Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
File:                     rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json)
Hash identifier:          h6JTlRipO5MAEVE0n2jUYj0VpToBIZ9EEpN9W2oLuKw=
Subject key identifier:   A9:27:73:78:AC:8E:0B:4C:9D:90:80:67:C6:4E:78:57:5B:8C:4E:F2
Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
Certificate issuer:       /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Certificate serial:       019CB1A427D11073E57863C809E7F30549FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
Manifest number:          DE
Signing time:             Tue 03 Mar 2026 03:00:51 +0000
Manifest this update:     Tue 03 Mar 2026 03:00:51 +0000
Manifest next update:     Wed 04 Mar 2026 03:00:51 +0000
Files and hashes:         1: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (hash: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE=)
                          2: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: fRdKIL7SVpp4D5Fhp2sajdorWsLun4vXDWmVs1m5vlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b1:a4:27:d1:10:73:e5:78:63:c8:09:e7:f3:05:49:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
        Validity
            Not Before: Mar  3 03:00:51 2026 GMT
            Not After : Mar  4 03:00:51 2026 GMT
        Subject: CN=a9277378ac8e0b4c9d908067c64e78575b8c4ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:69:86:3b:d8:ad:44:a2:b2:a3:be:13:ad:
                    59:fd:83:c0:3d:8b:40:6e:5d:65:31:9c:41:be:98:
                    6a:51:d9:b4:22:16:5e:3a:73:e6:a8:7e:e7:52:68:
                    a3:6d:b9:de:75:00:84:e1:64:d0:50:30:fb:48:bc:
                    5f:c9:be:22:d7:7e:b4:40:c8:7d:42:1f:84:dc:29:
                    1a:bc:85:f7:56:b5:53:01:6c:19:4e:aa:d3:cc:dd:
                    40:8e:44:77:0a:49:0e:be:6b:29:a4:36:fd:24:e4:
                    16:e2:06:3b:a0:06:35:c9:19:e1:b2:ab:f6:a1:a2:
                    62:4d:fb:72:6b:76:fb:f4:96:3e:03:de:4e:53:b4:
                    4b:b6:94:d6:4d:35:45:51:37:7d:9e:c1:c3:fd:ec:
                    7f:26:24:53:3b:0f:6d:6f:c4:a3:d8:ba:1b:58:ff:
                    f0:76:f5:02:0f:f1:42:6a:2e:a8:85:5d:ad:87:23:
                    7b:c4:f5:29:99:5f:ec:72:85:34:8e:db:64:cc:bc:
                    9f:ef:00:39:5c:35:f3:ad:21:98:82:23:a0:57:24:
                    df:76:5e:cc:89:2b:53:da:20:2f:00:f4:cc:2d:08:
                    03:17:08:94:84:ee:f8:af:bd:7c:c9:1c:92:c3:b2:
                    5d:a4:5d:1a:c0:63:90:80:3d:e6:1c:5a:c9:22:75:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:27:73:78:AC:8E:0B:4C:9D:90:80:67:C6:4E:78:57:5B:8C:4E:F2
            X509v3 Authority Key Identifier:
                keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b2:0d:be:a9:45:2c:e0:5c:03:53:3c:00:82:75:25:97:c0:
         55:d0:e6:b8:ce:ff:87:38:5e:be:06:de:97:06:34:bb:78:32:
         fb:1a:b5:44:24:fd:53:35:9c:72:40:6f:44:a4:94:80:b3:a1:
         5f:e0:ea:08:71:ff:42:60:d8:29:cf:e6:64:d2:85:43:cb:35:
         69:9e:c0:c5:0a:b4:e1:80:b7:5b:17:a5:80:a4:8d:4d:e4:bf:
         9a:e1:e4:0e:7d:a0:a4:f6:ce:69:14:12:b3:89:db:e2:dc:f0:
         62:fb:b6:67:79:31:f8:d3:ed:ba:e3:8d:d0:b7:58:d6:09:54:
         b7:eb:cc:41:f1:e0:a6:55:5e:9b:0a:ae:88:0e:82:f1:d2:7b:
         26:8b:e8:6d:34:18:2c:4a:c8:ca:50:31:a3:0b:0e:ba:cb:97:
         5b:22:55:57:20:a4:72:7a:3a:f0:41:b9:5b:ea:46:8a:4a:2c:
         95:4f:fa:6e:a2:10:7d:97:e7:3d:3a:44:01:30:0a:9f:af:65:
         cd:7e:6b:0b:32:7f:a7:79:ae:2a:de:9a:51:76:6c:cf:6f:c5:
         26:7a:6b:18:98:d5:3e:3b:dd:a9:a7:de:1e:2a:7c:1c:6e:96:
         95:e1:2f:20:6b:02:40:bc:e4:f1:42:62:3d:4f:9f:9b:93:ef:
         2a:27:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:18 2026 by rpki-client