Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier:          AugRACzdo+Q36KzIB/jrxJN/FuxcAicSbAfxgSizttY=
Subject key identifier:   E4:5D:A7:CF:CD:5D:D1:DB:62:82:E5:6C:FC:C7:8C:49:2F:1D:D8:E0
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer:       /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial:       019CAA21322AE616319777FFB96411F6EDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number:          0BA1
Signing time:             Sun 01 Mar 2026 16:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:28 +0000
Files and hashes:         1: Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa (hash: WNChQ5FZcNT+Uy6r/VXAfEff5h4yB9HjomF668ERFPs=)
                          2: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: EhHqfAi1upQlPZ5evjHzkCKa4DMOtZ2LCP7j84NKt3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:32:2a:e6:16:31:97:77:ff:b9:64:11:f6:ed:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Validity
            Not Before: Mar  1 16:00:28 2026 GMT
            Not After : Mar  2 16:00:28 2026 GMT
        Subject: CN=e45da7cfcd5dd1db6282e56cfcc78c492f1dd8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:fe:9e:a0:6e:a9:79:00:89:59:a3:e2:63:
                    0c:83:e9:25:96:65:d4:e6:79:14:75:b2:02:19:46:
                    c7:9e:1d:51:f7:73:05:06:e3:6f:19:7e:86:be:6b:
                    42:5b:c9:94:c5:5e:ca:e0:94:6f:52:70:07:66:ab:
                    6c:6d:12:3f:c6:7e:ee:72:24:1c:1e:6b:43:79:0e:
                    f8:63:da:1e:d0:d1:fa:a2:17:0d:1a:69:99:b8:41:
                    36:71:2c:93:98:e6:2d:eb:84:8e:02:ae:0f:74:d8:
                    23:41:5c:93:8a:37:f8:17:97:cf:b0:ea:9b:3c:6c:
                    cf:6f:ae:61:84:b0:61:7b:46:ff:8c:69:d3:d3:ce:
                    92:15:45:4e:8c:d9:a7:0e:37:bb:57:c9:85:e8:30:
                    96:ef:d7:26:ec:c7:21:e0:3d:0b:7f:ae:44:b9:33:
                    f0:04:73:f5:68:00:31:d6:6e:30:88:66:76:0d:95:
                    df:e8:a9:f4:f5:96:ce:fa:fb:2b:ee:96:1a:31:7c:
                    08:9c:32:91:e2:29:51:7f:75:f8:94:e4:06:5f:0a:
                    8b:7b:b9:32:15:10:78:25:f9:af:59:6a:0a:3a:8c:
                    90:19:ea:3a:1e:43:45:15:83:d9:7d:55:e1:b3:7a:
                    00:d9:a8:5a:45:47:aa:45:42:df:e1:7f:8a:8d:14:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:A7:CF:CD:5D:D1:DB:62:82:E5:6C:FC:C7:8C:49:2F:1D:D8:E0
            X509v3 Authority Key Identifier:
                keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:81:a2:85:cc:ae:0e:c7:68:84:88:fc:4a:55:52:95:55:0f:
         85:b1:d3:ec:61:b1:d6:dc:47:92:92:a3:3b:ce:41:07:f1:7c:
         81:ea:46:70:78:5f:41:a3:34:9c:30:22:3c:1c:9c:5a:42:48:
         de:c6:56:26:5e:fd:53:41:d9:0a:ea:02:2c:63:02:8c:24:e1:
         38:10:e1:3e:f6:ba:1e:86:53:56:ca:23:fc:a9:06:81:7f:53:
         6c:10:49:db:7e:7a:17:92:5f:43:d4:5d:79:49:bd:82:76:a7:
         70:16:ce:db:a1:7f:81:1e:aa:02:34:72:67:71:5f:c9:44:cd:
         2d:b1:fe:f9:31:79:f6:e7:4e:70:1e:99:be:e0:49:cc:8a:52:
         d8:2b:ed:ad:0d:0a:66:e3:1a:52:52:a7:f0:1e:96:2b:77:c3:
         8a:0d:91:38:2b:1b:62:1d:79:c3:5a:d6:1c:3e:fb:99:9e:f5:
         96:61:0d:e9:e8:54:dd:5e:e8:e0:e0:38:84:22:05:e5:23:7a:
         93:b9:26:8f:69:f3:d2:b4:b5:81:e2:07:4e:af:e2:fb:97:34:
         f7:4c:96:1c:6b:e5:9f:14:bd:34:aa:e2:4d:ef:28:f2:bd:09:
         3f:84:cf:05:4b:aa:c5:e0:72:ea:da:73:1b:d5:05:a6:34:af:
         bc:c8:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:56 2026 by rpki-client