Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File:                     1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier:          b9SUg8N5mWfgQrZvO0/+OCppV4JHlMdUYxnGRbJGbdU=
Subject key identifier:   2E:AD:52:CE:B5:9D:29:65:50:12:32:A8:61:86:67:68:62:E1:20:B0
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer:       /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial:       019CAC46A285446B5A0A9DEBDC5FDA37B4E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number:          0BF1
Signing time:             Mon 02 Mar 2026 02:00:36 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:36 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:36 +0000
Files and hashes:         1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: eszS2jwi1lO1PBYcJzxux5t4V1wmwINNQs88fik03v0=)
                          2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:a2:85:44:6b:5a:0a:9d:eb:dc:5f:da:37:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
        Validity
            Not Before: Mar  2 02:00:36 2026 GMT
            Not After : Mar  3 02:00:36 2026 GMT
        Subject: CN=2ead52ceb59d2965501232a86186676862e120b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:ac:30:e6:67:f2:1a:fd:06:ea:3f:18:80:
                    60:8c:23:15:3b:a2:b2:ec:3e:e9:d0:46:21:e1:bd:
                    c7:53:8d:bd:34:f8:99:12:8b:4d:26:38:e1:94:08:
                    83:d4:92:42:e8:8b:c6:48:00:ab:ec:fb:82:32:80:
                    a5:91:be:81:9d:2d:66:22:28:fc:5d:bb:0b:ce:3c:
                    91:7d:e4:a8:a4:64:d9:d4:d5:f2:39:ad:14:b5:b0:
                    6f:ae:4e:84:29:a3:75:35:2c:4e:ba:c2:18:a9:7d:
                    c2:32:60:45:c8:49:c9:e3:79:c3:ae:e9:fc:28:4e:
                    bb:ef:a2:b0:42:02:6f:5a:96:78:ff:d2:4c:a4:f5:
                    aa:3d:60:7f:31:1e:b9:47:b5:84:83:a4:f8:a3:f3:
                    d7:74:62:dc:e1:a7:96:30:07:e9:4a:65:48:1b:5e:
                    85:18:05:eb:fe:08:9d:e4:7f:4b:a6:09:f6:78:df:
                    96:c0:6b:41:6b:64:bc:1a:8c:d4:4b:6d:3f:de:10:
                    42:62:d6:d7:4f:95:82:d4:a1:bc:0f:54:23:b8:30:
                    a6:ac:50:8f:3e:a0:4a:d3:75:65:5f:17:b2:9e:db:
                    86:e2:89:60:d9:22:0e:19:38:81:d1:ee:3b:3d:a2:
                    95:f2:2b:56:78:a8:85:24:32:bc:a1:e3:64:ca:4b:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AD:52:CE:B5:9D:29:65:50:12:32:A8:61:86:67:68:62:E1:20:B0
            X509v3 Authority Key Identifier:
                keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:a4:8a:55:1a:93:cf:96:f6:85:38:e1:32:57:7f:a6:9d:
         96:24:66:8d:f1:c4:b9:31:67:b2:ba:9e:ce:b1:6b:c4:9c:f6:
         db:71:64:a6:e1:24:4d:ca:78:60:5e:db:50:7e:3d:04:83:dd:
         31:62:bf:a5:58:4c:c5:1d:37:f1:37:6a:4e:90:f4:2b:1d:ab:
         6d:ea:a4:b8:05:91:45:73:fe:25:5f:36:0c:a6:2a:c0:44:40:
         d7:fd:14:8f:8e:af:cf:e9:18:c2:a5:f3:5d:b5:99:2e:b8:09:
         03:42:3a:a2:d3:47:e7:90:69:a0:2c:a6:d5:57:da:31:5f:57:
         60:c4:1d:70:0f:50:1a:94:2d:ca:8c:4d:a6:1b:01:1a:97:77:
         7a:a8:be:ea:36:1a:b2:d6:ab:7c:ad:ab:e1:bc:17:be:9a:f1:
         80:f7:79:ee:2f:48:d4:d5:81:77:45:a4:10:2f:95:37:39:8d:
         31:d5:ac:73:76:24:8b:e7:01:4e:4a:5c:99:16:fb:fe:b3:93:
         22:5b:21:d1:91:b7:75:5a:1a:28:3b:7d:89:bf:94:cf:0f:8e:
         e5:3f:5a:77:aa:95:27:19:e2:6e:38:97:f3:58:06:30:bf:e6:
         e1:6a:47:ed:3a:c4:63:cd:d9:cd:fc:4e:d6:12:ec:ae:6b:f2:
         ab:fc:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:22 2026 by rpki-client