Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft
File:                     p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft (raw, json)
Hash identifier:          /uyqRRO18w5eRN6n2UOx9xIpBqnTuAMMGX1kMRvraN8=
Subject key identifier:   59:4D:64:F1:04:3E:CD:98:42:4D:C4:44:3A:00:33:8B:65:83:B2:40
Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4
Certificate issuer:       /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4
Certificate serial:       019CAFB61FF17EA4AC96952E3B97694572A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft
Manifest number:          CB
Signing time:             Mon 02 Mar 2026 18:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 18:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 18:01:14 +0000
Files and hashes:         1: CrOqxRcW75o4aRdWm0p9XWdbx98.roa (hash: IrzNxLHpjCPUfunvuk128Mos98JNYP40+XMrBYBSSM4=)
                          2: Fb3olNFabx3E1XAvVtesXUZBCV4.roa (hash: ezk1XNuD5gDuGAhkZULFvXspa5WbFw4VI1h7QP1S62k=)
                          3: SiFSfPzw5ybCSlARqgm1OIsBFRg.roa (hash: GsDEUKb/AwB9xCnavcaQiiPNHkkXEoojiw+fKuWtDoM=)
                          4: p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl (hash: BbG8TUibivWy9xg0ovBCrR6cQRI0dNXWcOFhqlWVADk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b6:1f:f1:7e:a4:ac:96:95:2e:3b:97:69:45:72:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4
        Validity
            Not Before: Mar  2 18:01:14 2026 GMT
            Not After : Mar  3 18:01:14 2026 GMT
        Subject: CN=594d64f1043ecd98424dc4443a00338b6583b240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:39:69:8a:2a:38:0c:7d:57:ed:a6:1d:2f:
                    74:d6:b5:30:b9:c6:49:f7:85:77:19:bc:25:2f:0b:
                    16:e0:e8:2a:6b:c1:b0:82:07:29:76:1c:51:22:ed:
                    05:df:82:03:7b:12:86:3b:0f:a2:2b:1d:71:a1:3f:
                    09:88:5b:cf:11:c9:c3:79:06:c9:3d:a9:72:55:62:
                    fc:1c:7c:0e:e6:5a:4b:3d:0c:51:07:7e:06:7f:5c:
                    f9:b2:61:73:af:9d:ba:d7:1b:42:94:ce:47:5e:4d:
                    78:7f:af:2b:c1:a7:dd:48:82:ef:85:da:71:fa:98:
                    2e:77:0c:f6:7f:b2:d9:d2:f1:cb:24:0d:9d:0b:9e:
                    7e:df:fa:69:74:d9:bc:7f:a1:be:6a:31:c2:3d:f5:
                    b1:d0:a7:88:f4:25:0d:9e:7f:9e:ef:1e:be:83:a2:
                    7d:57:1e:b6:c5:b9:57:0f:80:b9:ef:6c:2a:16:78:
                    71:ad:35:09:38:a7:b9:f4:ab:44:e5:1c:82:c1:fc:
                    b2:c1:9d:63:a1:e5:e0:5a:4a:ae:39:c7:9c:80:7f:
                    8d:89:d2:80:da:98:6c:a5:49:08:d2:3e:41:a7:1f:
                    e7:2d:82:bd:05:e8:a5:0e:8f:81:b2:65:cc:e8:db:
                    2e:c3:12:df:5b:91:98:4c:bc:9e:07:9a:1f:12:ba:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:64:F1:04:3E:CD:98:42:4D:C4:44:3A:00:33:8B:65:83:B2:40
            X509v3 Authority Key Identifier:
                keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:a6:25:e6:a1:d4:c1:cb:dc:fe:fa:47:b4:7e:0c:98:e9:
         08:80:24:0f:4b:24:f3:64:29:24:7b:3f:66:34:25:3a:62:e1:
         a5:b4:da:b3:aa:e6:cd:81:e2:a4:6a:09:cd:2f:98:ec:d1:38:
         86:14:d2:92:09:de:7a:2c:6c:5c:a0:d9:0c:7e:f7:73:06:59:
         93:27:1b:af:7a:50:63:82:5f:04:51:3f:18:63:fe:bf:e6:81:
         70:2f:29:b4:4c:9d:c3:5b:3a:e2:d1:29:d0:11:4e:47:95:6a:
         81:3a:a3:dc:8f:eb:d8:4a:bf:7b:9d:dc:27:10:76:73:94:e1:
         dc:ea:8e:2c:eb:3d:29:7b:ce:60:77:5e:57:4c:56:3a:ee:ba:
         81:22:3d:0b:34:60:fb:48:5b:3c:d3:e3:1a:c4:2e:29:d9:df:
         bc:bd:07:4f:4f:10:3e:0f:6a:78:2d:a1:37:e6:29:5c:13:e6:
         71:cc:a3:f9:93:44:68:b8:63:49:04:f7:e1:fb:56:ca:d4:01:
         05:0b:e8:84:7e:4b:9d:54:0c:92:6c:4a:8e:fd:33:22:21:d4:
         17:a1:be:21:84:69:d8:1a:67:6f:4a:b6:4a:34:5d:44:3d:4a:
         6c:48:ac:db:d3:5e:7a:02:a1:09:6a:e1:ba:7f:0f:75:ad:ab:
         5a:2a:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:49 2026 by rpki-client