Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          fu80D8Tq8FrLkd9M4Z3/jTLiYrAEvA0TjCYHznKzsrU=
Subject key identifier:   76:CE:C8:79:44:F6:3B:AC:05:D0:EF:B9:A2:CC:1C:E1:0E:21:57:6F
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       019CAD90506B49827426533AC8AE79E14E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          16CE
Signing time:             Mon 02 Mar 2026 08:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:41 +0000
Files and hashes:         1: 8P6X0x59C3VckILV8m4M69IldqE.roa (hash: QOXkZ9qVgfqH0XpMQGh9X+mEF5OYLP10GuMRHcWRTjE=)
                          2: QCuKQCl6KP2estrIaG6k5Uc81F4.roa (hash: cBmWMEy/zwB8Bt1wF3nlzEol1nOu9jM3rhWTCCMjNfY=)
                          3: YzkQZIuWtNFelhNpi4EnHDyBQJU.roa (hash: 7C0rYIhC0IdYSE2/clMiQQwJ66KGMZ1ByQiGiFH5l9s=)
                          4: _e5AZzGVltklRadfv-MK2ei60tQ.roa (hash: eZnnL/QqgvT71AWN7mEZ0+pU5MPgz24zK984iwP+gE8=)
                          5: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: UOx/OY9A755urzLV4PgxnSHuUbgqCVnFKLx3zUuux6M=)
                          6: zih4pEofMsc0PfEmVcpJbSHS8Vw.roa (hash: LBA2zilX1jjETkANtyysp3KbVjSb0vGJ+k7nTqc9Wjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:50:6b:49:82:74:26:53:3a:c8:ae:79:e1:4e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: Mar  2 08:00:41 2026 GMT
            Not After : Mar  3 08:00:41 2026 GMT
        Subject: CN=76cec87944f63bac05d0efb9a2cc1ce10e21576f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:1d:50:f9:76:77:41:26:72:53:37:63:81:
                    9a:99:40:44:db:b3:6f:96:17:8f:88:12:b8:62:71:
                    1f:7b:cf:74:50:b2:07:48:c1:a4:08:82:ca:98:25:
                    4e:4a:6b:e2:dd:4f:c8:25:23:3d:52:c6:fd:6e:40:
                    4c:74:50:d2:60:4a:a3:1d:86:a9:e4:37:c6:0c:8c:
                    4b:0d:9f:13:f9:98:9c:f7:87:fe:f6:71:01:1a:19:
                    6b:f6:9a:56:26:d1:26:f0:0b:d9:b2:ef:40:63:37:
                    66:1c:fb:84:bc:1d:0b:52:a2:d9:f1:29:89:e8:77:
                    d2:b3:e5:e5:92:14:cb:30:cd:cc:59:74:c1:28:53:
                    f3:4e:5e:6e:1b:76:55:51:bc:1b:d6:84:cb:7b:24:
                    08:da:51:ae:54:f6:a9:10:a0:84:5b:6f:d8:18:b9:
                    30:e5:48:57:a9:f4:9c:4e:f5:3c:1a:21:27:a0:ab:
                    14:78:18:5d:c7:b9:e9:80:a5:d0:7f:61:62:03:91:
                    a9:2e:84:f5:eb:f3:99:db:06:f6:0f:50:39:cb:a3:
                    92:d0:98:8f:15:68:c2:87:bd:20:58:13:5a:2c:08:
                    20:45:d4:99:e3:d0:86:f1:3e:49:84:d8:0d:72:30:
                    fa:02:4e:64:ba:65:de:c6:6e:99:43:b8:bb:86:be:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CE:C8:79:44:F6:3B:AC:05:D0:EF:B9:A2:CC:1C:E1:0E:21:57:6F
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:89:da:a6:93:26:10:65:7f:2f:be:30:14:b6:26:b7:cf:
         ea:f5:6e:7c:c6:54:5e:7a:f6:87:06:0d:7f:7f:ad:23:aa:98:
         49:c3:75:35:35:52:f8:be:6e:98:51:8e:8d:27:38:e2:61:a3:
         da:69:99:e1:85:b0:4e:2c:5e:50:66:4b:3c:f7:74:5a:da:87:
         14:e7:75:3e:5f:bd:a1:c8:7e:42:28:16:1c:8e:68:b7:75:3b:
         c2:3a:b5:60:b9:d8:ca:02:3e:2e:c3:32:6d:3e:39:81:a0:f7:
         4d:ba:23:c2:65:5a:05:41:d4:50:16:4d:83:91:bf:97:5b:48:
         15:78:e4:ef:01:c0:57:b9:36:05:2f:fc:c2:42:d7:01:37:87:
         16:70:ad:5c:d8:16:80:06:93:35:06:73:04:2a:e0:6d:2f:0c:
         7b:26:ca:f1:bb:65:df:dc:48:d3:76:09:d1:40:be:59:84:8a:
         38:0d:51:9b:85:14:8d:ae:2e:91:1e:63:7a:9b:f8:9c:e5:73:
         e2:e5:d8:78:c5:4c:2a:ed:fd:08:3a:a0:b6:6f:69:c2:5b:cc:
         64:d6:d1:96:b9:79:67:2f:af:88:30:43:62:6d:a6:f1:16:bc:
         a6:ba:1e:38:6e:f5:63:50:fb:61:61:43:e5:7e:39:8c:de:c0:
         12:95:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:17 2026 by rpki-client