Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File:                     RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier:          9DZW+fbhUD4TCPfhtdD4jtlIelWtMyh+8GmGPfGF7/E=
Subject key identifier:   56:48:7A:55:BA:35:9D:34:AD:A5:11:E4:0E:14:57:B7:A4:65:E5:7C
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer:       /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial:       019D37890C0A2F6F72DF85B4EB5D47303E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 03:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:21 +0000
Files and hashes:         1: QdPFDtWVxkEJpznnKF6tITle6G8.roa (hash: DNgnhPj30PZlfK71mnwNTLe3HEwOKQYeLOXwSPHiQp0=)
                          2: Qtm2y6O9fQOxDLh4r9HUduXRJPk.roa (hash: EeZqlsTqzdCbFC/CM71VpRuG30gKSOjHa90sXicLvG4=)
                          3: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: NcBAo4/Tp+2xOnNQhhY45/CQ4GRX75Dfei5zBn5LuiU=)
                          4: qkZbad248G4D0mXEkOMEjzYi1Ec.roa (hash: fqso9UJIp15vhELsb8vv3FftzXgRXh9zaLx7ly4FaQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:0c:0a:2f:6f:72:df:85:b4:eb:5d:47:30:3e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
        Validity
            Not Before: Mar 29 03:00:21 2026 GMT
            Not After : Mar 30 03:00:21 2026 GMT
        Subject: CN=56487a55ba359d34ada511e40e1457b7a465e57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:b6:c5:31:11:a6:9b:86:3f:6e:c2:22:72:
                    41:31:5d:29:5c:72:2b:30:8c:70:e9:7b:e8:14:50:
                    dc:01:4c:0e:34:74:d3:8a:b5:11:b7:82:aa:9d:25:
                    b2:b0:31:61:33:e6:fe:d2:28:a7:b8:d1:4c:ce:0d:
                    39:f4:b4:18:fb:94:a7:9a:c9:e9:a3:32:bf:b9:f4:
                    bf:93:a4:c5:97:db:0a:23:bf:cd:1e:b5:c1:8e:84:
                    52:3e:84:96:54:90:03:2e:f8:98:cd:b0:eb:d2:16:
                    66:dc:d4:41:05:e0:60:26:48:eb:86:83:1a:aa:1d:
                    b5:a6:30:ce:f7:11:e1:cf:2b:a0:b7:51:30:2e:e1:
                    b4:93:6a:83:cf:d0:3c:6d:9d:c3:72:08:61:1b:75:
                    45:7d:14:45:5c:9f:8f:a4:fc:30:72:42:fc:8e:e8:
                    ae:7a:f0:05:3f:6d:d3:4a:2a:2f:53:f1:dd:4b:a7:
                    16:65:61:e3:60:5b:09:5e:21:e4:e3:54:e1:bc:be:
                    7a:3c:7a:58:49:60:13:be:aa:16:57:00:4c:08:2b:
                    de:5d:34:b0:a3:00:a3:85:9b:f3:ad:70:fb:26:23:
                    1b:5e:07:d0:64:9b:52:4e:04:6a:b6:18:eb:25:45:
                    03:98:97:ca:5d:be:50:5e:81:f3:b2:a3:17:f4:ac:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:7A:55:BA:35:9D:34:AD:A5:11:E4:0E:14:57:B7:A4:65:E5:7C
            X509v3 Authority Key Identifier:
                keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:c1:42:ac:d0:5a:bd:c6:a4:1f:09:84:63:a3:8d:3a:68:
         14:40:ae:7b:9a:24:fe:1c:ed:9b:7e:6f:83:d6:5c:80:f0:c9:
         b9:7c:80:28:af:2e:70:ad:e6:21:6f:f0:eb:51:17:17:12:33:
         0d:ae:91:1e:32:6e:b2:a6:32:0d:53:d7:f3:2d:b9:4b:1c:6f:
         7f:ba:67:6c:94:e7:ac:21:b7:32:27:a7:af:a5:cc:6c:b6:e2:
         9f:31:85:b2:2b:fa:17:6d:c8:be:dd:b4:7e:ba:fc:91:25:4f:
         4d:05:42:a4:bc:7a:b0:70:71:9e:17:83:df:a1:e5:19:9c:f9:
         27:41:7d:e9:16:5c:ca:a9:07:e0:b0:4c:21:78:60:b3:9c:a7:
         c9:0f:1d:ec:a9:92:9a:19:aa:48:96:1c:be:e6:6c:fe:d6:3a:
         de:1a:44:e0:b9:69:28:1a:6c:99:4b:ff:6a:b6:cf:3d:12:85:
         fa:a9:9d:34:6b:0d:1d:cd:e5:e2:1d:bc:63:1b:b0:26:1d:50:
         3d:1f:27:cc:85:11:b3:9a:64:6b:87:c9:7d:d8:b2:71:8f:71:
         35:7a:2f:af:c9:b7:a4:e0:ca:67:21:04:1b:67:cc:6b:38:6c:
         9b:6e:dd:ef:d7:0c:ea:0a:ef:a4:e3:b9:5d:94:1e:2c:aa:a6:
         79:d2:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client