Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File:                     1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier:          O9lswLNA+UBGeweEnPXbuBbzK1IVY7tS+irAw0dAVn8=
Subject key identifier:   04:B7:8A:59:84:6A:F0:BF:04:74:06:EA:89:C8:98:EC:66:29:D8:BF
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer:       /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial:       019CAEDA0F2740B39386CBB3501455806A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number:          0B2F
Signing time:             Mon 02 Mar 2026 14:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:52 +0000
Files and hashes:         1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: f3cYQraNUyn+WMCOf5GuY+e+bCSK0tzC531de225mOk=)
                          2: GHotn1I_CfqFAPEWFyv9br8ia3I.roa (hash: jZG9+3CBzuOz4wMuP+83/hjNEuOMEsA5C1lYAS1ilM0=)
                          3: LSzcWbNsdVdvEIBim3BJCzhTVYU.roa (hash: FuA94sbSiSEVegunW1ULoVnEChhQx9cTZsUwwYAqYyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:0f:27:40:b3:93:86:cb:b3:50:14:55:80:6a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
        Validity
            Not Before: Mar  2 14:00:52 2026 GMT
            Not After : Mar  3 14:00:52 2026 GMT
        Subject: CN=04b78a59846af0bf047406ea89c898ec6629d8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:76:ae:53:41:27:f7:26:ad:02:5d:c3:6c:
                    2f:77:fa:95:39:e4:95:b5:f2:f1:96:83:b7:b0:e7:
                    04:bf:bc:a0:6c:b4:d3:b7:f3:9a:e9:f0:50:b0:1c:
                    34:58:76:b7:98:6b:af:ff:23:d1:c1:e7:35:f6:6d:
                    df:05:42:65:a1:5a:e0:a5:54:68:1e:2f:cf:2e:88:
                    bf:1a:1e:01:9d:7e:a7:8b:f7:8c:24:50:49:3c:e0:
                    3f:67:31:9e:13:15:81:f0:11:91:8e:d9:a2:5f:5d:
                    e5:72:7d:73:48:aa:b2:04:4e:22:90:53:c1:9a:74:
                    1a:61:84:78:1a:e7:dd:44:34:e6:db:11:4a:3a:52:
                    f2:8b:05:23:1e:b0:12:e2:04:99:91:d8:75:5c:13:
                    a6:e1:9a:39:5f:4e:23:0d:96:99:dd:81:f1:9c:de:
                    2d:cc:26:2f:46:1e:94:95:2d:eb:c0:36:c0:5c:d9:
                    68:4e:66:c9:68:e3:16:02:bb:a4:19:04:35:a0:33:
                    91:57:74:61:1a:0e:21:ba:aa:6e:b5:83:7a:9b:91:
                    27:82:65:21:8c:28:54:ed:78:cc:22:e3:85:33:87:
                    c4:9c:6e:26:cc:64:81:34:e9:92:c6:f7:df:8e:29:
                    4f:73:c5:ce:e6:71:fa:c4:dc:3d:08:cb:47:22:31:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:8A:59:84:6A:F0:BF:04:74:06:EA:89:C8:98:EC:66:29:D8:BF
            X509v3 Authority Key Identifier:
                keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:a3:cf:38:73:59:fa:ad:5c:71:36:e1:19:6b:83:0e:30:
         10:5c:2d:78:4a:ca:40:a8:5d:c9:ca:8b:d7:b7:7f:5e:26:71:
         ea:b4:aa:20:97:ec:ff:1e:4a:6d:6a:c0:d9:30:7d:15:96:41:
         76:20:03:5f:47:a7:f6:09:f7:f6:6f:e4:10:eb:12:5d:a5:c1:
         bd:bd:5b:9a:4f:d0:ed:a7:24:7c:3d:0d:e6:cf:ee:53:bc:43:
         45:ea:b5:dc:69:21:6c:d1:0e:f8:28:a7:d1:8b:7e:d0:7a:78:
         32:2f:36:38:e3:68:45:b9:39:a5:72:5a:3a:b7:7b:d9:1e:a4:
         9c:76:07:6d:07:2e:53:a0:51:77:86:15:f3:90:0b:37:2d:f8:
         05:b2:a2:29:45:80:ba:b3:a4:05:9a:82:4c:39:b9:cb:99:db:
         44:bd:6e:88:10:de:fd:dd:0d:fc:f3:1b:a4:3a:f8:63:23:0c:
         00:93:5c:18:16:c5:3e:7f:0d:a5:16:b1:c4:5e:fe:ad:02:b3:
         e6:ad:a1:aa:f2:a7:18:40:1b:ab:c3:32:fa:b0:88:ad:f7:96:
         dd:95:17:13:ee:9f:8c:aa:92:9b:33:07:a7:26:7e:3b:e9:35:
         08:44:49:6f:d2:61:8c:3f:64:f4:6d:9b:fd:0d:4f:32:83:1a:
         51:80:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:08 2026 by rpki-client