Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File:                     Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier:          1I33h3evZB+jIMQ8mzcnIodUB6Yp8evF7L+hCsBwJoQ=
Subject key identifier:   F9:28:4F:69:E4:8A:26:12:6D:9C:6E:5D:44:15:5F:40:3D:F4:94:4D
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer:       /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial:       019CACB4E51D6ACBBFDBFDDED91F7E3D3C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number:          0C36
Signing time:             Mon 02 Mar 2026 04:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:02 +0000
Files and hashes:         1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: HfAS+qAm+xNPwXoIM86gUuZQhjWUTEAyDPX0GVEBe30=)
                          2: rq0Igngn6mQzQAc5iKtb5wJdTyU.roa (hash: +8wcpot5HIuUBXib66PRvYYuXQtonsS/RRDmfYpMdNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:e5:1d:6a:cb:bf:db:fd:de:d9:1f:7e:3d:3c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
        Validity
            Not Before: Mar  2 04:01:02 2026 GMT
            Not After : Mar  3 04:01:02 2026 GMT
        Subject: CN=f9284f69e48a26126d9c6e5d44155f403df4944d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:e7:fe:2c:a9:e1:be:bd:49:cc:7a:24:19:
                    55:0b:5f:73:a1:42:92:ee:6f:44:6b:e7:26:cd:ce:
                    0f:13:f7:b3:5c:d6:14:8b:b5:30:19:51:7f:5b:16:
                    e7:e7:a5:7a:07:65:f1:81:12:c6:ed:af:d0:d7:22:
                    20:be:8e:c8:34:b2:0e:4b:70:af:ed:38:4d:f0:f7:
                    88:a9:36:46:24:87:a9:fb:c3:16:dd:1e:77:da:f0:
                    e5:b2:6c:2b:b8:d7:cd:94:53:46:56:13:fe:a6:18:
                    8d:55:94:05:e5:4c:bd:9b:71:d0:3b:a1:c5:74:f2:
                    34:5a:1a:6a:52:64:48:25:c5:01:15:7f:ac:a6:1a:
                    41:0c:3b:4d:75:28:5b:0c:2f:17:09:b7:20:3a:04:
                    13:88:43:67:01:2c:2e:e6:0d:79:7e:36:02:2f:ce:
                    fd:fb:0b:9e:52:8d:31:3f:1a:75:70:66:85:03:65:
                    83:35:a3:b8:43:f5:22:7c:ea:e6:d4:9e:c5:18:3f:
                    60:44:5e:91:34:4b:e9:b7:97:f2:32:93:45:20:de:
                    96:16:00:40:a4:4e:2b:a4:12:b0:fd:95:80:bb:32:
                    e9:d9:fe:30:f1:7f:1d:2c:62:02:c1:a0:c7:0f:05:
                    78:8c:69:2c:a5:61:3d:5c:47:2a:4c:8e:e8:45:c4:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:28:4F:69:E4:8A:26:12:6D:9C:6E:5D:44:15:5F:40:3D:F4:94:4D
            X509v3 Authority Key Identifier:
                keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:6d:cd:87:d2:07:5c:fb:48:bf:cd:1d:2d:b7:b8:7c:2e:46:
         5b:ba:3e:45:f4:d9:8b:4d:b3:34:43:8f:a2:da:24:d4:c7:07:
         04:c1:65:67:70:08:e0:80:cf:88:d5:4d:7a:c7:58:2f:6d:c5:
         5a:94:36:08:20:e0:37:01:e0:e1:04:3b:69:3c:6f:c9:34:98:
         8d:3e:32:9a:c9:e4:63:fe:c8:d5:64:aa:8a:be:36:d8:43:2d:
         cb:a1:ca:55:f0:d9:9b:6d:22:8a:9d:18:ad:76:98:4b:ea:7b:
         6e:d1:a2:de:89:0e:a5:79:45:19:96:f7:bb:e7:74:32:12:ac:
         0c:f6:59:f5:99:28:69:90:4d:bd:1b:7d:80:5c:17:bb:1d:18:
         a0:a4:67:21:ef:50:ad:1a:94:bc:3c:21:99:82:f4:b2:b6:a1:
         50:37:95:df:79:53:9b:08:f0:9f:a0:76:53:93:15:38:7d:4c:
         ef:81:a7:cc:8e:aa:ed:46:3d:6b:58:43:0a:fb:ba:76:3e:a4:
         bd:2b:0d:06:57:93:c8:f7:9b:71:93:e2:16:0e:be:b7:5b:f4:
         cd:a4:e6:87:ba:3d:4c:f1:e6:ae:10:55:21:53:26:78:62:f0:
         4c:12:36:02:63:85:a2:49:79:e7:35:3e:09:22:d6:b2:6e:04:
         ee:66:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:01 2026 by rpki-client