Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          CPUUTse5g2H4RzU0MXPbu/QwSJ+Lsd1fnCsr97cl/Qs=
Subject key identifier:   56:21:D3:34:AD:A5:BD:31:FB:67:20:44:5C:24:EF:BF:CE:97:3F:CB
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       019CF64DF597F1AD2D9DFE8F9ABA5645FAA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          1877
Signing time:             Mon 16 Mar 2026 11:00:30 +0000
Manifest this update:     Mon 16 Mar 2026 11:00:30 +0000
Manifest next update:     Tue 17 Mar 2026 11:00:30 +0000
Files and hashes:         1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: xAS9a43ArZuuOF9/qifI8A2peItPGndtrEO/tH0RZ0k=)
                          2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=)
                          3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
                          4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
                          5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
                          6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
                          7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
                          8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
                          9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
                          10: qF5xd0E9VHjEoVDgrR2EV2reNkg.roa (hash: +LVENHANP4Wm2qt1oX01yx6cEEPM3z4kpbtQOwe00sQ=)
                          11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
                          12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f6:4d:f5:97:f1:ad:2d:9d:fe:8f:9a:ba:56:45:fa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Mar 16 11:00:30 2026 GMT
            Not After : Mar 17 11:00:30 2026 GMT
        Subject: CN=5621d334ada5bd31fb6720445c24efbfce973fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:f6:bd:2a:93:04:89:01:e3:a9:7c:69:27:
                    8e:ad:9f:8c:c9:87:6f:17:25:80:50:96:f3:07:f7:
                    b8:d2:8a:74:2a:39:df:8e:a6:0f:11:0d:03:01:b5:
                    d9:6c:92:ca:cd:f9:81:2f:ba:b4:9b:1a:53:1a:f2:
                    0e:f9:f8:64:49:b1:0f:99:8a:ef:ed:ea:28:aa:ac:
                    31:33:35:50:5b:c0:ae:79:f8:c6:a9:d3:f8:81:3f:
                    a5:6b:49:5a:5e:a1:84:7b:be:f9:b9:99:0e:0e:b0:
                    10:ad:80:b5:c2:ca:a3:e9:54:53:20:82:56:34:dc:
                    fa:85:fa:a8:91:0e:3f:5a:00:ab:bd:af:f2:0f:14:
                    98:00:8a:d2:87:14:6f:91:88:ed:61:f9:96:9a:de:
                    18:ce:05:d4:55:94:e8:7e:f4:d1:70:c7:12:8a:63:
                    fa:39:76:31:74:e7:de:be:fe:8b:a0:7b:c8:1d:86:
                    77:39:e7:ce:16:a2:1b:68:5f:b9:2e:8f:17:8c:4a:
                    4b:9a:b0:a2:5e:5b:42:70:01:ed:62:3d:ba:49:46:
                    66:3c:ee:bc:6a:10:86:5c:79:3f:b2:1d:a6:1c:ba:
                    5c:f1:17:a3:d3:e9:d8:d1:3e:79:e1:14:f4:b1:02:
                    ac:f2:c1:f1:de:68:0c:56:29:c6:85:d0:27:45:f1:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:D3:34:AD:A5:BD:31:FB:67:20:44:5C:24:EF:BF:CE:97:3F:CB
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:51:14:a9:da:ee:2b:2b:f9:7c:04:84:88:11:ab:7e:d6:
         b8:bc:ed:07:09:c4:9c:da:2d:73:0b:a3:9d:7e:08:94:74:1d:
         47:35:02:31:d4:c5:af:c7:69:51:13:53:1a:00:63:5f:a1:e0:
         5f:e2:d4:78:d5:5a:cd:93:1d:e9:c7:8e:3a:7f:b2:fe:0f:7b:
         17:9c:53:cc:cc:96:50:41:b3:6b:ff:46:31:24:1d:7f:ab:78:
         37:91:c8:58:f8:f1:8d:40:b2:81:00:d0:7d:3b:d7:d6:88:0e:
         b5:03:9b:64:1e:5e:60:95:9b:f0:68:47:11:d6:90:61:5e:1c:
         60:0d:33:ea:be:50:c2:1d:33:0b:bd:a6:16:86:a3:7b:b6:33:
         1b:00:4e:b8:3d:38:53:23:f5:f3:f5:0d:f5:72:0a:dd:8a:ea:
         8b:3a:3e:79:fa:6b:04:80:86:14:e1:74:a2:f0:14:7c:7f:6b:
         32:9f:f8:f8:58:36:55:88:25:a8:15:7d:49:fc:83:19:1b:1b:
         de:6e:2a:48:84:4c:45:fc:8c:ae:2b:4d:f9:1b:d0:66:ff:46:
         16:00:be:ca:c5:cc:24:9d:9c:bd:a1:36:a8:6a:5e:f3:48:71:
         30:dd:e8:ad:d5:92:c4:81:ac:d3:a7:9b:01:eb:bf:b9:3e:db:
         d4:38:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 15:09:36 2026 by rpki-client