Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          y4+dtV/SbNIAdocpQqAh7rq8qQk9utIq59PW2J3b39I=
Subject key identifier:   A0:04:15:FA:0E:C2:BE:E0:2A:9A:BD:A8:5E:79:D2:0B:7C:8B:A6:17
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       019D37F7133EB5A2F0B09382327ADF9D0092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          14A5
Signing time:             Sun 29 Mar 2026 05:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:32 +0000
Files and hashes:         1: 3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa (hash: CAsZ3C2TdySi/ZWvlReBuoW/T5KbXTvFwU9q/tZJ4e0=)
                          2: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: lFSABS68dupBiOZVQArprSeq4UcphqEXgbUEyriLTGw=)
                          3: RbC01VwFxiZgBTALS-uMjRZzAhY.roa (hash: q9hSu3/IMM4HWr9vjCMGx9EywT+vVqNbYQnoN0MBA20=)
                          4: W9owpqcA8Ky_UkMpYTsSDjecJMU.roa (hash: 4m0qKyQs2oTTQD8xTXHhJx+IhKz/9ELu9P/CqiTewAM=)
                          5: _FgKHiwZ54ey0goItnrxJYHRboo.roa (hash: sg5CvvnTfG2oD+toERRbafBqjfE3xSjzejxaJO1LxU8=)
                          6: z2A2T1nq3TaPFhF11ccXgPg0K_M.roa (hash: FIAAHyPL1J0jzI8B5mvusigwqLIBDgZSTDh7qjXNzTM=)
                          7: zXZDjCl_wpe20vJI7Svnpaah_LM.roa (hash: Uex3ZzOS035SmbmtX2k6Jvjfz1dsWhh2Uu53J7YkHiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:13:3e:b5:a2:f0:b0:93:82:32:7a:df:9d:00:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Mar 29 05:00:32 2026 GMT
            Not After : Mar 30 05:00:32 2026 GMT
        Subject: CN=a00415fa0ec2bee02a9abda85e79d20b7c8ba617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:2c:db:75:a8:db:0e:e6:07:14:6d:a0:44:
                    ef:71:04:9c:cd:26:42:60:b1:34:5d:44:20:40:1a:
                    6d:5e:aa:3c:35:e7:1b:bd:58:b0:e3:4a:2c:5e:8b:
                    b0:e9:6f:af:fa:cd:24:ec:35:3a:62:e8:f5:97:6a:
                    10:87:66:97:dc:c2:66:4f:82:64:0a:28:b3:24:22:
                    0b:3e:7a:eb:49:07:6a:ad:ab:72:61:14:6b:1e:7d:
                    18:7a:85:5f:b9:3b:ff:50:15:fc:15:c9:a4:fe:6e:
                    74:79:3d:d0:b4:88:e6:be:7a:3a:5c:1c:61:6e:6a:
                    5a:8e:3d:bc:77:13:ae:cc:55:a9:82:92:64:94:0f:
                    02:8f:ff:5b:aa:5f:2b:c3:df:10:7f:83:9a:1b:1b:
                    7f:a6:76:4e:a1:be:2b:39:97:6e:50:66:d2:84:7d:
                    4d:d3:1c:52:50:7b:fe:82:ee:28:18:48:aa:2d:dd:
                    aa:a9:37:df:08:be:e1:f1:6b:26:5f:5e:c0:17:d3:
                    eb:72:ec:01:55:88:0c:3f:6d:a0:a6:cb:0e:92:e7:
                    a9:e5:75:79:af:a4:d6:15:4e:d0:8a:31:fc:13:ef:
                    c9:9d:1f:57:91:45:53:f6:44:b9:07:cc:56:f7:18:
                    9a:03:90:0f:ad:20:ba:eb:37:48:6e:e5:5b:11:1b:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:04:15:FA:0E:C2:BE:E0:2A:9A:BD:A8:5E:79:D2:0B:7C:8B:A6:17
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:13:2c:e0:98:10:95:dd:d5:21:5e:d1:e5:20:70:d3:ec:
         25:15:f4:ca:31:ac:1a:48:43:5c:8f:3f:2c:fd:8c:f3:c1:31:
         1d:26:59:0b:7f:4a:e6:b1:df:1d:b5:51:e5:b5:ae:30:e8:08:
         a0:e9:2e:67:43:eb:6b:bf:ec:4f:42:cf:47:83:42:0d:aa:31:
         37:02:bd:e3:34:bf:9e:56:02:d0:5f:a1:91:23:0b:80:47:0f:
         6b:9a:8d:4f:36:21:47:2f:ff:87:1c:71:e6:28:cd:6b:74:d1:
         3e:ac:28:bd:ae:17:fd:7e:3d:b9:d9:4c:74:c7:6c:59:35:02:
         f2:d9:63:b8:18:37:f8:18:aa:8a:87:53:14:44:4a:55:30:ec:
         46:e2:a1:d2:91:61:80:ad:4a:f0:ad:fd:e1:7a:d7:e0:fc:52:
         14:1c:69:99:f0:88:a5:49:a8:56:97:70:74:8c:f1:ab:c3:70:
         bd:77:76:2b:f2:47:25:61:a1:72:ea:1d:0f:89:5d:c9:3f:50:
         31:e1:c1:41:75:e3:0f:84:ad:9c:23:0e:a5:22:d6:de:e7:d8:
         e8:75:5f:f9:dd:99:e9:e2:e1:7e:3b:d5:82:6d:92:c3:d4:25:
         68:64:06:45:4e:ec:28:18:58:af:c1:81:e9:ba:c6:64:a8:4e:
         11:7c:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:06 2026 by rpki-client