Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File:                     9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier:          CFgwaRQegCF9gqxtBgFUH9KLxL78mZMqrw6/fscApZ0=
Subject key identifier:   36:05:AC:49:6F:45:FF:2D:90:54:D4:52:AB:FA:18:8E:12:0F:2F:78
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer:       /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial:       019CAA58FD91EB2B7386D9D86A50572E17FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number:          056E
Signing time:             Sun 01 Mar 2026 17:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:24 +0000
Files and hashes:         1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: 9G23/YHwro+yriY0zirkVO59s4EzrFl5DvviUV+2jls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:fd:91:eb:2b:73:86:d9:d8:6a:50:57:2e:17:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
        Validity
            Not Before: Mar  1 17:01:24 2026 GMT
            Not After : Mar  2 17:01:24 2026 GMT
        Subject: CN=3605ac496f45ff2d9054d452abfa188e120f2f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:8b:d6:3b:b7:bf:1e:07:bb:f7:d2:9c:27:
                    bc:1a:5e:80:a9:55:39:4d:26:2d:60:a9:2f:8c:e0:
                    40:fc:48:d2:37:6b:08:a4:f8:4e:ca:01:fb:e1:92:
                    7c:ba:b7:36:19:a8:f5:51:cb:85:66:15:9d:cb:5f:
                    c6:e7:04:17:97:24:1e:41:f5:00:17:43:46:65:88:
                    32:54:d5:b2:3e:0c:11:53:d4:75:d9:40:06:28:f7:
                    07:b0:b1:ee:d4:8a:89:ce:fa:89:ad:1e:59:d7:7d:
                    bc:ba:56:05:58:8f:27:be:fa:46:b9:7f:46:a0:83:
                    20:94:66:70:fa:0c:6a:ee:e1:ac:51:72:ec:8c:60:
                    ed:8a:32:43:39:88:14:85:14:fa:0f:74:ed:a9:cf:
                    1f:be:20:7d:34:91:61:57:36:73:7b:b4:71:a3:01:
                    73:e1:65:97:33:a5:6a:54:83:cb:a3:8a:a0:dd:87:
                    05:1d:78:31:fc:2d:ba:88:1a:dc:60:f5:97:79:46:
                    42:e9:7b:b7:85:78:03:5f:56:90:97:1b:d4:b2:9b:
                    93:8d:19:4d:8a:87:0d:c9:0d:e8:77:a2:48:24:f7:
                    0d:c5:fb:28:70:b6:8b:95:39:cf:d7:91:e9:4e:b8:
                    66:36:4b:3d:66:37:0c:2b:69:93:6f:74:bc:a5:1b:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:AC:49:6F:45:FF:2D:90:54:D4:52:AB:FA:18:8E:12:0F:2F:78
            X509v3 Authority Key Identifier:
                keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b1:8b:ca:c3:f5:b3:df:62:e8:aa:eb:65:cb:fa:eb:76:1f:
         bd:c0:fb:18:7f:bc:d2:5e:fa:56:9b:eb:79:61:1e:95:85:7a:
         b1:06:d2:b3:32:4c:69:89:32:8d:df:68:6a:19:82:e9:e4:d6:
         dd:e0:02:3d:a5:8b:e2:89:98:6b:26:aa:18:fd:bc:c1:f8:bb:
         cd:d9:27:1f:03:57:97:80:19:a5:c0:04:d9:89:cf:01:16:bc:
         99:6d:13:67:5d:e1:28:7b:cd:9d:11:1a:21:a1:fe:16:7a:a6:
         fd:69:5f:16:11:3a:37:c1:d5:f2:03:0a:92:51:65:0c:dc:90:
         80:54:77:f9:96:5a:9b:5e:06:a5:7f:4f:dd:ff:82:9d:f7:e8:
         6d:3a:d4:2b:19:5a:09:58:a4:ca:60:88:4a:d0:4b:70:26:f7:
         ae:42:4a:00:94:04:6b:3c:b8:ed:cb:f3:c3:d4:2a:35:4f:fd:
         83:2a:ea:5b:21:e2:5b:6a:2e:eb:7a:49:f5:07:ce:5f:fc:5a:
         1d:f1:75:04:05:ea:26:36:42:94:a3:b5:d8:4b:3e:4e:1d:8e:
         13:c4:2d:95:73:97:e6:64:0c:e2:91:f8:40:c4:e5:fc:a2:29:
         a5:aa:78:0f:56:c4:04:32:82:ce:9b:17:17:0f:9c:98:79:fb:
         72:77:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:24 2026 by rpki-client