Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File:                     nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier:          CMnoc/NBuuFbEp2LX5klqeGyrgik8UGeQxxJeyGFGnU=
Subject key identifier:   0C:63:88:39:5F:8A:A8:07:62:9E:1A:01:0A:16:9F:91:12:F0:9D:B2
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer:       /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial:       019CAA589296BD76FAC60A8E75237A3B79AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number:          0B15
Signing time:             Sun 01 Mar 2026 17:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:57 +0000
Files and hashes:         1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
                          2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
                          3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
                          4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
                          5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: HiiqAUlDdTTdG6739OeVDB38DJs+5MqF6E27u/TH9Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:92:96:bd:76:fa:c6:0a:8e:75:23:7a:3b:79:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
        Validity
            Not Before: Mar  1 17:00:57 2026 GMT
            Not After : Mar  2 17:00:57 2026 GMT
        Subject: CN=0c6388395f8aa807629e1a010a169f9112f09db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:54:23:0e:0a:c4:e0:d6:10:80:c2:d7:06:
                    a1:1e:85:48:98:6f:c0:33:0a:d9:c6:95:21:6e:d3:
                    dc:19:c3:e6:e4:e9:43:68:f6:64:63:b2:cf:f3:ef:
                    52:23:f9:a6:be:d0:10:0e:fb:3a:18:22:8f:d1:46:
                    21:b5:10:7b:6b:45:b5:a9:34:82:09:a9:62:b9:e4:
                    74:dd:b4:5a:6e:4e:96:ab:4e:e9:50:f7:fa:d8:03:
                    37:b8:2f:16:e0:32:dc:90:be:cc:5a:a4:ad:0f:24:
                    a7:8d:7c:27:e8:55:4e:e3:64:1e:73:89:0b:e2:5f:
                    b8:e4:98:d1:f8:ad:4a:bc:ad:0b:9f:c6:50:b5:ac:
                    41:be:cc:6c:11:8a:f0:16:3b:36:f5:b3:b3:42:43:
                    e7:81:9e:8f:f2:5e:61:f1:3c:46:29:0b:5a:32:40:
                    70:bd:27:30:17:f0:93:8d:da:9f:18:46:8a:b3:aa:
                    44:b7:a1:fc:66:b0:ba:16:9a:13:26:0a:ca:31:60:
                    3d:f3:9c:a1:21:4f:38:86:b9:24:41:9a:ff:55:b6:
                    d6:14:f7:50:d8:a2:63:18:ea:40:fe:b8:48:63:0b:
                    e9:31:0a:55:1f:e1:4c:23:0c:3d:20:85:87:4f:00:
                    6b:a2:96:e5:e5:ad:5d:d3:6c:22:66:41:78:25:b5:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:63:88:39:5F:8A:A8:07:62:9E:1A:01:0A:16:9F:91:12:F0:9D:B2
            X509v3 Authority Key Identifier:
                keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:01:84:70:2b:f2:9c:e7:f3:91:b0:74:6f:98:d0:81:ec:da:
         bf:73:bc:b4:45:d9:f1:20:da:89:29:23:bb:f4:62:44:e2:8b:
         91:0d:ba:5a:30:19:8c:59:a8:e4:14:ef:8c:37:0e:97:32:53:
         f2:49:46:04:27:2f:ba:72:bd:de:53:4f:b8:32:5f:68:78:3b:
         ed:be:07:a7:e2:8f:46:12:a8:67:89:7b:95:50:d4:fd:a2:97:
         ce:27:48:30:52:af:da:fb:a2:3a:5f:21:4c:f2:2b:74:a7:e4:
         03:3c:44:49:fb:ed:dd:bc:e0:b1:97:b8:e5:10:af:d9:32:64:
         93:4c:99:c8:1f:96:30:50:85:1b:95:7c:7c:32:5b:27:f0:0d:
         00:29:2e:2f:32:1a:a2:4d:2f:1e:2a:3b:a5:38:e3:0a:15:9d:
         eb:ff:cc:b6:11:95:67:9b:40:5f:ef:7c:9c:0d:70:d9:c5:42:
         4c:d4:cc:97:86:a7:a7:b4:c1:64:da:1d:30:1e:e9:a4:ea:23:
         21:8d:8d:6d:b0:7a:84:a3:69:a7:66:bd:2f:e2:4f:f3:f3:72:
         54:30:ce:6d:21:2f:b6:c3:c0:f9:5a:d7:cc:3b:c5:7a:31:c7:
         59:ad:bf:aa:6f:b0:e5:ab:2c:ad:55:ad:f8:65:c3:a8:8b:06:
         c9:5b:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:24 2026 by rpki-client