Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          HPSQKY1zViyy1hH37yoFTrYHN8nllMZKn3yDfyHaNAE=
Subject key identifier:   66:28:C9:54:99:F5:E4:14:1A:5A:C7:F2:87:6A:B0:A4:A6:29:DA:5D
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       019CAAFD6E967DA5E351289762D2C33848DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          04AD
Signing time:             Sun 01 Mar 2026 20:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:01 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: dJ31umyNk52RqoWVlZcBW0V9xiCzS1FHmwQwl6wUSXg=)
                          2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:6e:96:7d:a5:e3:51:28:97:62:d2:c3:38:48:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Mar  1 20:01:01 2026 GMT
            Not After : Mar  2 20:01:01 2026 GMT
        Subject: CN=6628c95499f5e4141a5ac7f2876ab0a4a629da5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ed:a8:c2:ec:f8:f9:c1:f4:9a:96:12:84:28:
                    cb:e7:0b:db:0b:e6:bd:4c:f7:b5:a1:2e:b9:28:ed:
                    ac:64:45:b7:1d:b5:c6:19:6c:32:27:97:a2:7a:18:
                    99:f0:48:2f:56:f3:df:08:06:bd:22:36:d5:d3:53:
                    5a:4c:72:0b:9f:39:1d:ae:0c:fc:62:bd:21:82:d8:
                    fe:40:89:16:35:ed:75:48:68:8e:f7:39:cd:31:5d:
                    10:48:13:e5:f0:d2:ce:46:1e:a5:7e:ed:6b:52:fe:
                    ff:24:f8:45:94:b9:36:6e:14:39:e8:8c:68:14:96:
                    58:a9:17:9b:38:74:78:ec:e2:bb:63:05:ea:5f:e0:
                    73:28:2a:97:1d:4c:cf:0f:e0:1d:f1:84:bc:65:e6:
                    3e:7d:77:cf:b6:53:95:b7:c3:45:39:74:8a:fa:71:
                    51:18:18:d6:2f:ea:32:84:4e:ba:02:df:98:05:10:
                    69:35:b3:6e:5a:dc:00:0b:6a:8e:cd:14:d6:2b:49:
                    89:e8:a2:aa:8a:14:43:e2:a5:6d:2e:90:69:7a:4e:
                    9e:c4:91:e3:e1:eb:eb:0d:e7:4d:80:b9:da:25:02:
                    97:71:b2:9f:d8:13:02:46:fa:8b:6c:7b:a3:5c:b9:
                    d2:5d:91:eb:13:9b:08:eb:63:ab:49:c7:52:89:58:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:C9:54:99:F5:E4:14:1A:5A:C7:F2:87:6A:B0:A4:A6:29:DA:5D
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:44:a9:33:d0:35:81:56:99:e7:16:f6:e7:30:c0:94:90:
         ee:1e:6e:45:6c:59:bb:45:7d:ac:b0:ec:e5:62:07:73:b6:bc:
         fd:54:93:8d:d2:89:fa:f8:a8:91:6a:4e:f8:fd:d1:fd:8f:e2:
         34:ae:40:db:8c:dc:94:38:a0:a5:9b:aa:f0:07:3f:f3:75:f4:
         b5:9d:7a:61:ac:e4:69:c9:f5:1b:ae:71:0d:17:d5:0c:de:98:
         34:ae:9b:df:56:2a:2e:4a:4b:18:41:b5:56:e2:4e:13:90:5b:
         7f:21:40:cb:cc:c7:1e:82:8f:1e:68:55:92:58:c3:84:34:74:
         91:93:fe:a4:99:a8:fd:a2:48:9a:c5:26:f8:f7:15:da:d3:98:
         ad:2e:7a:c9:9e:ea:c4:21:86:61:0c:99:d7:dd:4c:3a:f0:a4:
         51:bb:4d:69:1a:4a:76:cb:bc:1f:eb:e2:ec:f2:26:7a:28:36:
         1d:e4:8b:30:71:df:20:22:2c:ee:6d:a0:00:17:4a:70:1c:70:
         30:e3:85:66:6b:ce:a7:b3:75:2a:d2:9d:12:3b:fc:4b:f8:a5:
         5a:4d:3a:3d:17:62:97:f8:b6:4a:4c:a0:41:6d:3a:b2:96:89:
         2d:2b:d8:61:ba:14:5f:d1:46:57:86:de:64:ad:2d:31:bd:c8:
         0a:a9:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:42 2026 by rpki-client