Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File:                     Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier:          WubGrmL3tmt0rtyqj3p51v+6gExGfhT1iOz0OGQlfXA=
Subject key identifier:   A7:47:B7:81:6C:FD:94:89:96:4A:2E:65:7A:FD:2F:9F:CB:E3:47:7F
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer:       /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial:       019CE17E55F4DB0BCA4C49386C409D4AB4F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number:          10B1
Signing time:             Thu 12 Mar 2026 10:01:18 +0000
Manifest this update:     Thu 12 Mar 2026 10:01:18 +0000
Manifest next update:     Fri 13 Mar 2026 10:01:18 +0000
Files and hashes:         1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: 33Xo2GXcmKiaCGjAtXd9mcy0XpOi79KWiFu+ziqpN8s=)
                          2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
                          3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
                          4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
                          5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:7e:55:f4:db:0b:ca:4c:49:38:6c:40:9d:4a:b4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
        Validity
            Not Before: Mar 12 10:01:18 2026 GMT
            Not After : Mar 13 10:01:18 2026 GMT
        Subject: CN=a747b7816cfd9489964a2e657afd2f9fcbe3477f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:6e:c4:7e:a5:78:65:cd:3c:a4:e3:59:f2:
                    84:e7:7b:29:82:5d:03:90:7c:09:fe:65:46:f2:ab:
                    03:d7:70:4c:fc:a1:6c:ba:53:e2:07:1d:99:5a:b9:
                    56:3a:b8:cf:3c:50:ab:88:d6:97:ca:a2:a2:1c:e4:
                    07:af:33:d3:16:0f:2b:5f:b9:ce:cb:78:50:42:1d:
                    d3:18:a3:3e:5f:ce:64:39:bf:8a:58:5f:84:49:3e:
                    7c:af:e5:60:d9:c4:74:85:c1:50:e3:c3:89:ab:0c:
                    40:17:c2:8e:44:2a:c3:7a:0d:27:e0:b3:24:14:87:
                    00:4e:f1:9f:f6:61:a1:df:55:d7:1f:b9:50:4d:fe:
                    4e:4c:b4:c4:c9:a4:00:32:8b:a9:16:33:ed:fb:1a:
                    45:7a:f3:bd:3a:26:4a:b2:b6:87:2d:af:df:98:30:
                    5a:06:bf:32:67:38:99:a0:96:61:06:41:08:e5:85:
                    8d:03:36:fb:37:ca:d5:ac:29:03:01:76:84:39:6e:
                    48:2d:66:70:6e:b1:e1:84:05:58:78:e8:98:56:63:
                    4d:52:f6:87:6d:19:df:dc:d7:4d:ff:54:48:f9:69:
                    23:76:2a:f1:4d:28:77:19:a0:ce:23:33:3d:84:36:
                    e5:3d:6c:9c:00:fa:15:31:20:13:8b:85:5f:16:d5:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:B7:81:6C:FD:94:89:96:4A:2E:65:7A:FD:2F:9F:CB:E3:47:7F
            X509v3 Authority Key Identifier:
                keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:12:8e:9d:42:5a:30:56:ba:70:d1:04:cf:5e:f8:1e:6c:
         80:5a:a0:ed:5d:69:40:c2:a9:12:9c:f9:64:ba:bb:a0:62:73:
         69:dd:58:01:55:da:8d:15:46:57:02:9f:ac:b3:2c:e8:1a:51:
         f5:85:22:46:e7:31:07:27:72:8f:93:e4:26:c1:f3:66:65:dd:
         d5:be:7a:1b:bf:7e:2f:2e:44:dc:c6:01:18:e8:8b:dd:c6:aa:
         4e:01:29:ab:a2:a8:b2:d7:1b:e0:99:8a:40:0d:ef:0e:72:91:
         bb:2e:79:ad:bf:0f:75:81:3a:e1:dd:6d:a4:1b:df:a7:20:10:
         3a:45:57:7c:7b:f7:cd:7d:74:94:ef:e4:c5:9b:fa:c6:34:8e:
         b2:eb:5b:34:1d:7b:4c:bd:7f:c5:88:07:00:16:5d:36:1f:05:
         53:95:b1:e3:a5:f2:80:f4:72:2b:e4:6f:e7:2c:46:6a:74:8e:
         aa:55:1f:f9:e9:c6:7c:dc:f4:d7:35:25:1f:08:a4:5d:c8:43:
         15:43:ba:f8:7d:27:6b:3e:64:da:59:07:18:68:87:22:87:9f:
         6d:9c:d0:1d:b7:a9:0b:73:7f:b2:b1:d0:db:9f:12:dd:24:4d:
         f0:60:1f:0f:ff:b5:6c:dd:04:e8:45:6b:0c:b7:d3:ab:43:b3:
         29:01:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:32 2026 by rpki-client