Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File:                     1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier:          iggP/sTxir0M58uwqRBsNFwV3KjB1Mo81Dkaq7g8jaQ=
Subject key identifier:   F1:23:AA:87:01:37:75:85:1C:0E:EC:BF:D1:84:FF:12:EA:DF:D8:87
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer:       /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial:       019CAC0F942C005935656A6BC8FFD1DB7553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number:          0AB1
Signing time:             Mon 02 Mar 2026 01:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:27 +0000
Files and hashes:         1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: +iRoU43F07IpKljWj6DutFB6C7sXfqy3b8rJ1TdGxcU=)
                          2: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (hash: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:94:2c:00:59:35:65:6a:6b:c8:ff:d1:db:75:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
        Validity
            Not Before: Mar  2 01:00:27 2026 GMT
            Not After : Mar  3 01:00:27 2026 GMT
        Subject: CN=f123aa87013775851c0eecbfd184ff12eadfd887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:eb:e7:82:a6:75:2d:38:bc:7d:83:ed:f8:
                    32:be:07:e2:c2:a9:c1:eb:a1:63:60:f3:6d:ec:6f:
                    06:fe:72:51:75:ea:a4:86:2f:9d:a1:db:8a:3a:18:
                    56:d9:0f:de:f4:39:6d:28:cb:96:f3:fa:9e:31:3e:
                    aa:ec:1e:34:37:47:69:df:47:ce:97:0f:9e:3a:cd:
                    83:05:a8:dc:c2:00:eb:7f:8e:c5:ad:0e:ac:27:ed:
                    26:f0:c2:45:88:02:df:9b:43:e2:d2:06:30:9c:d1:
                    f7:cc:e8:ba:10:5a:f2:eb:bd:28:7d:14:32:dd:e7:
                    99:1a:81:82:1d:05:a8:70:4a:ee:a9:06:b6:8f:fe:
                    39:bd:a6:4a:df:3c:62:8e:c3:c1:39:7a:26:ce:58:
                    06:93:43:a7:49:b3:49:cc:f0:79:da:e4:c5:26:f1:
                    f5:ab:6e:80:d5:ae:7d:98:8c:d3:8a:41:8d:7e:f3:
                    55:fc:cb:09:d7:72:b2:20:1d:13:d5:1b:ab:52:f3:
                    28:65:04:71:e2:db:ab:04:f1:e1:66:83:94:c4:b4:
                    b8:8f:96:1e:7c:9c:e7:88:f8:d1:c6:ee:51:2d:b7:
                    ca:03:d7:4f:d7:63:3b:33:3d:76:b1:87:6b:c2:dd:
                    9a:a0:65:19:ed:1b:4b:e1:2c:e9:00:e7:4a:7b:f7:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:AA:87:01:37:75:85:1C:0E:EC:BF:D1:84:FF:12:EA:DF:D8:87
            X509v3 Authority Key Identifier:
                keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8d:a8:c5:7c:b6:2e:f0:12:42:51:47:5a:7d:a1:8c:77:ae:
         31:5f:b9:55:bb:b3:fa:47:26:e2:b2:13:0f:89:99:85:8f:d6:
         ef:c7:06:32:11:bf:36:84:c6:f8:23:e0:66:55:f8:5e:c9:79:
         d0:18:a1:23:56:df:21:a1:1f:7d:43:a2:02:43:93:b2:77:5a:
         11:99:72:8a:8b:86:8e:fc:e0:30:56:c8:72:62:14:14:fd:a0:
         e7:0b:c2:78:c0:ed:14:30:8a:36:5e:73:1d:76:24:c2:70:5b:
         b2:07:a2:9c:59:1e:47:c1:e0:14:87:4f:78:fc:dd:c0:ec:6a:
         60:d4:78:9c:f9:b7:f4:53:e1:41:1a:4c:3d:cf:e8:4d:ed:b8:
         2a:f8:03:8c:45:43:5b:ae:1b:31:98:eb:24:b8:f8:03:19:1a:
         b3:54:17:ea:9f:29:8f:cd:6c:21:a7:a3:dd:90:72:ce:0f:63:
         eb:79:75:56:6a:94:86:9e:bc:b6:6d:81:64:6a:73:e9:60:49:
         c1:75:49:fd:b0:26:08:8c:35:72:bb:40:7c:ad:19:80:7d:3a:
         14:14:bd:d7:b0:be:4c:9b:a4:38:a2:c1:50:b4:c2:86:71:1b:
         de:dd:23:37:aa:aa:97:38:f7:e5:b1:ec:14:01:4d:ce:5a:fd:
         47:19:4e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:10 2026 by rpki-client