Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File:                     R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier:          VqIdpCSN2hs3notBgvs4Iiu3V1zLCezUhl8jTXWzVAQ=
Subject key identifier:   5A:87:FA:B6:10:EB:72:FE:4A:EB:5A:52:FE:E9:D9:C1:A7:2D:51:25
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer:       /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial:       019CAC7E16AE9C49C5F426B29D90C7AC2E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number:          0502
Signing time:             Mon 02 Mar 2026 03:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:10 +0000
Files and hashes:         1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: nU2jf9n0WMzpZmOM/qtIW79IxQ4pvs9l0S07WFDHqY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:16:ae:9c:49:c5:f4:26:b2:9d:90:c7:ac:2e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
        Validity
            Not Before: Mar  2 03:01:10 2026 GMT
            Not After : Mar  3 03:01:10 2026 GMT
        Subject: CN=5a87fab610eb72fe4aeb5a52fee9d9c1a72d5125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:aa:7d:b8:8f:16:65:b6:20:a1:79:41:77:
                    ff:0f:71:63:f2:ee:dd:91:45:86:70:7e:38:09:29:
                    ae:c5:bf:d5:07:82:6c:8f:c5:15:e9:28:f9:dc:44:
                    14:1c:e6:75:ca:d3:eb:25:b4:91:39:de:90:9c:44:
                    fc:e5:0b:e3:4f:5e:cc:d2:b9:e1:bb:9e:e9:bf:4f:
                    13:5b:ed:75:1d:b5:c6:f6:98:51:80:34:e2:94:d9:
                    e6:02:ad:a5:84:4d:53:7b:1f:e4:2f:ea:f5:92:11:
                    dc:20:bf:e4:36:d8:40:9a:27:b7:96:24:11:f4:4a:
                    13:2e:83:39:c7:7f:4d:7e:92:f3:34:2f:73:09:8f:
                    85:5f:58:f5:b2:1b:3c:fa:e0:d8:8b:01:09:ff:eb:
                    9d:84:10:a6:38:f0:f8:68:b2:20:03:37:1b:fd:1a:
                    5f:56:35:96:6f:e1:c2:1d:33:69:46:d6:6a:51:f1:
                    1b:65:9b:92:d1:7f:7e:df:37:39:c0:3c:dc:6a:0f:
                    ea:be:32:fb:96:3c:09:76:48:52:a5:ff:6b:b7:14:
                    ca:60:ec:49:96:9d:dd:92:e1:97:71:45:cf:f9:83:
                    6f:a0:83:f7:c5:aa:93:96:56:e4:db:5e:c2:67:74:
                    ce:53:22:33:f8:79:c7:91:79:6f:0b:68:b8:7b:e9:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:FA:B6:10:EB:72:FE:4A:EB:5A:52:FE:E9:D9:C1:A7:2D:51:25
            X509v3 Authority Key Identifier:
                keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4c:ec:c3:0b:27:d8:66:cd:8e:fe:6b:88:42:3f:a3:56:bf:
         a9:d2:1e:40:80:f9:dc:59:1f:97:73:6c:ff:3b:84:4b:85:3e:
         96:32:06:27:02:f3:e3:47:1c:7c:ee:b3:c2:33:f8:0a:70:cc:
         34:d8:54:c5:87:d6:62:d7:c4:d0:9b:93:4e:de:eb:a4:d1:2e:
         90:f5:7c:f0:71:1e:0c:99:fe:3e:50:18:42:93:22:4c:c6:82:
         66:a7:80:e3:17:9b:7d:19:71:6c:66:ff:ba:4e:22:9f:87:a4:
         9a:6d:7a:88:3a:16:90:b8:7a:30:fe:0d:10:3d:56:ce:2b:40:
         61:07:60:10:64:95:e8:28:91:a2:61:8f:98:30:fe:88:03:a1:
         66:80:c5:12:aa:da:21:92:03:c8:fb:78:ac:bf:b9:7f:f2:49:
         09:3a:b8:55:ba:74:c7:26:b0:43:56:5c:7e:bd:4d:9a:a4:6f:
         88:2f:a5:10:e8:4e:d2:31:92:54:17:53:88:8c:e0:10:0b:3c:
         6f:9d:d4:82:68:18:7b:30:0f:b9:fd:7d:d8:d6:ef:6f:5e:d1:
         5b:82:51:83:05:a9:15:01:dc:00:52:07:d8:70:c8:98:a8:51:
         f4:f7:07:1c:54:4b:44:81:c5:c6:85:fb:f2:56:47:38:f4:d9:
         b0:00:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:04 2026 by rpki-client