Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File:                     xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier:          OCK8UcJIMGjZexxQ556DBqWH2RlP+YWW/LBY+U5ffIk=
Subject key identifier:   F7:89:9C:57:6F:2C:B2:72:C9:9F:DC:2D:44:A1:39:12:9C:C0:DA:47
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer:       /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial:       019D3941690558106CA2991F435FBB1B37D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 11:01:21 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:21 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:21 +0000
Files and hashes:         1: KK6V4tkkGOTlna1jDdLR34C1144.roa (hash: VJsTur/NQjIjrIZYxVHk28VDPEOKoZ9mo1/7vuIP+oc=)
                          2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: WgIpzR0G80I0Jd4vargEceETnn2NNCVMqgE1WP+F6gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:69:05:58:10:6c:a2:99:1f:43:5f:bb:1b:37:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
        Validity
            Not Before: Mar 29 11:01:21 2026 GMT
            Not After : Mar 30 11:01:21 2026 GMT
        Subject: CN=f7899c576f2cb272c99fdc2d44a139129cc0da47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7e:c1:47:25:3c:ec:4f:8e:60:06:47:b1:41:
                    23:95:97:34:68:da:dc:9f:32:5c:29:82:6b:2e:f4:
                    fd:5b:20:fe:02:4c:56:90:09:95:52:27:4e:5d:ff:
                    fe:16:80:78:24:27:1f:41:d6:87:f1:44:3c:a5:06:
                    9c:e4:2e:ca:24:6f:16:da:98:10:04:05:6b:d0:70:
                    1a:1d:14:da:88:5e:b5:03:1d:9d:19:98:8c:fe:24:
                    8f:eb:32:17:eb:4b:48:7c:ea:df:cf:c8:92:45:c0:
                    4e:2b:71:c3:c1:61:5d:b0:c8:d7:82:15:25:74:62:
                    f8:ae:7d:0b:36:be:86:f5:5a:7e:17:81:a8:ac:60:
                    23:cc:c1:39:76:a2:22:05:44:51:b2:ff:ab:36:e1:
                    f7:2c:95:5e:58:34:6b:f1:e9:70:55:9b:70:1a:02:
                    4c:3b:90:b1:48:56:6b:ba:95:2c:9e:5a:42:98:23:
                    22:9e:3e:10:e1:d7:46:7d:45:8e:b6:72:f3:ce:a0:
                    47:72:4a:80:2a:42:10:4e:c5:9c:b2:d1:79:cc:68:
                    f9:79:a3:53:8a:52:99:2c:e6:92:aa:13:e9:11:e7:
                    17:c3:51:43:0e:0a:90:2d:fa:9e:cc:fe:e0:79:31:
                    e4:06:db:d5:69:b8:de:a2:59:a5:a5:6c:8d:4e:af:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:89:9C:57:6F:2C:B2:72:C9:9F:DC:2D:44:A1:39:12:9C:C0:DA:47
            X509v3 Authority Key Identifier:
                keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:70:2c:ea:4e:bd:31:c3:6b:c6:ba:09:ba:c1:02:e3:59:
         90:e5:45:e7:ef:0a:c6:1b:78:fe:ff:e3:08:a5:01:7e:0f:40:
         cc:83:4f:56:28:75:3d:ef:0b:3f:95:5b:c5:c4:c8:16:af:f1:
         a3:7c:22:74:67:db:fa:88:e1:eb:46:48:ee:84:99:13:20:f6:
         4f:4a:3d:10:10:a6:44:ef:da:d0:fd:88:ea:74:c7:1e:88:62:
         9c:2a:94:77:8c:e3:91:7a:3e:2c:a7:f1:09:9f:a9:e4:16:20:
         48:be:38:18:95:87:e9:6d:a5:21:51:6c:27:1e:83:de:7a:2a:
         80:25:dc:6f:70:c0:64:f4:12:09:d9:2b:13:2c:29:3d:99:f7:
         d2:45:57:59:bb:7d:c9:21:25:dd:45:53:82:22:bc:10:12:91:
         9d:f1:d6:76:57:b8:e0:59:ef:74:86:e7:f1:6d:9d:54:0b:27:
         b4:c6:98:47:99:a4:b8:3b:aa:52:78:e4:81:fd:cd:82:1f:ac:
         68:a9:61:1e:06:06:05:8e:ae:2a:ad:2c:f4:0a:db:1f:b0:38:
         09:d3:c7:c8:77:62:01:aa:2c:53:40:31:88:f8:ea:e0:e5:ef:
         99:47:08:0a:af:49:f6:d6:28:2c:7e:78:32:eb:73:62:25:0a:
         7c:3f:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:55 2026 by rpki-client