Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          ewr3Tkv2EgbRkTFtIeC22AD53aXoYCTMqKXFdcbkJso=
Subject key identifier:   39:40:6B:6A:95:17:FC:F3:23:91:17:F7:33:38:BB:D6:D6:CF:7E:02
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019D37893CE19F2DB9D86B17B738390873A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 03:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:34 +0000
Files and hashes:         1: 4io-REhzFRxPhNR2ODLWtq5-pVg.roa (hash: wvYJq+OJ0yBLuz2nx1cnZCl0Nf5x5+pis6cfSb4TkHk=)
                          2: arrkUMPGlGp12fBDJz-y-TlydqE.roa (hash: FzEjkq/IJVG3rsaQp/9UZuy/iTz0QoR1J2fAeimur2Q=)
                          3: rDrbyqGHpXISP5iG3Y1GTyKdM24.roa (hash: IEFZML7lOlLhBvi4soPybXTGWqMozr/vczumNvS04HI=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: fbWyp9rUTltq0j5SP/SUXL4N4VHbT3qvhtpM68NEmj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:3c:e1:9f:2d:b9:d8:6b:17:b7:38:39:08:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Mar 29 03:00:34 2026 GMT
            Not After : Mar 30 03:00:34 2026 GMT
        Subject: CN=39406b6a9517fcf3239117f73338bbd6d6cf7e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:48:77:e9:ca:42:ac:42:50:cd:62:7d:9a:7c:
                    55:a2:6e:20:d2:e2:b1:90:fd:33:f9:18:55:06:44:
                    11:8c:49:6f:da:8d:79:79:fc:3b:90:71:c2:a3:5b:
                    40:bc:ef:e9:f4:ab:35:ef:2e:b6:ea:09:33:43:e0:
                    6d:fd:80:cf:c7:c5:43:65:23:bd:be:64:39:34:64:
                    b8:fa:7d:21:86:16:27:ea:f3:63:cb:3e:90:14:d7:
                    9c:c9:d1:ca:07:aa:21:46:36:2e:fd:33:38:10:7f:
                    42:ed:7f:92:b0:9f:4c:05:1d:6b:c8:e9:f9:7d:28:
                    ec:fa:28:d2:f2:b2:35:54:83:fb:1f:c5:f8:57:ec:
                    2a:6a:de:5b:0b:5c:99:66:ad:63:98:93:e2:85:54:
                    4d:5e:a3:87:e6:7e:d3:d9:cb:1d:09:8b:9d:f3:d5:
                    5f:46:88:93:88:c3:b6:b2:e3:52:a8:87:d2:d8:35:
                    0e:ee:fc:f2:37:89:1f:d9:9b:81:7b:4d:2a:cf:f3:
                    73:54:37:5f:da:6e:d9:47:f8:5f:04:dd:10:30:20:
                    d2:5d:47:26:7e:db:02:79:9c:1c:a4:ef:6f:b0:4b:
                    0f:ee:3e:7d:ac:9c:be:f2:af:a0:26:c3:d1:a0:4c:
                    17:7d:6d:0f:ba:c6:c4:6a:a6:9d:a5:35:cc:7e:e9:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:40:6B:6A:95:17:FC:F3:23:91:17:F7:33:38:BB:D6:D6:CF:7E:02
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:78:e2:b1:01:66:7c:32:86:3d:75:71:a3:17:d9:a1:a0:bb:
         91:ac:91:36:97:82:0b:88:9e:7b:62:2e:07:e3:0e:31:45:a5:
         7e:83:f0:4f:97:91:22:22:35:68:38:14:3f:8b:11:81:1f:cd:
         52:a8:07:64:2c:52:2c:9c:f5:c7:ff:26:d3:04:e9:f6:a5:1b:
         60:d5:92:63:2b:e0:34:45:71:bc:dc:4d:89:f8:3d:a1:95:ee:
         31:40:21:48:1a:12:35:8b:3d:06:91:9e:95:3d:6c:3a:e2:22:
         63:f2:31:86:65:cb:f0:33:44:b2:d1:b4:59:85:6b:24:cd:30:
         06:8d:80:1c:b9:7d:42:67:bd:0b:80:75:3c:3e:9c:3c:47:da:
         43:e9:03:67:bd:98:36:c0:b8:8c:94:af:df:22:2f:95:4d:9e:
         b9:a1:1c:7b:08:26:20:d8:04:f2:58:ff:16:06:b4:2d:44:ec:
         57:56:0f:55:94:4c:72:56:8f:a2:fd:96:34:ab:a8:46:e4:c4:
         d9:0c:06:07:37:7f:c9:80:40:45:f9:6b:01:2a:6e:94:b7:45:
         03:c7:f0:e9:d6:1f:90:4c:22:34:6f:4a:b9:52:21:3a:62:d3:
         4d:e0:43:7a:27:e7:bc:ca:88:5b:91:52:01:f3:b0:e2:0d:c7:
         0d:42:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:39 2026 by rpki-client