Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File:                     39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier:          xLJ1o7e6oocbwG/CbQZp3cZyD/vba1CdIMwDloIJTHE=
Subject key identifier:   79:94:60:04:24:F2:98:4D:D8:F7:82:3B:AE:B6:E6:CD:98:4C:43:5C
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer:       /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial:       019CA9459FCEC19A61311C2448E228C4AD54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number:          0726
Signing time:             Sun 01 Mar 2026 12:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:38 +0000
Files and hashes:         1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: +5YWbO/Ijy1WfKs1PlBwTVFDvnA0VgArnDEuzoFB+bc=)
                          2: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
                          3: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
                          4: lfS13A6k6VYq7zeIKzwEMd7njAc.asa (hash: BGDDbE1ld8YdY02e6hNHewNcs0w8Y3X5REVJDiKPd4Y=)
                          5: sbN8EnhWE2l__QvXJmkc9vK_YUw.roa (hash: Uceuxsw6EIStQVLEZXyq2I0QPItxAW4XKZWxVvN6eTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:9f:ce:c1:9a:61:31:1c:24:48:e2:28:c4:ad:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
        Validity
            Not Before: Mar  1 12:00:38 2026 GMT
            Not After : Mar  2 12:00:38 2026 GMT
        Subject: CN=7994600424f2984dd8f7823baeb6e6cd984c435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:55:e2:92:5e:e1:56:6b:7a:8f:68:3f:a9:
                    19:2b:3c:7e:00:ab:9b:1c:cd:d5:d7:8d:08:e9:54:
                    62:2b:ae:e9:42:63:ff:89:30:bb:22:b1:ff:1f:ab:
                    de:75:b8:bc:46:7d:71:58:8b:57:72:ee:aa:2a:29:
                    df:08:c0:c2:ca:aa:84:05:f0:7f:cc:26:07:17:d7:
                    b7:cc:eb:85:a3:ad:2e:39:21:02:6b:d4:2c:ab:1d:
                    89:0d:85:49:fb:b3:89:f5:3d:e3:80:07:eb:97:77:
                    69:67:17:49:c1:7f:73:38:3f:82:88:3c:7e:52:c8:
                    7d:3f:3a:49:ab:49:ba:4d:a1:b4:0b:20:ec:7b:32:
                    ad:13:b5:92:9b:ae:7d:47:c2:30:87:77:e7:f9:8c:
                    59:70:50:6b:e5:45:75:7c:91:a4:55:f1:d9:79:9d:
                    c3:a5:a1:fa:8d:ef:62:bc:fa:b0:85:bd:0c:85:f4:
                    72:8b:e6:01:64:79:70:64:2c:61:71:e5:76:98:bd:
                    02:fd:34:d6:be:e1:b8:45:7b:a4:2d:1e:ab:a1:d2:
                    0b:31:bf:d3:c2:98:81:58:96:0e:99:ff:d5:2e:b7:
                    c5:40:7a:d4:83:3b:e9:1d:be:5a:59:9b:e9:42:51:
                    5f:8f:d7:34:8c:0a:dd:f4:8c:f7:68:7b:4f:90:a6:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:60:04:24:F2:98:4D:D8:F7:82:3B:AE:B6:E6:CD:98:4C:43:5C
            X509v3 Authority Key Identifier:
                keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:68:f8:43:a7:d4:1e:66:9b:4e:73:5d:37:1c:de:cd:d8:a7:
         38:45:17:31:33:51:34:6c:c3:f4:c0:f5:b8:83:a6:81:19:b2:
         32:f2:cd:06:de:5b:de:22:c1:66:b7:5d:bf:1c:7f:ea:68:c0:
         57:6b:1a:f6:d4:b9:7a:a8:eb:91:cd:33:8e:ad:c3:d3:3e:09:
         b8:07:14:09:c7:d3:4f:cc:c4:3c:ea:e5:53:ef:39:c3:2e:cc:
         59:9f:08:a9:46:66:a9:0f:55:93:11:0f:85:6d:b7:86:a6:08:
         f0:3e:bd:2f:8c:74:15:6f:02:2a:40:be:0b:9f:76:68:27:22:
         e1:90:36:2e:32:bc:40:09:ca:bf:f2:25:92:62:41:2d:ed:0c:
         bd:ac:6f:1c:27:fc:e4:6a:b1:b1:e3:ce:df:fd:6f:09:42:3d:
         d6:69:fb:ea:87:34:6d:0c:ae:4e:c9:45:5b:04:16:ab:25:bf:
         76:14:85:8c:3e:db:b9:29:d8:2d:75:d6:e7:15:ee:a9:ad:ab:
         1d:d4:50:22:b2:46:e6:1d:c0:81:a2:6a:87:e8:62:29:83:0d:
         44:67:03:86:e2:88:f3:ee:da:26:6e:8f:d8:56:57:b2:3d:e9:
         81:ae:15:89:5e:ef:29:e3:3c:77:81:5b:27:ac:f3:60:ac:ec:
         cd:9b:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:29 2026 by rpki-client