Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File:                     xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier:          ciP8tE3cXcHazg4c5y4Rp7+dQzYzpvSocV88YlR/66U=
Subject key identifier:   88:54:A7:99:24:07:24:86:18:F7:35:B8:00:C0:26:DA:41:FA:5C:44
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer:       /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial:       019CACB4E57188312215CD6A2799E64A6FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number:          0770
Signing time:             Mon 02 Mar 2026 04:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:02 +0000
Files and hashes:         1: Q9ZgPk35Ok6M8we5yqQ4KCOhaNk.roa (hash: JPO6gHRzSYDvTmPZqjhIeasbbYanMzcflBe8oC0yynQ=)
                          2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: /KRItqDp0Gk7N37kLQU3M3isIv47upEEYeo2f/dwhjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:e5:71:88:31:22:15:cd:6a:27:99:e6:4a:6f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
        Validity
            Not Before: Mar  2 04:01:02 2026 GMT
            Not After : Mar  3 04:01:02 2026 GMT
        Subject: CN=8854a7992407248618f735b800c026da41fa5c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:03:1c:08:c6:0a:f0:a2:5a:11:f1:5f:05:
                    ee:c3:1f:36:22:d3:a4:84:81:af:d0:cd:51:e5:33:
                    d3:c8:09:fe:42:51:b8:4e:fa:7e:63:20:6c:04:59:
                    6e:dc:87:d3:66:d3:8c:8e:6f:f2:dc:77:28:2d:cc:
                    1d:fc:a1:7a:9c:70:fc:2b:73:72:bd:55:c3:16:c3:
                    e1:05:69:56:d2:cd:9e:9b:6e:20:e5:cf:ba:73:74:
                    7a:c8:f8:ae:42:22:a5:f3:c6:02:45:83:cb:50:91:
                    78:f0:d8:e8:85:ff:19:38:6f:0c:75:91:09:5e:19:
                    46:13:9b:31:b9:7f:13:67:7e:6d:6a:71:f2:14:bd:
                    53:4d:6f:52:a9:09:a7:c4:4a:ce:d9:24:8a:7c:a8:
                    14:40:c9:b1:e9:01:c4:37:49:82:c8:5f:7d:cf:1f:
                    7f:10:14:cf:47:c9:d8:6b:e6:c5:cb:70:29:64:87:
                    1c:46:a9:0a:bd:c3:05:04:d5:ae:39:b9:26:d9:fe:
                    c4:60:dd:c7:5d:f1:d8:29:1e:47:b0:59:72:6e:00:
                    28:c6:13:07:4c:94:ef:18:19:3a:de:3e:33:d4:93:
                    89:ea:03:46:fa:2b:9a:0e:31:2a:22:88:35:7b:36:
                    e1:4b:05:eb:76:72:1b:ee:2a:e2:fe:02:38:40:cc:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:A7:99:24:07:24:86:18:F7:35:B8:00:C0:26:DA:41:FA:5C:44
            X509v3 Authority Key Identifier:
                keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:35:c7:5a:77:9e:a7:6f:ce:a2:93:64:3d:42:73:39:b3:7e:
         b9:6d:a6:97:06:87:2b:bb:d6:99:23:38:2e:64:83:cc:cb:a1:
         5b:69:87:04:9c:ea:77:4e:78:3b:13:00:d2:ea:2e:88:9e:df:
         29:46:21:2b:d2:f8:5a:39:50:5c:bb:b8:8e:1a:c4:c6:3f:d9:
         c9:1e:ac:fa:f6:30:41:91:4d:05:7e:10:8c:c0:33:5a:9c:1c:
         62:9e:b8:b9:24:fb:6f:e5:09:87:09:ea:56:c1:a9:61:75:a6:
         64:bb:1a:49:ba:5a:7d:ee:69:80:6f:da:0a:a2:83:38:50:43:
         77:f9:18:46:07:0a:f0:8b:58:05:0c:9f:dc:b3:84:d4:db:fe:
         19:99:77:22:64:20:2b:5d:1e:9e:46:9f:eb:f0:6e:0c:68:8a:
         4a:3a:33:8c:23:1c:33:a0:19:87:12:51:c8:7b:d2:6f:21:62:
         43:fb:9f:9d:d7:82:12:02:ca:f7:49:82:c1:82:28:99:96:07:
         a6:26:ed:27:a1:0b:2f:ec:5d:97:fc:97:79:a5:4f:04:37:f4:
         16:c7:d5:bb:06:64:b5:f0:e0:d0:d4:34:ed:f3:39:0a:3a:14:
         16:c0:c8:14:d9:a5:fc:db:b8:a1:5b:fb:3f:06:c3:97:81:25:
         10:f5:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:08 2026 by rpki-client