Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File:                     9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier:          lFrPF+tZJ0dLCO4VoLbEYpbi6tJJgaaXuprIU+lXx5k=
Subject key identifier:   EF:A2:31:BC:7E:C1:5A:29:F3:44:9D:71:D5:E0:E2:E6:58:8A:EF:48
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer:       /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial:       019CAD59560D0BE72082293F750C873FF22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number:          06B4
Signing time:             Mon 02 Mar 2026 07:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:38 +0000
Files and hashes:         1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: bMGvYRj3MmVViCnI+F0A8Il0O9RPBtgdYEDCNfZWwe8=)
                          2: b1tEVuM57ah52OvUq3Fvdd-4XkA.roa (hash: Odyf//1QBuLxW+qHnAmLWghjISD9y11hRldd+HjGtOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:56:0d:0b:e7:20:82:29:3f:75:0c:87:3f:f2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
        Validity
            Not Before: Mar  2 07:00:38 2026 GMT
            Not After : Mar  3 07:00:38 2026 GMT
        Subject: CN=efa231bc7ec15a29f3449d71d5e0e2e6588aef48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:bd:6f:32:bd:d3:3d:b9:73:22:3f:6d:8d:
                    88:ef:56:1c:8d:39:39:9c:b7:90:f7:aa:71:82:6c:
                    40:5c:58:a9:11:22:88:a3:d6:50:61:2b:77:96:6d:
                    2f:52:92:d6:83:cd:58:df:37:dd:20:fb:04:76:0b:
                    0d:47:f4:3a:53:8f:41:6a:60:59:62:40:51:26:46:
                    ec:8e:4f:4a:91:54:17:11:41:8e:f3:f2:c9:2f:c3:
                    35:50:16:24:ee:f7:0d:b9:85:0e:4e:f7:a2:b2:ab:
                    31:dd:0c:6a:8d:cb:d0:22:2a:f0:ac:c1:90:e5:d2:
                    99:58:da:11:dd:04:85:f3:6e:c6:96:31:3e:90:2d:
                    5f:70:ae:d5:2c:6a:6b:25:4c:62:12:83:34:f8:b4:
                    b8:ee:49:60:28:e5:77:17:8f:4f:9b:ff:3b:6e:db:
                    91:37:6f:19:e4:19:7d:02:77:7c:d6:51:38:77:40:
                    75:d0:e9:3f:d4:c8:5b:e8:b3:45:17:26:a3:39:63:
                    9f:a9:5e:da:50:98:60:b6:75:9b:11:1f:ad:50:9a:
                    57:b7:76:0a:e7:d7:3a:82:95:b9:b9:d0:09:2a:95:
                    99:43:69:2d:50:c3:38:bd:f6:3c:4b:ca:17:0f:01:
                    65:dc:50:0e:4c:b6:80:3c:bc:ee:cc:7f:1c:3f:2f:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:31:BC:7E:C1:5A:29:F3:44:9D:71:D5:E0:E2:E6:58:8A:EF:48
            X509v3 Authority Key Identifier:
                keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c9:79:88:2f:92:ca:42:65:77:8e:18:e5:f1:98:5c:c7:49:
         ff:89:bf:cc:15:99:df:c9:96:a6:d4:da:ea:82:6f:d9:45:62:
         9a:83:91:f6:1b:d1:9b:e2:4e:56:c0:da:a7:f3:2d:9d:4c:74:
         34:83:ff:9a:71:97:33:c0:f1:56:53:4c:c6:d1:bd:b2:4c:7e:
         44:59:88:55:e2:67:23:56:37:d5:0d:5c:33:91:28:c7:be:fb:
         2f:1f:22:ff:72:55:54:75:8a:63:49:8b:0a:14:b0:91:e2:31:
         ad:07:7e:66:e0:fc:10:d1:cd:53:51:cc:5d:49:6c:b0:c0:eb:
         7c:29:8a:f5:ce:e9:b9:f0:2b:36:d0:c3:a5:c1:0a:93:99:ab:
         57:ad:2c:d1:c4:6a:39:a9:1d:b2:41:e4:b9:f2:76:61:86:9d:
         ec:cf:9c:b3:d0:32:e9:ba:c9:ff:1d:73:5b:dc:7e:a2:f9:00:
         7a:7d:9e:34:88:d4:75:9b:e4:e3:4d:3e:3c:f8:ef:37:09:4d:
         44:87:c9:24:68:47:30:aa:25:b7:c6:d2:c7:f3:8a:27:b1:dd:
         0e:88:6d:c2:85:e7:2f:17:32:06:e2:9c:83:22:0d:28:4a:f8:
         a0:b1:64:d4:61:8d:dc:b2:02:c5:c5:74:f9:af:1b:cd:8f:2a:
         f9:a4:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:48 2026 by rpki-client