Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          XSgTu5xBrQ7G4TmjvZ9aOAqRMkkxZmzsYvXyHWZftR4=
Subject key identifier:   E8:A7:31:73:F5:10:D8:21:09:DC:F8:2B:C9:B0:74:14:5C:75:FA:BA
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       019CAB6AF960492A3AFD409C0002442D52DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          121D
Signing time:             Sun 01 Mar 2026 22:00:40 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:40 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:40 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: /jaPJ56nMlHRF8sKkYeGt1Z0IZovxT3PjFJtNJDelU4=)
                          2: 1-crrXO-fETfpfCuOfq_V8AAtFcU.roa (hash: tdCum/fabFsLr9FpxBtUaox/ikhPTJgRBISx07CTGFc=)
                          3: 9qhyf8XaXLBiOxT9FefpSvz7EAo.roa (hash: LVzOeIuhXpbz7YMXKNB/lJ0KobWs5PmsNOZb547oGVM=)
                          4: nRGVIh5sE05xD692H24Cxlq7V8o.roa (hash: Tc2ZVvug9tFo5lvN6aBVNCGxx5GKA6dz+Rua6DfVBe8=)
                          5: qW_xRDyYFTJ1pnImR0U2Y6u9sv8.roa (hash: lYESXNxjJKf8HpJy1cENZI84AstuQ+Y1hlO3VCh5QhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:f9:60:49:2a:3a:fd:40:9c:00:02:44:2d:52:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Mar  1 22:00:40 2026 GMT
            Not After : Mar  2 22:00:40 2026 GMT
        Subject: CN=e8a73173f510d82109dcf82bc9b074145c75faba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:3e:26:ea:c4:f8:3e:0f:aa:93:85:d1:a0:
                    f0:b1:58:c2:86:9e:1b:bb:8c:05:85:ac:df:ae:03:
                    46:89:c6:d9:cd:ab:d9:fe:33:65:45:7a:66:93:0f:
                    ef:80:7f:48:96:db:55:3d:3e:84:5e:55:a2:dd:8c:
                    7e:e9:82:e2:7a:9c:c6:e9:1e:9a:b3:67:6f:d4:de:
                    54:8d:5d:58:22:64:5e:83:ec:2c:8f:d3:a1:6b:75:
                    0e:13:2b:86:b9:24:d7:84:24:61:13:f4:55:7c:18:
                    d5:2d:df:33:2c:22:9f:5e:28:96:83:5e:b9:66:e1:
                    e4:ec:3a:69:e7:15:49:db:26:0f:70:c8:69:38:76:
                    7a:c0:7c:92:dd:ca:72:dc:f9:bf:53:a5:a2:52:05:
                    fe:7c:3a:4f:a6:a3:ba:af:51:4f:4a:02:5d:75:c8:
                    cd:15:8e:16:66:2b:d0:73:23:cf:08:88:fe:66:4d:
                    05:e0:9f:00:db:7b:a2:77:30:c4:dc:a2:88:32:75:
                    bd:50:07:12:7c:06:e3:60:c2:30:3d:e1:8a:64:d7:
                    99:3f:b8:c6:55:d5:cb:16:e8:53:b0:f0:be:6d:34:
                    59:37:dd:24:d9:d0:e0:8b:01:fd:48:1f:28:5d:a8:
                    9b:f7:52:0a:72:86:c1:b0:3b:56:fb:ee:1b:a4:ad:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:31:73:F5:10:D8:21:09:DC:F8:2B:C9:B0:74:14:5C:75:FA:BA
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:48:b8:eb:28:44:0c:8e:86:5c:d9:fa:14:5b:ea:a4:d4:ce:
         a3:ce:48:9c:cf:8e:54:c9:66:6e:e6:93:d9:56:a7:0a:fc:51:
         c7:d4:6d:45:80:de:86:14:15:35:62:44:4f:6d:d5:67:f4:4a:
         52:30:10:ca:4c:f3:54:b3:1e:13:56:6a:1e:aa:c0:90:13:fb:
         d9:ae:b2:bd:6b:d5:90:d5:04:65:d9:f6:73:09:43:cb:f0:44:
         7b:48:23:85:7e:1f:b6:76:7e:f6:e8:da:24:66:c7:0c:d5:c3:
         cf:f7:6c:bc:da:35:f0:45:76:7f:ae:62:7d:f5:5c:93:f7:0c:
         d8:37:00:e1:ab:84:7a:a1:4a:77:0e:20:c8:96:be:1a:2b:2e:
         d1:2c:c0:f3:04:56:e5:d9:45:30:4d:77:08:29:22:20:f7:96:
         0f:fc:af:21:a9:24:dd:94:2b:11:4a:c4:31:04:a6:68:63:2f:
         71:30:a0:c7:10:87:6a:a8:28:7c:19:50:4b:4f:83:b2:54:49:
         43:76:cd:d5:5f:c4:01:6f:3a:88:15:54:ae:25:3b:2a:47:5d:
         c9:b5:50:78:33:a2:9e:ec:80:10:e3:74:94:9d:1f:e5:b2:a8:
         df:c4:8d:00:95:9b:10:4b:bb:69:20:98:65:d7:0b:33:af:61:
         49:80:19:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:48 2026 by rpki-client