Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File:                     F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier:          j9qN8SGuDRU7+JS+XufVuFFNgTQQP/W3vsPRoZKI0HY=
Subject key identifier:   AC:DD:21:9B:61:12:6D:63:7A:31:B1:0A:BA:8A:06:F8:68:99:F6:6C
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer:       /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial:       019CAB347123D6AF999C02955D727877248E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number:          0B01
Signing time:             Sun 01 Mar 2026 21:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:06 +0000
Files and hashes:         1: Ec-2-sBBaXW1azB4lY6gRGycP60.roa (hash: 3Nh1xOi9IYnh19IBIvJ/NsERowhJFiSYsZXvECqtcPc=)
                          2: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: iw1wvgJyxgZkxCcFQpfewhzeXXrfjcWPAd6Ad/tN6Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:71:23:d6:af:99:9c:02:95:5d:72:78:77:24:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
        Validity
            Not Before: Mar  1 21:01:06 2026 GMT
            Not After : Mar  2 21:01:06 2026 GMT
        Subject: CN=acdd219b61126d637a31b10aba8a06f86899f66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:cd:f0:fd:24:e8:de:77:fc:1d:06:d4:bc:
                    10:8f:58:70:da:09:99:01:63:af:67:7f:1f:70:5f:
                    20:da:80:4c:08:fc:c7:53:c3:08:78:b4:92:d9:1f:
                    93:e3:f9:fd:62:f1:0d:0f:62:51:d1:bb:46:a3:29:
                    a6:59:e1:f2:1c:9a:44:c7:6d:4d:00:69:e3:e1:e9:
                    d6:e4:3d:63:91:98:8f:c1:79:81:2e:4d:1d:2e:1b:
                    10:ec:c9:e5:cd:ce:08:5f:94:50:3e:3a:77:2a:cf:
                    2a:bf:80:5d:49:89:ef:b7:6f:b7:8d:a5:17:31:b2:
                    87:03:e3:80:c0:19:b9:01:0a:80:3f:97:0c:fb:7e:
                    f6:7d:4d:84:04:ca:02:70:9a:14:12:4e:6f:71:4c:
                    9e:09:fb:6e:2c:40:03:24:78:51:b3:dd:b6:4d:7a:
                    28:cd:a7:d2:fb:a8:1b:77:0c:d5:a5:86:5e:00:88:
                    4e:b0:76:39:8c:2c:81:2d:c0:ac:f2:83:48:25:e3:
                    c4:da:be:c0:5f:dc:d7:53:fd:cf:b4:85:c5:02:f5:
                    14:47:69:f6:68:a4:73:c5:0b:42:1b:13:45:12:b5:
                    04:4e:6e:1c:96:08:31:2e:d7:e9:e6:f7:06:23:54:
                    a2:9d:da:17:1c:8e:14:82:48:85:32:62:90:b9:c6:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DD:21:9B:61:12:6D:63:7A:31:B1:0A:BA:8A:06:F8:68:99:F6:6C
            X509v3 Authority Key Identifier:
                keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:33:15:bf:e7:41:54:d5:8b:5f:82:76:1b:b3:49:61:10:
         8c:d8:5a:58:f7:75:0f:3d:d7:71:22:92:0a:27:7b:cd:36:89:
         80:a6:32:77:af:07:78:d8:08:b5:1a:64:e0:5c:24:8a:ef:04:
         09:54:17:40:7d:96:c0:bf:d9:8a:ed:2f:06:6e:a1:a9:6e:0a:
         5b:cc:4b:b3:45:df:4c:1b:66:a9:f2:b2:57:04:a9:f8:c6:65:
         40:c3:7b:0c:0c:39:1f:0c:cd:26:73:8f:aa:d6:15:bb:95:d6:
         22:71:ce:0c:a1:47:e8:d8:47:3d:68:ec:8e:31:7c:bd:78:bb:
         24:d9:d7:3b:2d:ca:1e:b1:34:8e:07:d5:11:13:fc:12:4c:ec:
         b4:a9:ea:93:30:22:5c:fd:b8:a4:a7:7f:52:a7:72:d5:9c:9d:
         ce:77:54:6f:9b:ad:fb:94:cb:d3:71:f9:42:ca:6e:d0:df:1a:
         b6:d3:65:22:53:8c:49:39:00:24:75:f4:b8:2d:2c:12:23:bd:
         09:8b:7a:cd:ca:87:5f:9b:62:e0:c4:97:f8:b9:a6:c9:a3:18:
         60:34:a4:be:dd:06:f8:3e:d2:3f:e7:f7:f8:a3:e8:65:69:1a:
         90:4b:59:94:9a:fc:35:b6:e5:14:38:e3:24:ca:fb:51:6e:9c:
         bb:46:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:45 2026 by rpki-client