Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          uCO6RJf/gov2nofDRg09L91sFzoLb1lxHXjS4JiKHZo=
Subject key identifier:   E9:EF:D0:E2:D0:A6:FA:DB:A1:22:C3:0B:8B:EF:7A:9B:00:49:25:78
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       019CAC4773A15D4D9F0929F2ED85569D93DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          124A
Signing time:             Mon 02 Mar 2026 02:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:29 +0000
Files and hashes:         1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
                          2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
                          3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: U4CXjm7fi4LcUkB1NbGrMz9vfx6xCDiw+/I7U8LUS24=)
                          4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
                          5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:73:a1:5d:4d:9f:09:29:f2:ed:85:56:9d:93:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Mar  2 02:01:29 2026 GMT
            Not After : Mar  3 02:01:29 2026 GMT
        Subject: CN=e9efd0e2d0a6fadba122c30b8bef7a9b00492578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:68:c1:22:17:7a:f5:56:6b:10:3d:85:ab:
                    ea:ec:83:4c:42:28:f4:e2:70:f4:b5:de:a8:7b:3a:
                    60:a5:c5:be:29:e7:af:7d:0d:fc:ee:9a:9d:df:bc:
                    11:2b:7a:06:55:17:d1:23:24:15:2a:fc:9f:ab:27:
                    87:1e:62:5c:31:c9:b2:c3:cb:0d:40:a8:dd:8a:4a:
                    b1:10:07:cf:63:a8:00:a0:4f:5f:13:f5:3e:42:96:
                    e3:22:62:93:7f:a2:da:27:ec:29:3f:af:99:7d:de:
                    f8:cf:b6:b0:c4:ee:b4:db:0b:0b:b8:b0:37:78:4d:
                    15:48:11:c2:f3:8f:aa:b4:b0:67:86:bd:cc:c6:7d:
                    ed:9f:22:11:13:9c:99:1a:b7:14:2c:ea:d9:63:78:
                    1f:61:2e:a2:76:e4:1f:93:41:02:0a:14:ea:8e:77:
                    69:51:a9:77:7b:e4:fe:61:de:1d:c9:f6:e0:07:b0:
                    14:19:3c:ad:6b:b8:a2:59:79:dd:6b:01:ee:2c:10:
                    2b:4a:70:3b:7f:d3:8f:ea:76:18:0a:f0:dc:39:dd:
                    82:99:e6:3d:24:b5:19:64:fc:40:5d:b9:14:b2:13:
                    30:37:d3:cb:d5:b6:09:5a:fa:c8:1a:7b:b7:5f:2f:
                    1f:31:1d:1f:d1:86:7a:da:54:47:3e:40:00:3f:4d:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:D0:E2:D0:A6:FA:DB:A1:22:C3:0B:8B:EF:7A:9B:00:49:25:78
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:69:c3:12:5f:84:82:e3:78:a4:62:cc:36:ba:c3:5e:26:80:
         60:27:e8:52:be:0e:1d:d8:6d:95:16:b5:aa:06:fa:b3:d1:33:
         51:c9:a8:cb:4e:7b:b4:c3:16:77:5f:d6:81:03:93:e7:d2:9b:
         c6:ad:3d:ea:17:9e:fe:9b:dc:7c:76:9b:11:54:df:6c:c6:7c:
         c0:08:ca:35:0e:28:3d:19:0e:48:8d:8b:ef:03:96:13:ba:b9:
         54:54:38:2c:b8:46:9c:52:cd:c5:ff:63:01:5c:6f:3a:e1:f7:
         fa:62:b9:66:f5:ab:be:69:83:33:ba:e4:70:ca:19:27:2b:ad:
         51:d6:88:11:3d:41:8f:39:dc:78:6b:b5:c7:72:82:46:f9:6c:
         ff:c1:a8:52:83:43:64:ef:1d:38:c7:8d:44:60:a8:77:25:bf:
         a8:44:3e:8e:07:6b:e7:18:89:04:5a:d8:a7:61:e2:e3:9a:47:
         77:6a:d1:ef:9e:bb:e5:21:f3:7c:e2:97:0a:1b:ec:7e:65:e4:
         62:12:39:29:5a:26:43:72:aa:cd:95:4b:81:f9:06:bd:9f:7c:
         99:b3:d4:6c:73:82:27:24:07:a4:f4:b2:2e:64:91:32:e1:eb:
         b5:ed:a8:24:61:51:bc:da:94:8f:c9:9f:dd:c4:fb:1d:aa:bf:
         ca:db:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:05 2026 by rpki-client