Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          HyyKHbqcSPkhwBCCBgUpHgCIvd2HvLVq34PVmjQhcmw=
Subject key identifier:   DF:E4:54:30:8A:5C:42:D6:9E:CA:04:78:CC:28:B0:DF:4F:2E:1A:E2
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019CAAC676D7738A9D609CBF87B4435E16AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1305
Signing time:             Sun 01 Mar 2026 19:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:59 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: EkJAaOl92rHsILFg13v0MrLFkrVO8F+TWZYw+sOcC9s=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:76:d7:73:8a:9d:60:9c:bf:87:b4:43:5e:16:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Mar  1 19:00:59 2026 GMT
            Not After : Mar  2 19:00:59 2026 GMT
        Subject: CN=dfe454308a5c42d69eca0478cc28b0df4f2e1ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:a3:bb:54:e1:11:d3:87:71:06:b7:7d:f5:
                    14:97:b4:c4:0c:7b:bd:3f:67:61:99:11:fe:27:8f:
                    62:ff:b0:69:41:4a:d8:22:ff:32:1e:ef:ce:99:7c:
                    1a:fb:f8:3e:b5:14:66:4b:06:8a:b9:7b:0d:7f:40:
                    2f:15:23:01:fb:45:72:cf:98:20:ce:7b:d7:9f:92:
                    4c:e3:b4:b9:91:ef:3f:41:bb:ad:3c:62:83:22:c9:
                    44:f6:39:23:33:f3:0c:8b:c0:ec:e5:e8:fb:d4:95:
                    69:fe:24:70:1f:fc:fe:c3:43:85:bd:35:95:c7:6e:
                    77:87:ee:60:12:bc:4e:7d:04:7e:15:e3:62:44:60:
                    b0:68:1a:2a:96:72:88:ba:d7:82:6d:de:ee:0a:37:
                    4a:20:ef:ab:d8:fd:40:47:d6:4e:a4:9b:e4:83:e5:
                    62:28:fb:13:95:21:2c:ee:9f:e8:47:0b:d3:25:27:
                    a1:72:af:b8:bf:d0:17:47:d6:1b:48:0e:8d:ea:19:
                    29:86:dc:80:98:23:0b:cf:18:ad:55:4c:f0:95:4f:
                    ff:00:91:48:94:e2:50:33:96:e1:84:e9:a6:15:4e:
                    71:98:23:d6:0e:a0:0c:04:db:e6:d3:93:b2:73:cc:
                    60:56:6c:56:be:99:b9:f0:ff:64:d4:06:d0:57:22:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E4:54:30:8A:5C:42:D6:9E:CA:04:78:CC:28:B0:DF:4F:2E:1A:E2
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:05:cd:c4:93:ab:7c:be:c0:6c:49:92:2a:7b:b7:9d:62:91:
         f8:4c:c8:5d:05:9b:3b:5b:6a:8d:0b:ca:74:a6:1f:39:5f:27:
         cd:93:d4:e5:fa:16:cb:25:32:a7:ce:97:d9:83:8c:fa:5d:26:
         41:57:cf:34:8a:b0:28:de:99:34:b2:84:1a:13:0b:aa:b4:9b:
         e6:ef:a0:74:55:3d:d7:ff:24:fb:3f:c8:10:5e:c7:a8:db:fe:
         d2:fb:8c:96:6a:f8:39:99:91:b0:e9:43:79:c4:75:d7:e7:b1:
         e2:1f:dc:c9:ff:2e:db:37:31:1a:31:83:68:d5:5f:71:5d:a4:
         16:d4:7b:6b:e5:42:79:e6:04:c1:e1:d9:1d:3e:33:7a:b8:6d:
         f3:30:2b:d9:b7:a1:ba:39:37:94:6e:a1:9b:7d:d3:ee:be:44:
         39:8a:12:f8:3c:4d:cd:9d:4f:06:4c:3b:c5:fc:3c:1c:05:c0:
         af:06:b7:e6:00:61:e1:38:49:dc:49:40:43:e1:13:c7:5c:da:
         7c:2f:96:b5:e9:37:c7:1b:45:81:6a:df:26:0c:5b:7e:2d:8c:
         60:eb:48:3a:63:34:ea:64:5b:91:77:8c:58:21:17:e3:7f:81:
         4d:66:fc:b7:99:cd:55:df:e2:22:23:0f:d2:8b:3d:7f:76:47:
         48:12:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:44 2026 by rpki-client