Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          Ioza93RV738HPXLOZlJ7wC1zlCOuaQUd8Ai2lD4fZkA=
Subject key identifier:   59:B2:C2:51:09:31:49:1D:CF:39:53:BF:04:87:AC:99:0B:38:F4:85
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       019CABD8FCADBB718D3E64565C6195D89295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          04DB
Signing time:             Mon 02 Mar 2026 00:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:50 +0000
Files and hashes:         1: U_ZTyzand_WYQHwaGLdDZJKVTxU.roa (hash: pVHYAJp1u51cRGJyOQT+SjKcxp5OZfdjLVWKDZ8gDhk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: QKLnoFUjmRpZVqdl1kE3OyesHvWdurWrwVpcwnOvCNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:fc:ad:bb:71:8d:3e:64:56:5c:61:95:d8:92:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Mar  2 00:00:50 2026 GMT
            Not After : Mar  3 00:00:50 2026 GMT
        Subject: CN=59b2c2510931491dcf3953bf0487ac990b38f485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:52:8f:66:73:67:38:fb:cf:69:7a:a9:59:
                    e0:04:61:f2:eb:45:00:19:1f:79:b2:72:17:4d:8d:
                    0e:b4:60:b0:fa:a9:4a:f6:33:1c:2a:5a:01:94:47:
                    db:0c:fb:d2:a4:69:eb:0c:bd:a1:4a:f0:81:13:06:
                    7e:da:6d:1f:22:87:f6:09:42:67:93:18:54:b7:6c:
                    28:08:48:dc:4d:f5:c0:99:4c:0a:21:2e:74:c6:25:
                    b3:c3:51:2a:5e:26:c8:a6:42:67:d4:2e:cf:24:e9:
                    23:bd:d7:40:64:0a:fc:7e:00:aa:76:32:00:e1:07:
                    12:9d:4d:77:53:ee:44:4d:51:af:cd:c0:11:8b:34:
                    67:ab:df:dc:57:2a:d0:94:37:7c:74:15:7e:a5:35:
                    2e:7e:bd:0e:8a:2f:00:d2:f8:46:b1:ba:8b:dc:f4:
                    04:f2:e8:d3:6e:dc:7d:d0:9e:3c:17:0e:3b:89:80:
                    83:96:48:4c:d6:15:71:04:ad:d8:c5:15:81:5b:55:
                    db:61:bb:06:36:0e:e7:d3:90:0e:49:ca:fe:56:d1:
                    0b:0b:93:9b:a9:a3:fb:cb:50:04:0e:e0:fb:b1:ec:
                    06:24:5f:a3:51:3b:42:03:97:9d:a5:6a:9d:72:ef:
                    3a:59:8f:69:3b:83:1f:c7:47:d8:b2:b0:c4:37:b2:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B2:C2:51:09:31:49:1D:CF:39:53:BF:04:87:AC:99:0B:38:F4:85
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5e:88:ac:fe:bf:6e:dd:4d:35:c0:4d:6a:7b:1b:ff:08:53:
         5b:dd:3d:b9:53:05:84:99:5f:25:3f:3f:d8:c0:a3:29:a2:da:
         94:46:aa:02:85:75:d6:0e:9e:64:24:1b:7f:3d:b7:2b:4b:dc:
         16:04:66:6c:a5:2a:e3:59:7b:da:b2:db:1a:8f:6d:e7:b3:14:
         f5:d0:99:b7:79:92:a3:36:6c:72:eb:9f:f4:2b:de:c7:03:53:
         f0:de:a2:f1:22:ff:be:4c:f7:54:67:d3:c6:43:8e:ef:02:36:
         d9:34:06:7a:28:eb:59:53:e6:27:99:10:ff:e8:f9:6d:e0:79:
         e2:e9:12:ad:7f:72:df:83:f9:8b:10:19:1a:43:d4:fb:2f:3e:
         24:ac:f4:ad:1d:f6:f5:85:c2:d4:96:44:a1:c9:14:98:40:bc:
         a8:e9:2e:e6:52:cb:05:68:e8:56:21:f9:bb:02:db:8b:1d:64:
         23:2e:f8:91:c8:36:28:a8:20:20:d6:b3:72:c4:1b:6b:62:e1:
         b6:5a:dc:3a:2a:2e:bd:bb:f8:b6:37:7f:ff:b2:c9:33:3d:4a:
         d9:f6:ea:5d:90:bb:53:d5:4b:e7:63:3f:3b:ce:b1:65:2b:cf:
         77:33:2a:11:b8:48:ea:17:73:44:25:f8:f6:8b:a1:0c:58:97:
         1c:2f:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:51 2026 by rpki-client