JtnFvVL5luwjJsUrKE_PkZqBzv0.roa (hash: bNLA85FkwBGVG4amTnLndpNSGrwg8SVdNJn4yP+K6lQ=)
                          4: _biLnM_coqEwA_A8eVlJQZHQt48.roa (hash: 5mMri1uaYw577nOuv+pbuYsKwcFaxTbTyFZQFkO22x0=)
                          5: cvu881wX1J1NkelwvHsakF8V-nk.roa (hash: 3p0KxNsFZi7KD2HoriAn/X0d7O0pV7iqm6G3fj1N+gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0d:44:8a:26:7a:74:70:e5:db:9a:9a:69:e9:8c:35:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: Mar 20 22:01:28 2026 GMT
            Not After : Mar 21 22:01:28 2026 GMT
        Subject: CN=13f2f1cfd40b9589f5bdbbeb35db8f695015c425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:c0:60:30:3e:bc:d5:27:50:ae:6c:b0:2d:
                    73:07:b5:49:a2:a1:ca:7f:89:41:87:ca:e8:4d:55:
                    e9:94:5d:46:b9:72:3f:91:d8:a4:c5:3f:4b:32:75:
                    9d:fa:1b:e8:cc:6b:5f:9a:b3:04:0b:31:d7:c0:45:
                    35:26:52:d5:83:47:0e:b3:53:d1:14:e5:db:f2:5b:
                    21:3a:bb:9a:2b:0b:57:a1:09:a0:07:0d:18:0b:54:
                    e0:f8:65:36:03:ef:89:7d:e7:3c:4d:72:7f:d4:18:
                    b0:58:b3:44:c7:7c:70:6c:d7:8a:de:84:55:05:f9:
                    37:a4:12:f5:d4:c0:39:38:8b:fa:27:8f:dd:35:84:
                    47:2d:fe:58:37:c5:fd:f7:2c:17:a0:78:6e:10:f7:
                    75:81:08:d0:4a:5f:2a:65:1f:fb:34:9e:96:de:d4:
                    dd:0e:ac:18:9f:a8:9f:67:a5:99:c4:d4:a5:8c:5d:
                    48:7d:f0:51:e1:a9:c3:ea:a8:28:c9:a5:fb:2a:cb:
                    77:95:de:89:b9:23:c6:09:98:a5:99:cd:f2:3c:b0:
                    c3:c5:12:20:18:4a:a9:6d:7b:3a:83:a6:fa:99:35:
                    df:16:5f:6d:8a:c8:c5:87:b7:28:81:ae:f5:e3:26:
                    8b:41:d9:f1:87:f9:9b:03:07:ee:8e:99:9c:2b:9b:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:F1:CF:D4:0B:95:89:F5:BD:BB:EB:35:DB:8F:69:50:15:C4:25
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:09:11:82:9f:ae:46:33:84:af:c3:c3:68:85:0c:98:b1:
         55:70:8c:2c:98:7f:46:7b:52:a2:dc:75:5e:e9:1a:52:cd:98:
         e5:c7:12:7e:2f:4b:62:24:cd:15:9e:67:6f:a2:79:22:ea:65:
         09:ba:5b:e1:70:35:86:e7:fc:0d:11:45:02:04:9a:7a:19:61:
         76:5d:23:d7:f3:c4:39:91:ab:97:f4:4b:7e:67:58:fb:6c:d1:
         30:ac:48:cb:db:24:14:40:ab:be:66:95:99:08:a1:87:2a:e0:
         26:b2:b0:6d:10:bd:d1:c0:4c:83:2b:57:39:0b:17:a5:00:1b:
         22:c0:bb:77:2f:c1:26:9c:ef:1d:a8:8f:ef:18:c9:3b:99:51:
         fd:54:50:be:b0:64:8f:71:97:8a:f2:1a:28:ca:6f:62:f0:2a:
         33:90:3a:61:3d:b5:6d:eb:93:18:92:3b:b5:50:9f:01:a0:fc:
         a8:43:f2:4b:f3:8c:f0:a1:ed:73:7e:39:95:ad:16:a0:ea:b0:
         ad:73:61:ba:7b:64:c3:64:51:2c:67:d1:bf:e4:da:fc:9f:6b:
         36:79:24:e7:58:de:25:ec:5d:cd:b2:84:ec:25:a8:d6:bd:10:
         4b:a5:5d:99:44:25:26:6d:34:ef:a9:ff:89:c6:70:76:99:d3:
         56:ee:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:02:12 2026 by rpki-client