Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File:                     1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier:          9NqP0gPVKsjbT5X9+jWZqMWrHzY0889NZyN8ymaNr0g=
Subject key identifier:   6C:9E:A0:D1:8F:53:22:D8:78:35:5C:88:EA:5D:E4:D1:C8:DA:4E:DA
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer:       /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial:       019CAD5A74A1558E6E7DED751BAAFA9CBC6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number:          07DE
Signing time:             Mon 02 Mar 2026 07:01:52 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:52 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:52 +0000
Files and hashes:         1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: WXvtJtJj7C72zEN1r2sC0sa9TWopQ4w/z0oRjVk4eTE=)
                          2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
                          3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:74:a1:55:8e:6e:7d:ed:75:1b:aa:fa:9c:bc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
        Validity
            Not Before: Mar  2 07:01:52 2026 GMT
            Not After : Mar  3 07:01:52 2026 GMT
        Subject: CN=6c9ea0d18f5322d878355c88ea5de4d1c8da4eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:18:90:22:46:a2:1c:c6:7a:83:ef:57:86:
                    05:2e:81:dd:3d:9a:c4:44:f7:01:73:c5:ba:db:fa:
                    a6:ed:47:38:05:8e:32:ba:a3:7f:55:b1:1f:b7:1b:
                    1b:e9:ea:5a:e5:6c:bd:79:9e:f4:6a:11:f3:a9:32:
                    a3:f8:64:48:e0:81:56:f9:bc:07:75:af:ef:69:b2:
                    b6:93:57:ff:f9:e8:6e:d0:8e:0e:1b:4e:ef:ca:f8:
                    c3:94:6f:67:cc:88:24:2a:b3:9c:4b:ac:61:7c:66:
                    b5:a2:62:1d:2f:cf:d5:4a:7d:10:3e:dd:c1:14:87:
                    07:27:44:4e:14:f0:1f:e3:cc:17:77:4c:34:b5:39:
                    cd:72:50:f2:27:80:11:ff:c5:23:ca:10:5b:88:13:
                    7b:a6:6a:93:b5:18:87:88:87:f9:9f:36:c0:21:11:
                    81:01:09:2c:e1:55:35:1a:e6:c7:15:2e:c9:91:05:
                    50:c8:5e:c1:05:0d:5d:a1:d7:df:38:d2:6a:a3:1a:
                    c6:5d:df:f7:b4:a4:9e:32:3b:11:75:0f:eb:d5:0f:
                    04:f5:00:8d:83:f5:27:fb:45:04:a1:21:ab:77:53:
                    bd:82:c8:38:ed:eb:cb:58:a8:7c:ae:c4:ba:49:5b:
                    fc:2b:bf:f4:80:65:be:0b:3d:c7:e4:99:c2:6b:3e:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:A0:D1:8F:53:22:D8:78:35:5C:88:EA:5D:E4:D1:C8:DA:4E:DA
            X509v3 Authority Key Identifier:
                keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e4:bb:bd:13:24:fe:85:44:92:9c:98:92:94:10:c0:9f:21:
         e7:75:86:c7:a0:d2:83:49:ff:03:0f:79:7c:e8:4c:23:96:3e:
         51:56:b9:4d:49:79:91:e2:78:5e:8a:38:ed:33:9f:81:fc:0b:
         2f:62:92:a1:2e:cb:4e:e6:69:a5:89:ba:ca:67:96:92:0b:5e:
         1e:db:f9:05:f8:78:62:f3:3a:4f:8b:d8:9f:9c:51:f6:3b:07:
         58:06:97:9e:bf:69:d3:a0:67:a9:82:85:aa:8f:10:12:e7:0f:
         bb:5b:90:a7:63:d0:15:1d:8a:e5:a8:cf:f6:dd:7c:78:19:09:
         8c:c8:ef:eb:6f:dd:4c:a8:9f:00:c5:3c:77:75:a1:20:6a:d1:
         c8:4a:67:29:cf:fe:4b:1d:69:ec:e6:bb:4e:a9:6f:c6:a4:30:
         b0:e7:23:01:56:f8:2c:6b:79:87:08:f8:62:33:fa:86:f1:15:
         9b:68:d3:15:13:47:23:af:40:bb:23:c6:0d:a9:08:41:eb:f7:
         4d:ec:5f:83:95:d2:81:e5:d4:af:e6:a7:70:dc:8c:38:a6:9e:
         8f:c6:a3:f4:77:76:55:0c:2c:6d:c1:28:d5:cd:25:15:15:30:
         05:35:71:f8:72:dc:c3:c2:f5:7b:f6:ef:18:32:e8:bb:95:8f:
         d7:1b:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:26 2026 by rpki-client