Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File:                     91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier:          ah7RrkKmNqLU5UNxJWMQD99k3EN3gaSQlsSZSsz97w8=
Subject key identifier:   46:7E:12:6A:63:6E:D3:9E:86:02:0F:DD:9B:A4:B1:08:97:60:9A:A7
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer:       /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial:       019CAAC61398DBC0B0F7CCDC224B29C994B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number:          0B56
Signing time:             Sun 01 Mar 2026 19:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:33 +0000
Files and hashes:         1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: oLrgoRfbYyfgjdusbe5/4967b/Dj+wpja8A/3pFHoM0=)
                          2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:13:98:db:c0:b0:f7:cc:dc:22:4b:29:c9:94:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Validity
            Not Before: Mar  1 19:00:33 2026 GMT
            Not After : Mar  2 19:00:33 2026 GMT
        Subject: CN=467e126a636ed39e86020fdd9ba4b10897609aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:63:eb:4f:4a:f3:8c:34:5a:c6:f2:86:75:
                    59:ad:29:ab:9f:f3:85:23:00:1f:8d:1a:0a:b3:37:
                    d6:37:0d:5d:3f:3d:78:ba:1a:ce:9f:0d:db:19:cf:
                    31:46:4d:4f:c8:25:d7:ff:53:e2:2b:ec:12:cd:b9:
                    35:4b:91:85:2c:ec:0d:f8:8b:16:01:03:66:f3:48:
                    68:14:14:11:ce:af:65:f7:52:c7:38:15:7b:b2:68:
                    ae:b3:57:aa:eb:5c:ed:c2:f2:0d:34:99:6b:2e:e4:
                    e2:f9:d2:89:29:1c:13:fe:3a:45:fe:8c:6d:cb:e6:
                    da:8e:fc:5a:aa:1f:7f:8c:dd:c9:f5:84:e7:cf:7f:
                    62:4b:e3:37:a8:d8:93:d6:af:41:a7:7b:83:f5:c1:
                    96:b7:a5:a9:f1:89:c3:43:f9:46:3b:85:9f:ee:46:
                    d4:01:28:2b:19:1f:32:d0:a4:84:3d:b5:b6:a6:2e:
                    62:08:64:f4:41:67:db:3c:0a:0a:64:32:29:05:93:
                    d7:22:e7:cc:f9:36:35:3f:7c:be:2f:e4:69:55:de:
                    31:d7:7b:52:83:f9:8e:c9:f1:43:9d:51:69:b9:6d:
                    1f:21:c9:29:b0:2f:64:c9:7c:52:f6:0a:e6:30:25:
                    fd:9c:9e:fe:f3:af:43:e0:c4:c9:25:a6:60:9d:c0:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7E:12:6A:63:6E:D3:9E:86:02:0F:DD:9B:A4:B1:08:97:60:9A:A7
            X509v3 Authority Key Identifier:
                keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:7e:5e:0d:4f:8f:63:6b:ae:db:c1:69:6e:93:b1:c2:b9:
         00:71:cf:81:f6:a4:80:10:75:0d:99:14:9a:2e:4e:90:bb:4c:
         49:e6:35:6e:f4:82:42:df:d4:ba:05:0d:51:c0:0f:a4:84:30:
         e1:c1:f7:96:5b:f8:c2:d7:29:5b:40:73:f9:ca:4e:dd:97:cc:
         bb:33:2f:1c:2d:f9:31:62:86:b5:01:2b:4b:13:b0:83:6d:20:
         52:03:76:ab:5d:da:f0:40:f6:74:97:3b:03:9e:bb:c3:00:1a:
         fc:34:5b:3f:b8:ee:73:89:54:29:54:e6:e8:07:4a:b4:c3:3b:
         33:0e:0f:46:14:93:b3:bc:0b:02:e6:2b:8a:b4:80:2d:7a:dc:
         7b:94:90:35:01:d3:90:c4:08:ee:d3:e0:92:8c:5a:41:77:2d:
         43:fc:90:db:be:c7:3f:8b:51:07:92:cd:7c:81:6d:ec:78:1d:
         66:d7:26:53:71:c3:9b:95:8e:d2:76:c3:07:b7:a9:f0:a0:43:
         62:5f:d8:16:23:ec:e2:e9:b6:b7:ed:52:1e:ef:c7:24:0f:cc:
         32:c1:32:1a:c2:e6:56:f0:6c:35:0d:de:3e:6d:f9:80:a3:2f:
         85:69:82:2b:ae:5a:9f:5e:bd:ec:32:1a:1e:28:e3:11:4f:99:
         0c:75:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:02 2026 by rpki-client