Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File:                     c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier:          wQf82RX5AZYawA75EjkF0dNeYI+3TZ11kfe4abggi4s=
Subject key identifier:   3D:98:F2:95:E0:38:26:1F:1C:74:6B:12:98:32:7A:70:60:72:0B:53
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer:       /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial:       019CAAC6AE969C9BFA79C2E46FCFF1AAA233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number:          0955
Signing time:             Sun 01 Mar 2026 19:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:13 +0000
Files and hashes:         1: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: 1fy3Xd1YbT/nhxrXhBgBpEFGGqoa7Qfo16Cw0Vuf4J0=)
                          2: ibsoqErDKT3266b2vH5vf8KZDA0.roa (hash: UrhNuNL7GgbO0jHlNAEUHP2GLPJjzZnieCjHTk+nkGg=)
                          3: pZwVWQ0lcHojahu0_rV2N3zpQcw.roa (hash: J+F2E6hLoP7AmyOiwDWr5K7X8LPnv6yqpXFURrTE1yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:ae:96:9c:9b:fa:79:c2:e4:6f:cf:f1:aa:a2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
        Validity
            Not Before: Mar  1 19:01:13 2026 GMT
            Not After : Mar  2 19:01:13 2026 GMT
        Subject: CN=3d98f295e038261f1c746b1298327a7060720b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:95:bf:19:57:33:13:d8:8c:bb:34:11:b6:
                    6f:b0:50:6e:4d:fd:f5:00:51:f4:f6:71:51:dd:bb:
                    93:ff:0e:81:5e:5f:1c:b9:37:6a:ad:34:63:4f:07:
                    85:58:40:1f:25:10:25:50:1a:34:bb:3b:46:d4:3d:
                    80:59:09:79:21:da:5e:18:33:e4:1f:da:96:e1:b6:
                    43:6d:61:c3:2e:1e:fe:8d:fc:d9:82:c8:19:eb:e0:
                    44:b2:26:4f:96:1c:26:9b:16:56:5f:70:9c:a9:d3:
                    89:22:02:78:41:00:df:58:00:2d:9c:bc:be:27:12:
                    97:86:55:a5:48:0b:38:37:c8:54:53:2c:17:00:3c:
                    a4:1a:1b:d6:5a:cc:ee:e4:ef:74:4f:d2:36:17:e8:
                    3e:d6:48:f0:50:2b:64:63:10:e2:fc:5b:1e:02:8a:
                    75:32:71:4e:da:ff:68:46:32:ff:eb:4c:34:8b:67:
                    12:0f:d4:53:84:04:96:8d:c3:2e:74:bf:9b:60:1b:
                    19:27:76:c7:bd:2f:2d:42:0e:94:5a:5f:de:b3:85:
                    76:1b:be:3a:eb:14:6b:1c:f7:6b:10:eb:f3:0d:4d:
                    ae:33:44:4c:3f:e4:f8:9e:48:bc:5f:fe:a1:6c:b6:
                    86:77:c3:13:01:d2:a2:5c:1e:59:57:b3:07:6e:38:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:F2:95:E0:38:26:1F:1C:74:6B:12:98:32:7A:70:60:72:0B:53
            X509v3 Authority Key Identifier:
                keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:a9:62:81:fc:7d:46:ad:97:af:2a:67:4e:dd:20:65:6d:
         48:38:19:8d:68:0c:18:ea:d4:80:79:2c:eb:98:40:07:92:37:
         e1:2f:1f:60:c8:c6:b6:b7:13:7d:97:63:f5:cf:58:95:e9:91:
         c6:83:7a:00:82:b0:9d:71:cb:d7:c1:d7:08:7f:b7:97:55:4a:
         15:6f:f5:57:48:2d:d0:32:2f:fc:3f:8f:08:cc:73:cb:77:b1:
         b0:99:a7:31:28:bf:df:7e:2a:80:14:f4:bf:b4:8f:8b:b0:fc:
         c0:b7:ef:6d:5f:4f:ad:1f:b0:33:49:72:71:ea:c2:dc:a3:93:
         ef:04:3c:74:3a:0b:f8:31:47:e0:a1:91:7d:2d:f1:91:8e:20:
         f1:86:5c:03:46:45:c0:57:cd:da:39:58:65:a3:e3:24:b9:49:
         0d:28:93:78:8d:9e:af:6f:6a:ae:79:f7:9e:35:84:f9:42:89:
         be:4b:32:5f:ad:37:92:07:da:27:e5:d4:b7:75:6a:7b:93:88:
         9e:7e:16:05:87:ea:69:66:b6:1c:31:95:d8:8b:db:ec:89:8a:
         cd:27:fb:bc:91:69:7b:7b:60:d0:ee:5e:f8:42:91:84:c5:4e:
         55:53:2e:5f:de:e7:32:de:cd:9c:a1:10:e2:73:d9:b0:5f:ea:
         8f:31:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:16 2026 by rpki-client