Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          AP3GciCzSaGWCbiqCMHc5G9aXC3ks9jjpQ2NBJ1Vq8g=
Subject key identifier:   98:23:A5:2F:F0:A2:52:C2:05:2F:F6:41:50:14:23:35:D1:BB:43:85
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       019CABA1CE7E38771B5817DFA0BFF32C6C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          08E6
Signing time:             Sun 01 Mar 2026 23:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:33 +0000
Files and hashes:         1: KGtAb2AW0M0YASRqB3QhsbsdLzI.roa (hash: qiwS5fFaCXqMzeOtWduxw1//aM7SqgaRPEME58iPEIM=)
                          2: ZsX0X8j83nFRfqZL9IrfnwTMxLg.roa (hash: X4nHEceCDxp75N1VWD8XfrlsC2PNim++24YcWl4Dids=)
                          3: fkMt2FqBmJx4v3Ia68drKWkga1Y.roa (hash: 4MPeCUziUrABTZ/KQpwL+y+89ApyFfPPbC0hzzwsCc4=)
                          4: kvIzttk50ypIvqgfMfZSFIXct9U.roa (hash: CPJdiTd4yiPmDnbfp5PHDpiZmVQZeyBl1ypSYm3eBYc=)
                          5: mdkFOAwMWkblGp-2mwbEq419z_I.roa (hash: CE2MgK18UC9X5aZF3fSj7NZCbOTDD1izqKPMKawtpc4=)
                          6: oBn8NIdRfMZZpm_iynqTQu6nc38.roa (hash: D3Bz4QySZ6wj7xhT4hW/fF4crmIqCiPNU7hJ9/zZtR4=)
                          7: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: UPauPZr3tJJ1X0XSJujowGO4p8CDPwYZBhS05hJJMHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:ce:7e:38:77:1b:58:17:df:a0:bf:f3:2c:6c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: Mar  1 23:00:33 2026 GMT
            Not After : Mar  2 23:00:33 2026 GMT
        Subject: CN=9823a52ff0a252c2052ff64150142335d1bb4385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:87:ef:ae:b1:aa:e6:00:05:c3:4d:0f:ef:
                    07:b5:bb:f3:8d:a4:e8:d4:a1:65:f7:91:b8:49:98:
                    f8:cb:f3:37:d0:53:c4:1e:4b:cb:c8:b9:8d:61:51:
                    6a:47:be:bc:c0:e8:d7:52:62:cc:31:85:59:c3:07:
                    53:19:1d:ac:85:02:bc:df:ac:f4:d7:6d:33:f1:67:
                    86:77:e8:18:ea:73:06:b6:c2:db:91:fa:8d:f9:56:
                    cc:87:5d:26:7a:f2:09:7e:be:d0:d4:b8:63:c4:8d:
                    f2:d3:1b:3b:06:1f:e4:3d:ae:ba:ce:d2:72:f8:8f:
                    df:b0:cb:b1:1f:e1:dd:ea:f3:a2:d4:f0:57:c2:70:
                    54:d3:77:d9:fe:e2:12:4d:02:71:b0:52:1f:c0:45:
                    35:e9:01:10:d7:27:7d:ce:6d:de:0f:14:9e:cb:5a:
                    eb:61:34:d3:13:81:20:b6:96:b1:14:ba:67:d2:ae:
                    9e:0f:f2:77:6d:7d:cf:23:de:53:e4:d9:8c:a1:49:
                    c0:05:81:88:58:62:32:b6:be:3c:dc:64:2a:ec:15:
                    2e:e7:9c:b0:37:48:34:4f:a7:3a:5c:27:f8:7b:39:
                    cb:c2:4f:0d:d4:77:f8:71:71:76:c3:8f:6e:0e:2a:
                    2a:85:05:0f:d9:a1:84:1e:45:7e:49:d3:5c:ab:85:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:A5:2F:F0:A2:52:C2:05:2F:F6:41:50:14:23:35:D1:BB:43:85
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:4c:51:9a:a2:82:37:89:9b:35:da:c3:d1:a8:c4:60:5b:
         49:5b:c1:9c:73:e3:df:f0:d7:fa:65:dd:0c:06:9d:b8:ed:78:
         20:93:c4:8b:41:84:d0:2a:c8:b1:94:e4:0d:31:66:b4:7b:c0:
         c2:70:1b:3e:c2:1a:d6:55:9f:7d:46:ce:c1:be:25:a5:9d:55:
         e6:87:9d:68:dd:df:81:ad:6a:5d:63:77:bc:a6:ad:98:60:1c:
         0b:bc:3b:cf:36:b6:63:58:b9:eb:e3:ac:97:52:f3:fc:80:47:
         da:96:c3:9d:7b:b9:27:2a:8f:05:cc:cf:13:64:ae:fe:ad:4d:
         4c:53:6f:e7:91:af:8f:3a:29:a7:7c:34:13:52:88:86:94:76:
         13:20:0d:3a:08:64:d6:2e:5c:b0:2a:97:93:9d:fc:68:7c:a8:
         1d:5f:3a:c7:f4:dd:4e:61:d8:70:2c:06:c8:56:94:c0:75:1d:
         be:67:8c:7d:2d:38:83:dd:ca:7c:72:6b:8e:2b:40:67:85:7f:
         ab:8c:43:a4:15:24:b0:42:99:fd:c5:2f:c1:58:78:42:f6:0a:
         b3:46:2f:73:28:62:67:78:b3:db:5f:87:7b:3a:92:14:a1:79:
         9a:ed:24:56:cc:4b:86:a3:5b:fe:88:44:75:0d:3f:c4:a3:82:
         2c:df:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:11 2026 by rpki-client