Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          MAEuQQBnC9ojo9C2rsrzKMdI7a2QN1v9fhGvaZGei10=
Subject key identifier:   DD:7D:4D:E4:F8:8D:66:49:C6:CB:88:1D:AE:4E:C6:B3:06:1C:F6:A3
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       019D37898B76A21021C8385A31526FA3861F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 03:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:54 +0000
Files and hashes:         1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
                          2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
                          3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
                          4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
                          5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: ib7c5QE7r+wrITZFUHAoHHcwupRJnntSh2EzDmjExq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:8b:76:a2:10:21:c8:38:5a:31:52:6f:a3:86:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Mar 29 03:00:54 2026 GMT
            Not After : Mar 30 03:00:54 2026 GMT
        Subject: CN=dd7d4de4f88d6649c6cb881dae4ec6b3061cf6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:8c:0d:ae:41:19:59:01:b1:97:44:15:47:
                    29:4a:1c:11:73:91:25:bd:f6:3d:33:b5:ed:9a:36:
                    8a:ca:61:bb:bb:cb:99:33:93:ec:04:9e:e0:0b:41:
                    80:2c:a1:21:50:4c:b2:b9:5d:e7:eb:1c:fe:5d:48:
                    ec:36:a8:2e:e3:06:6c:0c:cc:4b:65:b4:04:9a:fb:
                    f3:2e:17:f5:06:d5:a7:21:bf:09:cb:2e:b9:aa:3d:
                    4d:9b:9b:4c:bf:de:a3:11:ed:de:c0:ad:f6:fc:47:
                    04:0a:75:7a:49:ff:16:42:c2:23:47:c3:e0:f9:bc:
                    21:a6:7c:ac:94:82:53:6f:85:4f:83:87:e1:bc:83:
                    95:64:6b:52:ae:27:0b:31:02:ab:b8:90:34:c8:48:
                    67:4b:b7:a7:3e:6b:71:cb:8d:68:66:b7:91:f2:94:
                    ee:c6:e3:60:b2:fb:e7:0c:0c:e8:c7:75:0e:f3:27:
                    bf:5a:63:41:18:69:93:3c:3b:59:5a:f6:76:48:4b:
                    62:b6:bb:23:dd:ca:6f:c0:2b:df:46:85:53:85:da:
                    58:9c:6c:e5:b7:7b:28:07:87:4c:67:fc:42:a3:9b:
                    fd:69:8d:47:30:72:ff:14:ed:01:5c:ed:79:e9:9c:
                    aa:a6:03:99:44:a5:c9:ea:b5:48:1b:0f:b3:9d:ec:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7D:4D:E4:F8:8D:66:49:C6:CB:88:1D:AE:4E:C6:B3:06:1C:F6:A3
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:1e:c5:a9:75:6f:0f:a0:31:6d:07:f3:8c:ec:90:10:3a:
         37:97:3c:f1:47:bb:dc:cc:da:35:24:2f:d4:8c:92:46:fa:3e:
         9d:b3:79:1c:ad:b2:07:2f:15:73:9a:68:b8:23:16:56:ea:93:
         27:8f:a2:06:eb:ae:3a:32:dc:99:93:f2:c5:be:d1:93:df:f6:
         a6:77:59:94:4e:ce:ac:dc:32:34:42:73:14:47:c2:f4:8e:a8:
         83:05:e7:35:bb:23:74:15:2f:78:58:14:f9:69:b8:ee:ef:7f:
         67:af:14:cf:14:9c:ab:b0:8f:f0:c0:f8:59:0f:d9:53:39:83:
         84:cf:f4:66:58:da:c2:5b:04:72:a8:40:76:49:6a:fe:18:df:
         f7:c5:28:39:e6:d3:a3:cb:4e:da:12:1b:ce:54:c6:ff:79:b7:
         d7:9e:ab:8e:7c:d6:5c:4d:23:38:c5:6d:90:60:1c:27:f2:e0:
         bc:14:19:dd:da:58:b2:8d:a0:6c:4f:33:a7:1b:be:c2:26:e0:
         8e:9b:f5:6a:d6:ea:68:94:1a:ee:1b:e1:86:22:3a:5f:fc:a6:
         b1:be:f3:6d:d1:c2:bd:9b:b6:68:2a:ad:72:8b:65:c7:f1:f0:
         25:fe:0d:43:fa:46:ec:14:ba:70:52:9c:cf:18:ed:0a:66:dc:
         8f:c1:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:45 2026 by rpki-client