Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          Xp3L9XSv1DfwJ04vA1sAM9WHbLWfZgmtbvb0gaeizvY=
Subject key identifier:   BD:2E:B3:87:C8:15:2F:84:9E:3C:7C:59:7C:DE:A8:7D:A9:E8:EE:06
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       019CAA58D5804A4F6EE1A5B9D162AF08E54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          0C06
Signing time:             Sun 01 Mar 2026 17:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:14 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: rfuNzKto6BX0J14NjuUGE1C+B3o4gRXyKxxLazyPhsg=)
                          2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
                          3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
                          4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:d5:80:4a:4f:6e:e1:a5:b9:d1:62:af:08:e5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: Mar  1 17:01:14 2026 GMT
            Not After : Mar  2 17:01:14 2026 GMT
        Subject: CN=bd2eb387c8152f849e3c7c597cdea87da9e8ee06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:a6:a8:36:d7:04:27:e1:45:bc:fe:23:ba:
                    aa:3b:05:9b:52:ed:c4:65:0d:0f:a0:e2:a8:8a:e6:
                    10:9d:c2:9c:84:68:21:e8:3a:6d:36:4f:73:e5:c7:
                    7e:ac:42:17:a4:d6:37:aa:cd:2f:6a:b1:0d:33:e0:
                    53:b7:5b:04:62:28:f0:ae:82:2f:19:77:bc:a1:1c:
                    61:18:c4:7f:6b:e5:dc:9c:d0:f7:8f:28:fd:2a:f4:
                    ab:a4:69:c2:6e:ac:18:5f:85:1e:10:ec:da:f4:f4:
                    f7:e3:a1:6d:04:d2:f6:15:c6:ad:8c:5f:bf:cb:1d:
                    94:16:66:9b:a1:fc:15:46:a7:c7:1f:cb:46:8f:31:
                    61:bf:c0:49:d7:91:c3:72:48:9b:bd:2d:ef:86:4b:
                    b0:4a:c8:a9:78:91:ee:2a:31:60:18:3f:93:5b:0f:
                    f0:88:6d:b7:15:56:3d:7c:50:d9:ad:9b:07:6e:e5:
                    8d:e4:c8:66:16:3a:0d:0c:87:e0:a4:dd:04:de:8d:
                    2a:0d:ec:fc:f7:17:0f:06:a1:45:df:51:6c:45:f8:
                    c9:43:13:28:8d:37:8c:1b:9d:31:00:75:0b:27:11:
                    86:66:d2:8d:4f:70:ce:de:c5:d8:ac:84:e1:20:60:
                    b0:15:6c:00:96:49:46:fc:09:5c:21:c4:f8:a8:50:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2E:B3:87:C8:15:2F:84:9E:3C:7C:59:7C:DE:A8:7D:A9:E8:EE:06
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:90:18:d7:74:bd:05:5a:e1:6d:95:95:05:89:47:06:ab:f7:
         65:47:fe:46:b1:6b:f1:cf:7d:26:25:11:d8:29:d6:43:24:39:
         89:6d:fe:f3:6d:1c:3c:56:ca:ea:37:a3:28:d1:9b:1d:5e:f9:
         2f:14:76:07:a9:90:53:b3:45:08:bd:10:81:6e:fa:30:95:cf:
         d4:fb:05:7f:aa:29:85:d5:90:8a:44:88:4c:50:63:cb:36:6e:
         98:43:24:c2:bc:67:f4:90:1d:62:b6:d8:da:2b:89:12:23:54:
         37:4a:c1:4a:b7:85:c2:c9:74:93:d9:95:6b:d1:1d:95:05:7c:
         48:36:36:45:27:6a:95:96:65:17:91:39:cf:8a:76:72:64:20:
         52:bc:d8:cb:f2:48:c2:f3:fa:a4:da:de:74:a1:cd:01:db:05:
         ff:6e:f7:f8:70:0e:55:8d:32:e9:5e:bf:b7:bd:27:f6:76:64:
         b7:46:b2:0e:3c:e1:99:1b:55:d7:8d:99:bc:20:e1:38:5e:a8:
         a3:d2:25:84:d4:ca:f4:a3:11:82:b9:73:ad:5b:ac:cb:04:49:
         ae:7d:f2:b7:17:3e:8e:00:eb:ca:16:9e:d0:bf:2b:94:de:00:
         a3:ee:33:36:c6:20:43:9a:04:4a:58:4f:ed:19:4a:f4:f3:06:
         4d:02:c0:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWNWASk9u4aW50WKvCOVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk
ODcwOTUwHhcNMjYwMzAxMTcwMTE0WhcNMjYwMzAyMTcwMTE0WjAzMTEwLwYDVQQD
EyhiZDJlYjM4N2M4MTUyZjg0OWUzYzdjNTk3Y2RlYTg3ZGE5ZThlZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dimqDbXBCfhRbz+I7qqOwWbUu3E
ZQ0PoOKoiuYQncKchGgh6DptNk9z5cd+rEIXpNY3qs0varENM+BTt1sEYijwroIv
GXe8oRxhGMR/a+XcnND3jyj9KvSrpGnCbqwYX4UeEOza9PT346FtBNL2FcatjF+/
yx2UFmabofwVRqfHH8tGjzFhv8BJ15HDckibvS3vhkuwSsipeJHuKjFgGD+TWw/w
iG23FVY9fFDZrZsHbuWN5MhmFjoNDIfgpN0E3o0qDez89xcPBqFF31FsRfjJQxMo
jTeMG50xAHULJxGGZtKNT3DO3sXYrIThIGCwFWwAlklG/AlcIcT4qFAHrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0us4fIFS+Enjx8WXzeqH2p6O4GMB8GA1UdIwQY
MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt
YTc0ZTRhODg3ODA0LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0
LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJAY13S9
BVrhbZWVBYlHBqv3ZUf+RrFr8c99JiUR2CnWQyQ5iW3+820cPFbK6jejKNGbHV75
LxR2B6mQU7NFCL0QgW76MJXP1PsFf6ophdWQikSITFBjyzZumEMkwrxn9JAdYrbY
2iuJEiNUN0rBSreFwsl0k9mVa9EdlQV8SDY2RSdqlZZlF5E5z4p2cmQgUrzYy/JI
wvP6pNredKHNAdsF/273+HAOVY0y6V6/t70n9nZkt0ayDjzhmRtV142ZvCDhOF6o
o9IlhNTK9KMRgrlzrVusywRJrn3ytxc+jgDryhae0L8rlN4Ao+4zNsYgQ5oESlhP
7RlK9PMGTQLAuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:01 2026 by rpki-client