Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
File:                     iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json)
Hash identifier:          JY4pSEU4rHyLlgR0aRvn2WL2ccod7nhUDCedyJk0foE=
Subject key identifier:   52:69:EE:48:51:1B:AA:F6:A8:C2:F4:8D:21:C3:D1:3D:31:55:70:F3
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Certificate issuer:       /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial:       019CAFECCD9EF03F65A8CA12D0E5ED154198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
Manifest number:          0530
Signing time:             Mon 02 Mar 2026 19:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 19:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 19:00:57 +0000
Files and hashes:         1: 8DVQ-9ugCgky3pnqMNoEBWadgvs.roa (hash: 3usiPYnmDDCd45PFwwCGuxvoOoTqgdlnQ1RDqdrxlXg=)
                          2: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: EyW0PdWFaSeb4sczo5sLrl9ZJeksg2mA3r7QaeQGi/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:cd:9e:f0:3f:65:a8:ca:12:d0:e5:ed:15:41:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
        Validity
            Not Before: Mar  2 19:00:57 2026 GMT
            Not After : Mar  3 19:00:57 2026 GMT
        Subject: CN=5269ee48511baaf6a8c2f48d21c3d13d315570f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:bd:aa:54:38:62:ee:41:f8:ab:fa:be:a0:
                    4a:bd:c9:27:a5:48:1a:ac:a5:87:bc:ce:e3:9a:21:
                    23:c1:ba:1c:b0:b3:e8:d3:0f:fb:3c:a7:3b:2c:be:
                    c9:ac:2a:56:1b:34:d6:a0:1c:ff:d5:c3:df:2f:a4:
                    87:fa:35:94:58:f1:a3:0a:74:59:81:ce:e1:9a:6d:
                    de:a0:da:a9:07:4d:df:15:2b:96:de:ec:65:15:5f:
                    d4:d7:36:8b:36:fd:91:be:4b:f3:28:c6:31:d8:e5:
                    db:1b:8c:d5:b6:bf:85:2f:a1:e5:a2:9e:c0:1b:4b:
                    8d:0c:d1:ef:f0:0b:1c:8b:da:8c:a3:b2:56:3a:70:
                    f1:92:b1:fe:b1:0a:f6:96:45:82:1d:f8:f1:b3:4b:
                    e8:ac:a6:86:2d:4d:45:4a:72:4e:79:3a:9e:ac:e0:
                    27:1a:9d:f0:b0:b3:56:b8:61:42:31:5a:89:8b:2f:
                    5c:b6:f3:af:7d:d4:ed:e9:81:e6:f0:60:69:c6:b6:
                    65:b0:a0:b5:77:e4:e1:38:e0:ef:ea:e6:e6:27:87:
                    fa:7e:c0:2c:57:6a:44:8d:16:55:c6:bc:14:dc:11:
                    20:1b:3f:32:ec:aa:a7:18:6f:a9:54:f1:7a:37:8b:
                    ab:af:21:70:f0:90:cf:c6:71:d6:61:04:7c:69:f9:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:69:EE:48:51:1B:AA:F6:A8:C2:F4:8D:21:C3:D1:3D:31:55:70:F3
            X509v3 Authority Key Identifier:
                keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:de:49:59:a0:d1:3d:0c:51:c5:7e:3c:fb:50:ea:a5:a4:
         00:1a:a0:e2:e3:d0:46:e7:0b:77:61:87:18:7e:ac:b5:68:60:
         0c:11:a2:94:52:db:41:8b:b7:73:23:b8:54:0a:d3:46:1c:ec:
         3c:72:06:81:86:ba:05:c0:75:14:94:42:a2:f0:77:d0:1f:13:
         73:7e:9b:ad:7e:6f:13:d8:1d:93:1d:ca:0b:31:2a:14:03:2d:
         ac:42:f3:a5:a7:3d:4e:9a:45:9e:1e:90:f1:af:97:15:5e:39:
         35:80:81:19:a5:94:4b:ac:79:12:bd:00:4b:ca:5a:b6:a0:ad:
         3f:c0:54:1e:c9:cb:af:2b:7a:6b:5e:fe:cc:2b:2a:eb:f1:54:
         82:46:cf:1a:ba:24:35:16:c3:99:1c:a6:60:c2:8c:08:8c:5f:
         8e:25:67:7e:53:6a:6c:8e:b2:25:75:e6:7c:5a:8d:6d:e8:8e:
         fe:87:69:79:c0:4a:28:30:5f:e3:12:23:d4:bf:eb:cf:fa:eb:
         2f:71:1d:c7:2c:e7:a4:5c:8d:90:63:a6:ae:8f:c4:d8:06:5a:
         0b:90:f8:dc:87:aa:f2:f6:c2:d1:b8:01:bf:ff:21:6f:1e:32:
         72:c2:51:7e:43:fc:ce:0f:11:c7:3b:92:56:68:10:ee:21:08:
         2b:d9:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:19 2026 by rpki-client