Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          IrlCcCy6mybcwF031wCQ8o98frNFle7l9OmlfWkNPzg=
Subject key identifier:   5B:D5:DB:50:22:F9:1D:99:A0:C9:5C:B8:85:CE:9F:44:57:E3:C5:AC
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019CED145E7ABD1A65F44D15FB8090F4129A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          13DE
Signing time:             Sat 14 Mar 2026 16:01:00 +0000
Manifest this update:     Sat 14 Mar 2026 16:01:00 +0000
Manifest next update:     Sun 15 Mar 2026 16:01:00 +0000
Files and hashes:         1: HXYHaazK-agsXQtrAp4TdIiFPCw.roa (hash: 8c6r2+HmrNIxR72NP8l7eeROpR6oXO6CEMfBkvZx7+M=)
                          2: IDDMpCjqYwAGI-peC47tdVFpVME.roa (hash: Wn6wDDm3PxHp8jcuiJeMcmVpL1iWQEDeRHHD8I7chpQ=)
                          3: Ic-s3BxEKNsh-PbVJpc1Xz23AYs.roa (hash: oUF2uyrZqrkZx39wCYRgq/1hjdMckUA4FiG0GID4cJw=)
                          4: hnzz_PU7efQx6H153s8gnlp79IY.roa (hash: n+Gty9V7GKTlH1GHsjEfP3vQhmL0KYOhTaCWQIcvZc8=)
                          5: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: tZQxA6Aj6AIvZyRr6rMuGI/LnmqDn5dOS3hMWgPn6HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ed:14:5e:7a:bd:1a:65:f4:4d:15:fb:80:90:f4:12:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Mar 14 16:01:00 2026 GMT
            Not After : Mar 15 16:01:00 2026 GMT
        Subject: CN=5bd5db5022f91d99a0c95cb885ce9f4457e3c5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:77:98:05:83:6c:32:ad:82:62:04:54:38:
                    1f:2d:8b:10:8e:54:63:11:64:db:4a:aa:06:c3:ab:
                    35:c2:95:dd:fe:70:36:af:ae:79:b9:f9:1d:f0:99:
                    e4:cf:33:76:12:6c:95:49:29:f2:82:20:75:dd:e8:
                    2d:11:5c:eb:75:68:85:93:bb:c8:b8:07:55:2f:a1:
                    f6:4a:32:1c:80:1e:08:a4:65:08:c1:51:2d:31:ae:
                    49:f7:2a:b4:b1:79:4c:5a:de:71:5a:97:bc:fd:0e:
                    50:8d:b5:f3:48:46:66:e3:ff:67:37:d6:9e:6b:27:
                    30:e8:24:ec:e6:12:60:d3:cd:cd:2c:2c:9e:cc:f3:
                    e9:b6:85:e9:13:86:20:13:94:c0:68:54:db:c5:53:
                    4d:f2:3f:01:ec:fe:ed:e2:af:7c:5a:99:bf:20:97:
                    eb:dd:3b:e3:cd:6f:56:9b:05:7f:d9:f5:50:3e:8b:
                    96:45:28:1f:7b:08:2a:68:71:e5:2c:39:f2:1f:93:
                    55:b2:57:3c:6f:b1:83:56:b9:55:40:2c:ff:73:7a:
                    81:6a:05:5b:bc:5f:9c:8e:67:df:17:56:09:01:65:
                    f7:90:1d:42:ba:4e:5d:e4:97:cb:fc:36:fd:4c:50:
                    a2:e0:d5:19:06:26:79:de:28:a4:8c:1f:fb:f5:b4:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D5:DB:50:22:F9:1D:99:A0:C9:5C:B8:85:CE:9F:44:57:E3:C5:AC
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:b6:ce:b8:61:07:8f:91:6a:c3:a5:c0:23:e4:a9:42:fa:
         75:d9:51:40:ec:44:9c:70:91:8b:4f:89:7d:f4:76:52:f7:89:
         7f:b6:f0:71:a7:b4:ba:5d:4e:ec:af:e7:f1:d2:36:c1:ad:90:
         f8:5e:8c:a0:4f:6d:fe:a2:e8:d6:82:d0:c2:37:1a:b6:7d:aa:
         15:f5:a0:86:55:7c:99:c6:76:c4:98:88:1d:96:21:ee:fe:6a:
         bf:ac:ae:4d:6c:95:58:c4:1b:8b:a1:ab:8a:cf:77:e1:30:bd:
         39:fa:fb:dc:50:e3:98:cc:6d:04:84:3e:f1:38:f7:4a:e1:79:
         ac:d3:af:30:cb:b9:62:bf:80:50:37:f2:e2:2c:ac:5f:90:9d:
         e5:94:7d:35:23:2f:c7:33:ee:a4:bd:44:e4:9f:52:43:b3:30:
         bc:b7:d3:b8:21:e9:bd:bf:9e:d2:3d:8c:13:4d:5f:97:8b:09:
         87:c5:bb:92:4d:65:62:fc:e5:c1:e3:e7:a6:2d:67:dd:6d:73:
         c7:8b:f0:6d:0b:23:ba:e1:a9:fc:b9:fd:2b:51:f2:ac:18:61:
         87:8a:b9:6d:97:34:eb:72:a2:04:b9:b4:c7:5b:18:f5:6a:24:
         30:4a:48:85:26:c4:22:8e:70:b0:2a:70:49:56:49:da:75:eb:
         d6:50:3b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:00 2026 by rpki-client