Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File:                     96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier:          dQz9QQnDBHUQXP/Iu4d0ZqoArHLcdzSo6OOAaiiqvjo=
Subject key identifier:   D6:52:B0:DF:22:0D:D9:38:10:B7:ED:DA:A9:8F:F1:DF:39:CE:94:F2
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer:       /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial:       019CAB34A7590655EC2D859FA817E05149FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number:          05A9
Signing time:             Sun 01 Mar 2026 21:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:20 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:20 +0000
Files and hashes:         1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: UVXWmJd+TpCf+V/+MALisZ6jlPnLH4ROP9FVVbnAWqA=)
                          2: d4KrySsXtgR3TbJYSM5N4Uqx4KU.roa (hash: EHWSR+qUf6znYV7HsqlNW+Vcbs+/lAqwQEe/T0CiYVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:a7:59:06:55:ec:2d:85:9f:a8:17:e0:51:49:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
        Validity
            Not Before: Mar  1 21:01:20 2026 GMT
            Not After : Mar  2 21:01:20 2026 GMT
        Subject: CN=d652b0df220dd93810b7eddaa98ff1df39ce94f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:59:9d:18:9b:19:fb:8d:62:40:32:33:c2:
                    dc:01:64:e0:50:1b:22:e9:95:d2:27:45:57:ff:bd:
                    36:cb:95:54:4a:4b:d8:cf:f0:ce:b9:31:f4:de:5c:
                    39:bb:17:71:61:63:48:a5:dd:51:b1:13:a1:1e:80:
                    de:04:02:29:0b:b2:c5:d5:d5:87:de:8c:73:b4:c6:
                    74:c0:21:d3:bd:33:4f:23:f8:05:b6:10:96:56:0d:
                    7d:50:d6:3b:f7:e8:e4:60:7c:95:fb:36:42:02:7e:
                    6c:7e:27:b2:5b:55:c7:2b:b9:bb:4d:e6:ca:15:56:
                    28:0e:68:04:70:96:94:12:51:47:5c:28:20:fc:72:
                    34:90:ae:33:b9:fd:b5:72:10:3d:92:3b:6f:a5:07:
                    62:f4:e5:72:5f:ae:c2:cb:86:95:9d:46:98:14:58:
                    b2:ef:bf:70:8d:34:0d:b5:c7:22:b1:60:0a:ed:c3:
                    49:1f:62:a9:78:3a:b6:c8:e9:35:6c:fe:8f:18:b2:
                    6b:9e:10:5a:a9:c8:72:f5:0a:49:ba:cd:da:91:1d:
                    08:fb:39:93:90:7b:65:c9:c0:e3:1a:b2:5a:65:f9:
                    44:15:33:b9:f1:8d:1d:9e:c1:3a:70:fd:ac:0b:de:
                    68:18:9a:5d:8f:c8:3d:59:9c:35:4c:1a:0a:ba:a3:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:52:B0:DF:22:0D:D9:38:10:B7:ED:DA:A9:8F:F1:DF:39:CE:94:F2
            X509v3 Authority Key Identifier:
                keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:f1:d2:24:f5:3e:b1:35:70:c2:f2:cc:49:c2:c5:51:02:
         5a:d3:18:8e:5b:99:92:fb:8c:57:e6:61:1c:86:02:36:82:19:
         8b:6c:25:6d:6a:f0:54:e2:f6:a0:3c:2f:de:d0:a3:82:2c:42:
         17:d4:5c:c3:32:70:4a:e4:a9:16:03:76:20:f6:52:72:aa:b3:
         3a:9f:d0:a2:06:2c:57:db:9e:d5:25:4a:24:a1:73:d5:7f:02:
         96:db:a9:72:48:3f:ae:d6:9d:b6:80:01:f9:6a:d5:b8:b7:b0:
         4d:53:01:53:8a:93:71:e5:0a:eb:d3:fc:18:d3:a5:25:f4:1a:
         1a:ec:a1:ed:66:36:8d:8b:e9:14:5e:ec:67:38:ee:b5:9f:c3:
         44:cc:dc:4e:0f:aa:16:23:a3:7c:b2:20:19:31:3e:f0:6e:58:
         92:79:b5:02:c5:ff:5e:82:d8:1d:42:1c:d5:09:36:17:d9:f3:
         84:79:75:f5:23:1c:f7:eb:0d:de:62:fa:a1:bd:a6:ea:3a:a6:
         ca:b8:33:d1:0c:86:eb:bb:97:99:24:9b:bc:ad:f5:7a:fa:bb:
         45:70:61:de:b5:8c:df:9c:b1:4f:bd:8c:cc:e3:b8:47:2f:d8:
         5c:0a:3e:0f:7f:37:15:24:db:23:ec:13:58:2b:4a:45:fb:99:
         9f:28:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:03 2026 by rpki-client