Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File:                     Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier:          IhEBD43xcLaUKjDEBZOQYf0JdYf5xUFB9QK/AigiQAY=
Subject key identifier:   F7:09:CA:AB:68:51:CA:B5:A8:FF:BD:F8:80:34:2B:D4:D9:15:A8:C0
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer:       /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial:       019CA7C50FB707C4507C99DC7BED69731683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number:          50
Signing time:             Sun 01 Mar 2026 05:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 05:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 05:00:35 +0000
Files and hashes:         1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
                          2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: BabmuUjauF0Dfq02mG9JehQEut3Th2Uj2V5jWfjm5fI=)
                          3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:c5:0f:b7:07:c4:50:7c:99:dc:7b:ed:69:73:16:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
        Validity
            Not Before: Mar  1 05:00:35 2026 GMT
            Not After : Mar  2 05:00:35 2026 GMT
        Subject: CN=f709caab6851cab5a8ffbdf880342bd4d915a8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:23:f2:51:17:b2:61:b3:43:db:ad:c4:af:
                    ff:d6:69:d6:f3:6c:a9:47:32:ce:65:40:82:9b:6c:
                    92:f7:8a:c8:09:b5:ad:4b:58:88:fc:bf:43:78:e7:
                    b7:15:77:15:61:4e:da:c3:d8:7f:51:ef:b0:d4:b1:
                    58:d1:54:5f:08:e1:b0:4a:64:a8:ee:bf:0c:60:0c:
                    3a:82:61:d8:f1:c2:04:fb:d0:fb:c6:53:8f:c7:7f:
                    69:a6:8b:9c:1e:6c:ae:27:d5:00:3a:66:3c:2d:89:
                    03:16:d8:46:91:63:b5:0c:a2:0f:bd:f4:b9:36:b6:
                    b7:df:12:6f:2e:06:29:50:7c:b3:8e:58:a6:01:4a:
                    5f:a6:05:0a:84:41:7d:59:91:bb:b3:3a:17:f7:08:
                    d6:9f:3d:8b:a7:15:2a:91:ee:58:7f:c4:9d:26:3b:
                    e5:ae:a2:61:2c:b4:a9:2b:b6:f2:f8:71:e2:e4:1b:
                    32:2e:d9:42:8a:ad:80:9c:0f:7a:cd:9f:ed:a8:8e:
                    90:1a:19:ba:08:37:e4:4c:c8:9b:90:e1:d1:f6:95:
                    91:56:67:03:ad:f4:68:0d:25:3c:4b:23:2d:87:f3:
                    c1:ac:89:75:3e:d5:05:b3:6d:ab:1d:49:ca:a4:3e:
                    77:07:93:3e:08:a2:4f:8a:85:aa:2e:fc:24:f1:c7:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:09:CA:AB:68:51:CA:B5:A8:FF:BD:F8:80:34:2B:D4:D9:15:A8:C0
            X509v3 Authority Key Identifier:
                keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:da:d2:b3:cf:a1:6d:64:d8:b9:6e:13:3b:59:94:5b:3f:0d:
         2c:70:82:bc:e7:7f:fd:23:8e:f7:12:2b:5a:42:c4:b4:62:d0:
         38:27:08:cc:9e:a7:74:19:68:de:f5:3a:a6:ce:9a:ed:c1:4b:
         73:47:19:8d:c5:32:8e:48:54:6c:fb:04:16:e2:e6:90:73:66:
         0c:a1:f7:34:47:89:a0:2e:7e:36:bc:f6:74:f4:00:31:f6:de:
         78:53:1a:d9:87:65:01:46:95:40:ef:7a:96:ac:95:c4:81:d9:
         01:52:81:f9:5a:96:26:63:9d:68:d7:9c:3d:11:e7:cb:24:b6:
         03:8a:0c:79:2d:de:e9:68:44:80:b8:74:6d:ee:e0:5d:bd:0d:
         99:6a:3d:b0:67:60:80:32:1a:f4:0b:1a:43:96:bd:92:f9:12:
         2c:52:78:21:6b:27:02:cd:a1:5a:c2:fe:22:7a:63:72:b7:29:
         32:8d:c0:a8:5d:d0:19:92:b2:a6:d5:a1:8e:de:2a:95:7f:7c:
         82:d4:fe:53:a7:b7:a8:0b:57:07:55:41:d7:26:05:9c:52:6a:
         66:27:e6:13:f3:6c:19:f8:19:93:bd:b4:3e:18:7c:b0:5a:0c:
         5b:5f:a9:03:3f:4a:7e:04:7a:d5:3b:28:ed:43:94:25:62:f6:
         ea:8d:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:50 2026 by rpki-client