Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File:                     _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier:          3iSgMLx7Yfx3CjJpZTZzlUzK6NU0U9BrVJj3n5AhLN8=
Subject key identifier:   98:72:30:2A:BF:1F:15:C6:CD:FE:83:00:5E:05:38:9F:DC:E7:99:A5
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer:       /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial:       019CADC7BF1620F2BCE37552344BB154B99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number:          0565
Signing time:             Mon 02 Mar 2026 09:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:14 +0000
Files and hashes:         1: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: 7qfZLoKCuHu6xAMNkP5JkXkmrVr2oWSGiga8PiDc9Hk=)
                          2: zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa (hash: 5ydnlDVv4t0zmXg2O1tzQDXDv+ERwDuwKHdXunX5QqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:bf:16:20:f2:bc:e3:75:52:34:4b:b1:54:b9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
        Validity
            Not Before: Mar  2 09:01:14 2026 GMT
            Not After : Mar  3 09:01:14 2026 GMT
        Subject: CN=9872302abf1f15c6cdfe83005e05389fdce799a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:d0:51:de:11:3f:22:a4:12:22:13:45:35:
                    4d:23:9e:41:bb:ec:02:27:58:54:4c:e5:52:25:28:
                    59:4b:52:2e:f7:2b:07:e2:8b:e1:2c:54:49:f6:74:
                    81:07:5b:19:97:d6:ce:e1:a8:f6:ce:39:8a:6d:25:
                    4d:39:67:c3:65:c5:9f:6b:ec:53:17:2d:f2:1a:f4:
                    26:1e:91:1f:ab:b8:ad:8f:8b:73:fb:06:da:1c:ce:
                    08:20:39:00:9f:dc:1e:a6:e4:ca:56:c1:b8:70:67:
                    00:64:d1:10:28:68:9f:71:ef:79:4d:1d:47:2d:03:
                    65:99:09:e7:09:e2:94:ed:53:5c:1b:45:12:e9:77:
                    a9:65:cd:87:4c:87:f3:47:6c:4f:5d:c0:ea:4f:e4:
                    27:ea:63:b9:5b:c7:42:c7:86:b6:27:eb:7e:c6:71:
                    4c:49:e9:63:3d:3d:9d:b1:d3:ef:0c:e0:fd:12:5a:
                    ec:e7:bd:85:bb:05:e2:3a:3b:78:f4:8b:12:89:34:
                    14:a9:26:51:6f:71:66:ab:06:f5:ea:39:eb:38:3c:
                    8a:88:08:69:a2:81:75:64:78:95:47:30:2d:d8:55:
                    74:cb:29:f3:1c:ff:d9:a7:01:10:73:95:62:10:c3:
                    dc:10:3d:3c:f2:98:33:3e:96:a5:8a:a1:62:8b:91:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:30:2A:BF:1F:15:C6:CD:FE:83:00:5E:05:38:9F:DC:E7:99:A5
            X509v3 Authority Key Identifier:
                keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:9b:80:49:f6:a4:fa:f1:a5:34:22:59:4b:82:86:4f:4a:
         b8:e0:dd:62:3d:68:02:33:84:d2:b3:c8:4b:cd:1c:e7:73:b9:
         0e:15:28:d0:9e:78:35:f7:d3:3f:5c:a4:79:3c:7d:c7:44:77:
         76:0f:a3:8a:cf:f9:af:bb:8d:61:55:68:c3:36:25:3d:2b:38:
         8f:fb:43:5c:82:0b:73:75:be:40:7d:25:58:00:01:0d:ba:48:
         80:4a:c5:9e:21:80:8a:e7:64:b3:3a:24:4d:8c:29:23:77:f5:
         6e:f4:92:af:b9:5f:39:89:1b:f7:32:51:99:45:58:37:50:f6:
         28:27:55:a9:ca:ca:95:2a:b5:f5:92:f9:ce:90:cf:1d:01:45:
         da:8d:53:97:05:0f:fc:8a:03:6b:aa:34:f7:db:03:04:0a:75:
         64:d9:a7:cc:81:34:63:d9:e4:02:98:5e:c5:74:ff:0a:86:3e:
         2a:a0:ad:70:ae:82:f6:55:b0:5c:e3:7f:a2:8f:a1:ea:2b:a4:
         0b:8a:b0:8e:ab:c3:39:0c:ae:8a:03:70:ee:15:68:ac:1d:39:
         ac:3d:34:78:4e:cf:83:d5:ab:2e:22:2f:89:c5:e0:87:f1:66:
         33:06:a2:db:8a:ae:1a:51:48:ac:71:b7:22:cc:81:24:83:14:
         96:40:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:30 2026 by rpki-client