Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File:                     rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier:          Xie8686pWwlWDRrULxOte3sC019DAor4l/HSzFYeuj0=
Subject key identifier:   C6:2D:4C:39:CA:0A:48:05:77:EF:E2:DA:2C:A9:FC:C5:58:B2:4A:22
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer:       /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial:       019CE6A46FE312F9D20A34098D87E2F1AF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number:          0D79
Signing time:             Fri 13 Mar 2026 10:01:02 +0000
Manifest this update:     Fri 13 Mar 2026 10:01:02 +0000
Manifest next update:     Sat 14 Mar 2026 10:01:02 +0000
Files and hashes:         1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
                          2: dL52a-JSQC-00Ko98mQkGc0Xvzo.roa (hash: 2r+wEDTFQg2vugNKxVL/EHxSgKFbqV3jiVEPhPaqb/k=)
                          3: n_DU8ayGMsHeUdkTrzuKYMpaU_Q.roa (hash: KHioroc4KbkqEBK4timMsuRiTYXUbx4dAfmekQJR2xY=)
                          4: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: wgeZpAX9dooGYDFYRPQTCtggAHyTApwV6efnvQu3m8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:a4:6f:e3:12:f9:d2:0a:34:09:8d:87:e2:f1:af:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
        Validity
            Not Before: Mar 13 10:01:02 2026 GMT
            Not After : Mar 14 10:01:02 2026 GMT
        Subject: CN=c62d4c39ca0a480577efe2da2ca9fcc558b24a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:b5:b9:9e:3d:cc:96:31:6b:fd:32:82:55:
                    bb:41:9e:5f:5b:eb:7e:85:8c:79:cf:4c:ff:15:1d:
                    87:80:48:78:5f:f8:72:8c:5d:6b:95:fa:7b:be:98:
                    53:c4:19:c1:0a:0a:e6:90:47:a6:1b:48:6d:77:52:
                    ed:19:2c:8f:32:8d:44:af:1d:45:ad:7b:2a:5e:29:
                    20:b0:79:17:d7:85:92:7d:de:c1:fa:6b:32:cd:70:
                    aa:b6:ee:9a:48:06:08:1c:7c:4f:cd:b3:ae:4c:a2:
                    a5:dc:f5:57:f4:d8:1c:34:d6:de:a8:e3:89:5f:f2:
                    16:27:91:47:41:e2:62:53:c9:68:fa:0e:38:d3:a4:
                    5b:70:d5:97:d1:0f:ad:38:d6:30:60:69:9f:04:34:
                    dd:e4:8a:a9:c0:60:49:38:00:f6:02:63:61:03:ab:
                    d7:88:c2:78:d1:e0:28:e9:19:c3:3f:81:a3:e1:ba:
                    3a:cf:4d:da:bc:f3:1e:ab:a2:fb:98:27:f8:07:49:
                    1c:0d:d5:71:fe:48:78:bc:d5:06:4e:69:82:6f:20:
                    81:54:9e:9a:ae:5f:7a:34:81:fc:02:21:09:e7:45:
                    d2:ee:4e:3d:7a:ef:ed:83:46:d6:5c:ec:fe:f8:f2:
                    2a:f1:4a:bf:e7:78:b7:8d:56:72:25:43:a0:f4:f1:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:4C:39:CA:0A:48:05:77:EF:E2:DA:2C:A9:FC:C5:58:B2:4A:22
            X509v3 Authority Key Identifier:
                keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:4b:45:64:7d:53:13:30:46:c9:41:4e:79:a0:5f:a6:54:
         4d:27:01:12:a9:5d:c1:7d:d8:78:f2:0f:b0:94:5e:36:db:2a:
         4c:be:ca:92:3b:6e:85:8b:0e:52:82:b0:ce:b3:bd:89:0d:d4:
         f6:c6:4e:c7:f6:7d:0a:57:ff:f7:16:18:66:5a:07:6c:1e:07:
         dc:85:61:1c:e1:1f:c7:c9:12:c4:28:a1:39:21:09:9b:3c:cf:
         b7:f9:c7:42:32:d9:2a:a6:e3:80:0e:10:ca:56:93:40:e9:8d:
         a1:01:14:87:19:75:a9:63:bd:22:66:6c:98:3d:f2:82:6b:69:
         61:47:66:70:4c:7f:4d:9d:ad:3c:b8:92:8a:5f:43:61:d8:53:
         b4:e1:f4:2b:99:3e:42:e1:79:56:bc:e9:ca:41:c8:87:fe:9a:
         b5:5a:30:cb:65:b6:92:e8:a0:4e:da:e9:91:0a:50:1d:23:21:
         a4:ed:98:a3:f8:a0:4a:0b:89:d9:ca:f0:6c:a5:72:c1:7b:af:
         32:e5:a1:9c:6c:75:99:19:b0:61:82:ce:16:0d:24:ca:ed:20:
         69:aa:e7:fb:07:70:74:ae:a2:8e:c4:df:f3:f6:67:37:79:46:
         37:69:a4:2f:3e:86:4a:36:39:41:96:65:55:24:d4:81:eb:76:
         a5:f3:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:09:17 2026 by rpki-client