Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File:                     aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier:          346VfcS04YIRUwTN30vQc7nVla/i09nJoZMNQskJmUk=
Subject key identifier:   6C:03:26:57:2F:63:97:37:44:0C:41:95:00:6A:23:AB:25:85:31:66
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer:       /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial:       019CACB542B63E1773967C811ED0F3EC53CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number:          0F64
Signing time:             Mon 02 Mar 2026 04:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:26 +0000
Files and hashes:         1: 8XVZkZs9aTYgXhHak4NEd39uxJw.roa (hash: SCbWhvc5dAVlQf2Rm3aO7mw2DxqRyMlcWllDbPzS+Gk=)
                          2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: ypTCae5VVddE7gMIAg/JRliC0MeqHdUO4KmtcNIi4/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:42:b6:3e:17:73:96:7c:81:1e:d0:f3:ec:53:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
        Validity
            Not Before: Mar  2 04:01:26 2026 GMT
            Not After : Mar  3 04:01:26 2026 GMT
        Subject: CN=6c0326572f639737440c4195006a23ab25853166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:de:fc:31:73:f9:7c:6e:b3:27:c1:47:b2:
                    34:68:ce:3b:4a:d5:2f:4e:9a:20:b9:7e:f1:94:d0:
                    4f:15:64:2d:0c:76:fb:5d:34:40:b0:3b:31:a0:57:
                    80:7b:0a:f6:30:eb:aa:a5:5b:e0:b0:6f:44:da:a0:
                    5b:40:b7:53:9e:4e:ef:bb:17:3d:10:2a:e0:86:ca:
                    0d:5d:4a:18:ae:eb:ed:cd:f2:60:c5:af:b8:62:fe:
                    0d:85:da:64:b3:0e:f8:55:52:9a:c4:1f:80:3c:d4:
                    7d:4c:85:9b:d1:38:d8:24:d9:de:37:16:19:f7:c3:
                    63:cb:0e:bd:8d:bb:fc:86:a0:1f:0b:83:51:0e:53:
                    b0:f9:c9:dd:f5:09:9c:18:4e:19:af:44:a7:c8:97:
                    f6:69:6f:88:7b:23:2f:37:9c:b6:d1:9f:4a:f7:b9:
                    f4:08:3f:85:22:94:0a:6f:30:7f:e0:71:02:29:e8:
                    6b:4b:ff:ed:49:44:74:f7:0f:bf:20:ba:7a:fe:d7:
                    f1:28:4f:71:ce:8b:32:af:9c:30:d3:f7:0e:55:17:
                    7f:91:86:64:c9:3f:71:f1:e5:f7:f3:05:47:97:ee:
                    1a:9d:a5:7a:64:c1:f9:8b:4d:c7:0e:27:ca:2c:eb:
                    26:bb:08:3a:f3:d3:47:92:da:32:3c:2c:cf:26:83:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:03:26:57:2F:63:97:37:44:0C:41:95:00:6A:23:AB:25:85:31:66
            X509v3 Authority Key Identifier:
                keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:80:1e:2e:d1:ae:40:8b:9e:7f:29:df:e7:7a:02:b8:7e:82:
         18:26:93:26:fc:32:e3:76:f5:cd:9a:3d:d2:a4:f4:63:0a:a6:
         8d:d9:6f:4e:4a:ee:5c:5f:a2:55:58:3d:b2:c5:0f:9b:38:87:
         f0:2e:25:00:4b:4d:2c:72:6f:3e:39:e4:bc:08:c0:0a:83:ee:
         1d:c5:fa:7e:23:72:60:b5:7c:d8:e3:d4:af:72:23:82:61:d9:
         96:55:c6:53:45:94:2f:26:31:fb:ce:64:00:83:45:72:58:13:
         ba:09:39:1d:6b:b2:d0:09:1b:39:e4:a7:16:b4:91:83:57:e9:
         3c:5d:63:72:89:90:cd:1f:60:7a:d9:71:ba:78:da:56:99:87:
         b5:06:27:e0:93:92:3c:55:69:62:af:df:9a:5f:50:1c:23:56:
         f7:ce:a3:7f:00:16:7c:53:4f:ca:36:d5:af:4f:d0:5c:81:89:
         28:dc:18:42:01:6d:f9:20:b2:e5:fb:2e:a0:ab:9c:35:7f:a4:
         e0:4c:cf:47:06:7c:f8:d0:5c:bb:ad:78:7a:2a:08:2c:fd:04:
         12:ca:08:80:bf:6b:a9:ae:56:66:99:0e:1b:d4:db:a4:f7:0a:
         8d:e0:78:b2:ec:66:f1:e4:2f:9d:5e:df:c7:35:9e:76:0a:53:
         01:8f:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:41 2026 by rpki-client