Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          7pxiDk8jgNejGBHTESUB7HloDD7XhJ0aBstcQOSCkAo=
Subject key identifier:   D4:EE:8F:07:41:91:01:66:91:BE:A7:DE:B2:6C:7E:BD:36:CD:98:28
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       019D3A8A88CBBA284727A87F272C094C40D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          1822
Signing time:             Sun 29 Mar 2026 17:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 17:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 17:00:50 +0000
Files and hashes:         1: fePebiytxTMuGPH6fSC5E4YL5wc.roa (hash: yXbEU3IXKyJOB9RtZy0YOmQELScqMwS4Y+CH/uELRY4=)
                          2: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: iAEzgpVeWWNN9DfchIH9FSatZLFVm7jY4XWassv9kxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:88:cb:ba:28:47:27:a8:7f:27:2c:09:4c:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Mar 29 17:00:50 2026 GMT
            Not After : Mar 30 17:00:50 2026 GMT
        Subject: CN=d4ee8f074191016691bea7deb26c7ebd36cd9828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:db:bf:36:cc:80:d7:bd:fe:e7:89:95:88:
                    1b:76:63:0e:2b:be:fe:a8:7c:a0:c6:05:08:4d:b4:
                    00:e9:3e:5c:3e:65:7e:83:4f:bd:06:ce:4e:97:2f:
                    97:bb:0e:21:03:0e:e1:8c:d1:8e:dc:4c:07:05:fc:
                    17:e8:58:6a:e9:4d:bc:46:49:56:27:59:fc:21:52:
                    47:ab:fe:bb:26:72:9a:be:7d:fd:5f:b5:d9:4c:01:
                    71:57:97:86:24:b6:fb:da:d5:ba:d1:8b:6d:88:19:
                    8c:4e:dc:14:a3:10:e3:75:7a:33:28:c5:41:de:4b:
                    fb:1a:ce:e0:84:5f:4d:48:48:41:83:71:a4:90:50:
                    a2:f2:37:be:e7:25:60:67:54:96:87:b1:6d:1c:01:
                    21:2e:99:c4:51:e1:c8:bd:53:00:1d:d8:61:a8:0b:
                    85:c7:ab:54:b3:6c:11:ec:cc:01:4c:d1:9f:5c:e9:
                    d8:d5:06:77:f8:16:88:c9:85:15:3a:e6:b5:08:c5:
                    f7:2f:65:6a:94:d6:c2:0d:5c:58:cc:a2:ac:19:09:
                    10:2d:75:fe:d4:3e:91:07:10:1c:f1:d1:1f:47:f7:
                    fb:ea:1f:78:b2:7b:18:11:7b:78:89:bb:22:5e:32:
                    23:56:e2:ab:ab:f1:66:f0:b8:4d:65:4e:9d:0f:62:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EE:8F:07:41:91:01:66:91:BE:A7:DE:B2:6C:7E:BD:36:CD:98:28
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:e9:9e:87:30:c9:63:95:d1:25:02:fd:6f:33:8a:ee:13:
         57:a8:0a:26:fe:b1:82:48:6a:5e:e6:1d:93:4c:48:15:88:be:
         43:9a:42:e5:cc:0d:da:a9:e4:c1:d5:97:f5:bb:bf:b7:ae:b4:
         cd:bc:a4:9d:bd:45:7d:f0:cd:ee:12:da:43:6a:23:64:d2:cf:
         70:a8:75:b4:3f:4c:20:c8:3a:32:2f:03:3f:86:84:ee:20:95:
         a3:17:28:0d:c3:65:fc:91:c5:df:bf:f8:c2:8a:55:d5:29:c5:
         71:dc:d2:2e:1e:d3:22:5e:13:77:d5:44:c1:54:79:cf:f3:db:
         d7:fe:bd:f7:b8:f7:9e:ee:22:30:0e:f9:a9:08:bb:fb:5b:6f:
         ba:ff:67:d2:37:ec:58:bb:78:ff:9f:67:b8:ea:5d:a8:07:0d:
         87:91:0d:f1:dc:74:78:dd:f1:05:4e:39:2f:68:54:db:ad:be:
         69:ce:b9:50:01:7a:9f:02:e2:7c:24:47:30:68:1a:96:8a:8f:
         69:6b:9e:58:eb:f9:4a:7c:fe:f7:84:70:6d:94:ce:9b:a4:a1:
         47:89:db:a0:7c:61:dc:10:16:53:bc:04:af:64:94:fd:6f:90:
         1a:ad:0a:4e:a9:06:1b:07:c4:e6:2d:12:78:7c:c3:3f:5b:a0:
         f0:31:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:46 2026 by rpki-client