Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          hj9ulEepiP/tEa0R4BC01cSlYI8T7asL1Zo8y/yBarA=
Subject key identifier:   B1:78:D3:08:26:C4:48:51:F4:D4:41:30:C4:98:6E:DD:8D:2C:C7:B6
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019CF127EC1798674BEDE1CB06A486BC7572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          1896
Signing time:             Sun 15 Mar 2026 11:00:51 +0000
Manifest this update:     Sun 15 Mar 2026 11:00:51 +0000
Manifest next update:     Mon 16 Mar 2026 11:00:51 +0000
Files and hashes:         1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: AbfLG5np9lzKKSll+80MLSslgAIeMICe3+UE/f62Qfs=)
                          3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
                          4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
                          5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f1:27:ec:17:98:67:4b:ed:e1:cb:06:a4:86:bc:75:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Mar 15 11:00:51 2026 GMT
            Not After : Mar 16 11:00:51 2026 GMT
        Subject: CN=b178d30826c44851f4d44130c4986edd8d2cc7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:05:bc:69:86:43:d5:f0:66:a0:8b:43:34:22:
                    f0:e8:83:df:d6:32:ba:b3:57:eb:31:f6:eb:56:26:
                    49:c4:02:5f:6b:59:54:a8:99:76:23:74:06:b8:14:
                    bd:cb:cb:8a:34:ca:4e:4e:8a:a8:e9:25:e3:91:2c:
                    19:60:25:c6:f3:07:9f:b7:d2:77:c8:74:86:6f:69:
                    33:c4:d7:07:5c:38:35:64:2c:7f:fb:ea:30:6c:06:
                    f2:be:e1:28:f5:61:ad:9a:4d:92:3a:47:25:6b:53:
                    ce:1a:4e:88:db:f4:98:2b:04:48:f6:db:51:f6:e4:
                    69:be:02:a6:ee:e3:bd:c9:66:cc:97:15:23:cb:5e:
                    c3:b9:81:96:14:08:d8:42:08:a1:58:31:8a:cf:6e:
                    0b:49:96:d6:6e:93:f5:e9:33:16:3a:03:8d:79:32:
                    d0:f5:ac:9c:d0:3f:9f:64:95:68:36:2a:6c:e0:e0:
                    52:5d:42:dd:6d:13:3d:f9:8d:e7:f9:cc:ec:4f:3e:
                    b4:36:33:67:14:70:07:7a:05:17:ff:c9:aa:8f:cb:
                    d4:91:fd:38:e0:7f:2a:b3:c3:db:0e:d9:e9:2e:9f:
                    d8:a0:dc:11:4b:e5:f7:d5:ad:76:a7:18:a1:57:9e:
                    df:db:e2:dd:ed:26:16:69:86:78:41:e1:24:43:f4:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:D3:08:26:C4:48:51:F4:D4:41:30:C4:98:6E:DD:8D:2C:C7:B6
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:85:81:90:8d:e8:eb:34:28:47:70:7d:c6:81:15:6b:33:
         d3:16:6b:2a:1d:a2:a7:58:dc:67:d4:a8:ea:60:c3:ff:0f:39:
         56:1a:42:bd:22:3d:53:4b:4f:20:39:4e:7b:d6:df:9d:76:33:
         24:81:66:6c:20:40:bb:c6:3d:fc:a1:35:d1:7f:c9:ae:20:f7:
         5d:b8:a5:28:0c:76:7b:e3:99:36:55:b8:4c:a6:2a:b1:ad:b0:
         27:5d:66:6e:c4:43:d9:c1:d3:83:80:77:ef:fe:b1:d7:b1:d4:
         9a:00:f3:1d:b3:8c:1b:ac:aa:d6:cf:ae:3d:30:ed:8a:9d:92:
         6c:c0:e9:af:14:d8:f6:57:68:7e:5e:33:60:b3:58:93:b0:40:
         60:09:32:86:2e:fd:d8:b9:84:3a:89:fd:c9:be:b2:9b:64:61:
         47:e8:df:b0:d6:aa:81:84:24:71:a4:4b:43:50:7b:60:6d:95:
         56:9d:6c:ee:10:6f:70:c9:68:97:a3:8f:d4:be:b5:53:fe:e7:
         e4:aa:6e:42:54:3b:ce:85:60:3d:bd:3e:68:d2:5d:53:dd:e7:
         3e:c0:b1:4a:2f:3d:52:97:cc:d3:ab:88:4b:03:b2:ea:ab:21:
         df:e9:4d:0b:40:69:40:13:e8:90:ca:8a:be:94:86:ce:bd:a4:
         3f:80:ab:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 15:30:20 2026 by rpki-client