Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File:                     dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier:          uJBjHp92NfK6QfwGWvJfxfTYUEL/3fQhK+qec20DjJY=
Subject key identifier:   81:DA:63:14:9A:D2:48:1E:92:23:FD:31:52:68:48:A5:53:41:FE:D5
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer:       /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial:       019CAF7EE64C558E70646348A3DD0EFC3E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number:          1238
Signing time:             Mon 02 Mar 2026 17:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 17:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 17:00:55 +0000
Files and hashes:         1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
                          2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
                          3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
                          4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
                          5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: JC+yRPKDb18Cf3HfaqV+FP1dU2yEkF3FgUotzWHdB2Q=)
                          6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
                          7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
                          8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:7e:e6:4c:55:8e:70:64:63:48:a3:dd:0e:fc:3e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
        Validity
            Not Before: Mar  2 17:00:55 2026 GMT
            Not After : Mar  3 17:00:55 2026 GMT
        Subject: CN=81da63149ad2481e9223fd31526848a55341fed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:d1:97:c3:9e:22:c8:12:2d:7e:66:a9:63:
                    0b:74:c4:26:e8:85:36:12:b0:72:0d:a2:3a:bb:a3:
                    29:88:a3:2a:c8:97:ff:87:10:18:3e:6e:4d:3a:b6:
                    74:2b:28:ec:51:77:f5:71:04:9e:f5:50:23:81:bb:
                    66:43:25:3c:74:e8:08:8a:57:98:a5:ba:25:08:20:
                    82:9f:6d:a2:c8:81:17:50:9b:85:3a:a5:c3:d7:4c:
                    20:99:d4:ad:1a:2a:5d:6a:37:67:d0:95:d1:13:0d:
                    8f:9c:7f:9b:34:61:ba:f1:36:7c:03:af:4c:51:c4:
                    ee:bf:74:18:f2:02:93:dd:70:f7:1b:86:30:3a:e2:
                    8d:73:4e:9c:78:42:7b:0c:43:81:cc:39:20:74:ff:
                    fb:1c:c7:6f:ed:20:ca:23:fb:5c:8e:4f:da:69:2a:
                    fb:59:8a:89:a0:b9:71:71:ae:9b:a4:4c:d3:78:8c:
                    50:15:09:d0:84:a0:9c:38:bf:5a:72:5e:5d:c5:74:
                    6b:7c:ae:97:d0:34:20:0c:21:32:ea:29:a5:fa:57:
                    d8:52:8c:b0:ef:84:66:11:89:d0:48:8c:ae:5a:c7:
                    d2:c8:86:9f:8f:22:db:91:6f:83:e4:7c:47:9d:de:
                    05:fb:c6:d4:eb:d6:30:fa:c4:41:60:aa:f8:17:5a:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DA:63:14:9A:D2:48:1E:92:23:FD:31:52:68:48:A5:53:41:FE:D5
            X509v3 Authority Key Identifier:
                keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:52:bd:22:6e:fe:e9:0d:cd:84:4a:c7:92:db:92:d0:e8:
         e4:6e:42:20:a7:aa:56:d1:e0:63:f8:9b:95:8f:c7:bd:4a:0b:
         d7:f5:70:d4:cd:b3:c5:d0:f8:d0:e5:4a:67:f6:2e:06:d7:08:
         17:3a:fd:bc:19:ae:05:67:66:7e:8d:5b:a4:00:8a:45:df:7c:
         08:68:1d:7d:95:70:4e:18:bf:9a:a3:a5:f7:62:95:5b:67:2e:
         82:e4:ad:b4:75:48:46:58:21:97:19:64:18:23:6e:e1:69:f5:
         8a:bf:56:5d:51:0e:91:56:18:2a:99:2e:40:7e:38:54:bc:4c:
         2c:ef:bd:c1:68:23:ee:ab:58:9a:04:78:38:31:21:18:bb:3c:
         cf:53:c6:86:e2:f7:02:0c:8b:0d:d0:62:ab:9e:79:cf:f8:2b:
         2c:ca:3c:19:24:38:a7:51:4f:43:cf:76:1d:c4:8e:9a:f8:9e:
         15:be:7e:21:68:43:d0:19:f5:2f:73:30:11:bb:28:4d:e3:e5:
         7e:fe:78:51:c4:fb:6c:dc:da:8b:fc:90:0d:3a:15:e6:f7:44:
         f0:fd:18:56:1d:03:61:ec:0f:77:2f:8f:70:c4:8a:79:ee:4b:
         41:06:84:65:ff:4f:ec:a9:51:a9:5e:24:95:27:c2:a2:64:29:
         85:96:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:21 2026 by rpki-client