Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          v6pCNP9jXMGQTl6ppyGGl4Pwr7vOCXEtZgtufloGFpc=
Subject key identifier:   B4:94:5A:BE:01:CA:58:B5:50:89:A7:00:CB:AE:54:27:CE:E8:FD:F6
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       019CABA1F0798F729F3D835593B4F6A69544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          1874
Signing time:             Sun 01 Mar 2026 23:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:42 +0000
Files and hashes:         1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: F7O/jkBo/2dc5+HSoEAzQxl065dPT6FK8XUsQqAfAIA=)
                          2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
                          3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
                          4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
                          5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
                          6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
                          7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:f0:79:8f:72:9f:3d:83:55:93:b4:f6:a6:95:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: Mar  1 23:00:42 2026 GMT
            Not After : Mar  2 23:00:42 2026 GMT
        Subject: CN=b4945abe01ca58b55089a700cbae5427cee8fdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:67:8d:74:47:dc:98:54:65:b3:40:61:e7:
                    b5:f7:22:21:b4:11:45:f2:87:d5:e5:1c:d8:e7:c2:
                    d1:bd:ac:de:32:b3:de:d6:52:1a:2c:5e:4c:47:3b:
                    c1:a2:48:3e:25:82:16:c1:aa:4f:03:f5:a1:1b:56:
                    82:7e:f1:1f:bc:78:03:68:3c:65:43:f5:a3:92:2c:
                    40:86:a1:4c:29:be:89:fd:50:b0:7c:7b:04:c1:7c:
                    ec:9f:fb:f3:35:db:f1:a0:de:4e:97:98:d2:d9:f2:
                    9e:59:23:86:63:56:32:5e:db:6e:77:7a:fd:d7:9a:
                    5e:57:e3:a0:a2:64:11:6d:53:a4:0c:1e:41:96:3c:
                    61:de:93:3f:1c:8a:c2:1f:df:b3:81:0f:6c:96:08:
                    23:3a:6a:cb:79:5f:2c:17:2d:a9:58:c6:92:a7:92:
                    68:7e:fc:0b:db:11:c7:6e:dc:07:a5:2a:05:21:94:
                    bf:3a:94:e3:d1:72:97:74:4a:43:35:67:3e:e6:b4:
                    97:f2:06:47:83:33:63:16:95:31:5a:47:0d:24:b4:
                    4a:64:d8:8d:f1:b7:66:63:d8:63:fd:8b:be:3e:57:
                    ef:48:3f:72:e4:65:bd:ca:6b:9f:99:f5:75:e0:ee:
                    c5:00:b1:2f:61:25:11:62:9f:4e:f3:76:18:30:6b:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:94:5A:BE:01:CA:58:B5:50:89:A7:00:CB:AE:54:27:CE:E8:FD:F6
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:5d:8a:b7:84:7d:7a:d9:0d:1d:e7:fc:a1:ec:5e:90:07:
         7c:c9:7d:10:fc:9f:93:ec:61:4e:89:b5:49:86:73:fe:20:c9:
         b3:e1:c7:11:84:2c:a4:7a:88:08:b7:8f:1e:6f:f2:a5:35:04:
         c6:89:f1:69:86:8b:40:91:65:aa:f5:46:c0:1c:7f:e4:d1:14:
         52:fa:55:15:54:75:93:56:ac:ca:65:25:28:70:e8:65:7d:15:
         f4:c4:ba:62:66:8e:c0:f9:0b:96:e7:86:28:16:db:ce:de:18:
         ba:85:7e:fe:f7:d6:63:f6:ff:9f:19:b3:8e:d0:3f:86:72:c8:
         53:c5:b0:08:00:43:8f:bc:1c:18:af:af:ef:54:f2:e8:fb:51:
         5b:79:f4:4e:23:00:c1:9d:d2:9c:c8:b6:18:6e:1d:ec:c8:ed:
         d7:4c:97:75:f1:db:1d:1e:37:42:23:99:c9:13:d1:f7:85:8a:
         41:a3:77:13:ca:0d:71:52:28:77:e7:78:ef:32:43:5a:24:c9:
         66:83:bf:2e:6d:2b:1e:eb:2a:9a:eb:6e:9a:a6:0e:5c:d2:28:
         cd:c9:b6:34:7f:98:67:7a:72:4f:17:68:71:7f:4a:49:df:74:
         34:4d:f6:a5:d2:10:bc:04:97:7f:b6:ab:00:d8:6e:20:c2:1b:
         df:ed:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:28 2026 by rpki-client