Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File:                     hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier:          5wgEvTKzKxF08eZCe/pVVzenxJDjumGC4XVZqhLnylU=
Subject key identifier:   3B:E0:11:54:EE:07:0D:01:E9:C4:94:4B:83:13:73:E7:2D:FE:B9:33
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer:       /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial:       019CAA8FFD400E15A99605AFA319162FC8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number:          16DA
Signing time:             Sun 01 Mar 2026 18:01:29 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:29 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:29 +0000
Files and hashes:         1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
                          2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: 8x+MLg5ARR5uj08KJZR7J4+hcbozSg3XZLzGp/92/Ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:fd:40:0e:15:a9:96:05:af:a3:19:16:2f:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
        Validity
            Not Before: Mar  1 18:01:29 2026 GMT
            Not After : Mar  2 18:01:29 2026 GMT
        Subject: CN=3be01154ee070d01e9c4944b831373e72dfeb933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:58:8c:23:2b:ea:b2:b6:e6:7a:dc:cc:9b:
                    d8:81:33:91:bc:c0:a8:ac:e1:d3:8f:05:b4:13:84:
                    4b:b4:0c:c0:ea:fd:64:14:4d:af:57:ba:03:e0:c9:
                    16:a8:d6:ab:35:ca:bc:78:bb:26:38:84:58:d1:be:
                    6b:3b:43:cd:30:67:de:aa:9a:69:56:3f:2f:64:8f:
                    6e:00:ac:f0:6f:8b:07:0f:52:64:ae:d1:3b:c4:41:
                    02:ec:c8:0f:55:c0:8c:09:63:d4:82:50:2a:ae:d2:
                    de:6f:d4:53:e7:d9:5b:d1:d9:f2:b2:78:75:a8:71:
                    35:ea:a1:fe:3f:73:41:7d:8e:ca:7b:a7:84:a5:1e:
                    a7:8a:75:17:16:95:dd:8a:3e:57:31:20:03:5c:fd:
                    a1:a7:aa:3f:30:4f:4b:d4:9c:25:99:de:8e:40:a8:
                    84:00:7f:b6:0b:4f:7b:a0:45:ca:aa:24:c2:19:37:
                    03:30:e2:43:7d:7f:86:5c:12:1d:52:95:9b:ec:b0:
                    e8:d0:2e:a0:46:5d:e4:dd:af:7c:5a:b8:4d:65:a4:
                    f1:45:ad:bc:f9:c6:a0:47:82:35:38:21:57:a6:8f:
                    ed:a8:b2:b7:1e:a4:f2:eb:3e:c0:0e:5d:1c:97:ce:
                    dc:37:94:45:ee:4b:30:ae:06:c6:4a:b8:77:2e:b3:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:11:54:EE:07:0D:01:E9:C4:94:4B:83:13:73:E7:2D:FE:B9:33
            X509v3 Authority Key Identifier:
                keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:1a:82:bb:e0:a0:7a:90:13:84:6c:da:15:cb:14:7d:4e:10:
         22:3b:1b:ee:f4:49:fc:55:f8:a5:8d:70:f4:7a:87:84:81:1d:
         0c:d0:20:ce:da:fe:62:9d:7b:7a:8f:3d:df:3e:3a:f4:ba:ad:
         f9:c3:a2:6b:91:43:c7:37:57:bb:9a:9b:29:10:19:7d:e4:47:
         e1:9b:02:9f:16:3e:e3:45:66:9e:e3:65:74:43:00:ac:6b:fc:
         3d:74:1e:b8:d8:db:22:0f:42:6e:6a:67:a5:f9:4a:65:35:d2:
         ec:ec:67:c2:c3:be:e2:ab:98:57:14:61:e7:10:09:f9:c2:8e:
         3f:25:96:a0:2a:86:df:41:93:9f:cc:06:dd:e4:40:c8:a0:25:
         75:44:14:c8:81:06:8e:70:22:2b:3d:0b:d1:e3:21:d9:ca:89:
         8c:63:aa:0e:50:0c:0c:48:3b:bd:79:82:03:d9:33:3f:0e:63:
         e5:20:d3:17:58:c5:29:41:ff:31:e2:54:a5:49:40:a3:2a:c9:
         1d:d1:84:c8:af:b2:41:fe:0e:c9:bf:1d:2f:94:e0:39:ba:bb:
         50:76:b2:bf:56:48:37:f6:a2:e4:7e:e4:f5:93:b9:30:85:e5:
         e1:42:95:bb:69:97:c2:21:af:39:84:f6:c1:ee:28:0d:4f:ec:
         09:ca:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:21 2026 by rpki-client