Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File:                     Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier:          /3/feP0ExqeBp/Lk+ITg94pUBrxZNsBBk5Fbk5eTMLc=
Subject key identifier:   91:EF:AB:94:DF:8B:31:FE:6E:C1:9A:76:CA:21:88:6F:0C:EA:43:BE
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       019CADFE2CE40AC99DB016C96FB0543E4F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number:          1710
Signing time:             Mon 02 Mar 2026 10:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:41 +0000
Files and hashes:         1: 80AHb416dPFtah1nGaAc_7l46Ec.roa (hash: 2D/X4apH00Mk7Ti0XtGlvP9oq+7ZpgnstiU/IgSvOD0=)
                          2: ANo9L73aObGqzdP0orWNPP3485k.roa (hash: Q3dDG3+jQe8HP6goxHrxtXjwKKzMb7l9p077g0BZffQ=)
                          3: KXpXJO-YFLLgP89XzYYz7qcHQUY.roa (hash: GGh45Wv5joUkRSI7WVUZH33rmAafKbq5cLNpmunXMXY=)
                          4: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: mCFz4WDnQLGL+wGCGrg7ArQ++OE7dlkW87QO5+bwZHI=)
                          5: ZGPQKEDVE9F1MV2KWCts_BoufGk.roa (hash: epehMPMwEjYywMBrhnF1PZ/wa0g0S9LNY7+R460jN/I=)
                          6: iWOLIa8CHwTMmCIWqUjl6myNeCQ.roa (hash: rcAH7VEF8TBjliKTDv/7zF+IYhohItkkjWceaK+DiMY=)
                          7: uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa (hash: h5Q3Ax5wjUbWsPmn7ajHFEGC0r7tCkijHeUzTOQ9fVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:2c:e4:0a:c9:9d:b0:16:c9:6f:b0:54:3e:4f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Mar  2 10:00:41 2026 GMT
            Not After : Mar  3 10:00:41 2026 GMT
        Subject: CN=91efab94df8b31fe6ec19a76ca21886f0cea43be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:3c:36:56:7d:aa:e9:73:d0:b7:1f:b2:5f:
                    5d:16:9c:71:a2:f8:48:5d:9d:55:78:dc:90:98:fe:
                    19:86:a1:74:5e:28:28:9c:2f:d7:32:71:36:58:56:
                    b3:8f:43:de:87:df:ff:4a:1b:6f:4f:6c:2e:88:fa:
                    f7:d2:f9:b4:1a:3c:b8:a0:07:a6:92:f6:e6:39:eb:
                    c2:5c:ef:05:cd:39:bb:63:93:0d:22:83:c6:bd:c9:
                    72:ce:a2:4c:41:67:dc:f8:c2:ce:e5:1e:c5:a1:60:
                    f9:e5:8d:67:71:3a:4b:e4:e7:f3:0d:c5:d0:79:3a:
                    25:82:1a:c7:89:09:aa:75:72:c9:14:ec:29:ce:81:
                    9a:30:b9:44:c9:4d:9e:01:76:dc:c7:e6:53:79:c5:
                    ff:2f:88:00:d4:ff:ce:d3:46:fc:81:13:52:2f:22:
                    f9:ab:70:94:de:ae:86:63:90:f9:0b:90:2f:d2:ba:
                    bd:0a:c7:e2:0a:83:fb:71:ee:ce:7b:d1:86:c3:1c:
                    01:7f:5b:16:28:07:3d:54:84:96:99:67:17:9c:81:
                    06:4f:25:98:a9:6d:1a:e5:98:2d:2a:cb:3f:a9:c2:
                    10:cf:47:db:26:14:62:d3:c3:d8:19:24:ec:d7:79:
                    f6:c8:bf:29:fd:2b:bf:87:06:89:ea:46:81:fc:47:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:AB:94:DF:8B:31:FE:6E:C1:9A:76:CA:21:88:6F:0C:EA:43:BE
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:fa:5d:13:c7:ec:db:e5:de:03:96:10:03:8a:12:45:5a:
         8f:41:08:21:c7:60:4c:f3:1c:bf:f5:59:1a:55:20:4a:80:fc:
         01:67:d0:65:f7:66:af:df:5d:5c:c6:b6:2c:2d:46:51:1c:ae:
         d4:a0:f1:4d:f3:61:ce:76:06:b6:63:8d:82:e1:d1:eb:79:4e:
         1f:32:0f:d3:70:c9:a8:77:14:b2:c8:5f:86:1f:c9:ce:1e:a2:
         31:71:e2:d1:01:62:ad:92:bf:c4:bc:0d:ce:49:cb:08:36:61:
         21:06:1a:b3:4f:f1:5e:1c:ac:f6:a8:da:7f:5f:4f:bb:68:99:
         a9:42:e2:55:35:5c:e8:91:f4:40:f4:6c:fc:cf:3a:f1:1e:2a:
         9c:99:d1:7c:d5:2d:09:39:d7:3d:fb:27:00:c8:70:b2:2d:da:
         f4:d2:b3:c0:04:f1:2c:1b:5f:d1:0b:49:bd:a7:77:85:04:3c:
         03:22:e6:c3:ab:aa:b3:7d:34:df:3d:2f:c7:bb:78:5c:af:cc:
         5f:9f:85:24:34:bb:a8:70:d8:91:d6:ab:26:c2:44:d7:55:fb:
         0c:0b:99:f1:87:71:32:62:4b:fe:00:ca:24:34:42:6c:8d:c6:
         0f:59:42:de:8b:79:2b:80:62:f5:c4:00:b5:19:56:a6:82:6f:
         52:39:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:08 2026 by rpki-client