Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File:                     RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier:          vKgJn1sRZnAnHMn5GFeq95m8A+P41ExXJZ14BEnezdw=
Subject key identifier:   A5:99:B5:FF:2E:02:63:65:CB:A4:3E:66:6A:05:7B:27:E9:20:89:77
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer:       /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial:       019CAD9092A3A2890313159BD2D87C57DE82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number:          14FA
Signing time:             Mon 02 Mar 2026 08:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:58 +0000
Files and hashes:         1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: D32NE11c57cjOa9KgHGmhMzsULmgEpTBtE6kY08+YVI=)
                          2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
                          3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:92:a3:a2:89:03:13:15:9b:d2:d8:7c:57:de:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
        Validity
            Not Before: Mar  2 08:00:58 2026 GMT
            Not After : Mar  3 08:00:58 2026 GMT
        Subject: CN=a599b5ff2e026365cba43e666a057b27e9208977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:a4:f8:b6:3a:94:d2:32:a7:eb:d9:70:a4:
                    37:69:c2:2d:b8:4c:ba:65:8d:b4:54:9b:82:f2:c2:
                    a9:b2:8c:85:7e:92:1d:d2:41:d1:0a:37:8e:b2:54:
                    0d:2c:5a:2c:d1:ac:53:4c:ab:16:b3:66:3c:90:21:
                    0e:75:58:92:c2:22:f5:f2:c7:61:83:dd:2d:a0:ec:
                    9a:af:7b:7b:47:ad:b8:28:52:2f:5e:8b:a6:0b:4f:
                    8e:0b:52:1b:d6:da:15:69:f0:d0:00:f2:10:ee:cc:
                    33:f5:ff:d9:05:cc:31:2d:a1:40:dd:59:a3:d0:b7:
                    d8:9a:8e:19:5e:53:70:a5:74:e7:6e:2a:84:f7:47:
                    eb:01:d3:a4:8b:3b:1d:a5:a5:af:8b:c6:5d:c4:ff:
                    b0:81:47:c0:39:3b:8c:fe:68:ec:02:10:88:b3:07:
                    dc:d8:d5:9a:3d:e1:38:01:a0:dd:70:03:fc:a5:3c:
                    02:eb:e5:f7:b3:08:fb:15:7f:65:84:d0:95:01:6f:
                    db:95:00:11:f8:64:f5:cf:44:e3:0f:45:c2:f0:e2:
                    3f:52:c6:78:21:57:71:0a:55:c4:3b:b1:d0:69:f4:
                    07:d3:ee:04:21:d8:5a:d1:ee:1d:47:29:7c:57:7f:
                    eb:86:f7:3d:66:e6:ea:0c:df:b8:32:b0:e1:9f:dc:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:B5:FF:2E:02:63:65:CB:A4:3E:66:6A:05:7B:27:E9:20:89:77
            X509v3 Authority Key Identifier:
                keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:87:c1:23:8e:ba:af:38:a3:b1:53:8b:43:a7:29:04:65:
         6e:f3:58:ee:8c:86:f0:9c:e0:29:15:40:9e:ec:e5:85:c1:23:
         7e:31:a8:68:5d:26:e0:b2:10:b9:94:ec:56:d4:42:63:c5:19:
         7b:8a:bc:e6:75:96:6a:da:09:cd:fa:7c:06:2d:06:05:57:a5:
         5d:fc:de:f1:d6:cd:37:57:e3:08:ff:4a:b6:82:54:2a:f4:fc:
         30:e6:f9:2f:6c:86:a1:e1:7f:53:31:2f:a2:34:b7:26:5c:65:
         19:74:38:e6:3f:58:99:48:8b:32:69:99:fd:00:21:28:50:18:
         c6:36:0f:e2:b2:2a:13:13:da:57:b6:0b:f7:f8:19:9f:54:f8:
         2a:dc:51:fa:fd:04:24:4f:4f:e5:24:38:90:db:d6:35:9c:e3:
         be:50:47:53:77:ea:d6:4a:2f:2f:a5:5a:26:01:3d:0d:61:b5:
         e3:4f:27:4c:2c:ec:a9:49:e1:55:5a:6d:67:b3:5b:d3:bb:4b:
         9a:62:fa:d4:14:51:cc:6b:9a:06:bc:63:24:44:8c:f8:b1:80:
         9b:89:93:b4:09:0f:e8:31:c6:44:ba:88:34:07:31:07:1e:1a:
         78:6e:26:9b:5a:2f:c9:bf:20:ea:d6:0f:63:c2:0b:26:a7:9a:
         af:8f:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:42 2026 by rpki-client