Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
File:                     C27I7Y_JP3IzT3qXSka8J9EQKSM.mft (raw, json)
Hash identifier:          np/4v/ByzkyadX+MYxwAI9Ztp4zlo6d9Tklt3bu/O2w=
Subject key identifier:   E9:22:C9:C6:F6:5B:4E:27:14:CF:F1:2B:46:86:E8:12:CC:33:75:C3
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       019CA7C59B991D63A712FBEAF419B4600351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
Manifest number:          E1
Signing time:             Sun 01 Mar 2026 05:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 05:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 05:01:11 +0000
Files and hashes:         1: C27I7Y_JP3IzT3qXSka8J9EQKSM.crl (hash: aFHjZkGJnMBo1s3d+40/F33DrOs7Vi4VYL1kNoxXlQw=)
                          2: DKgUlR5pbKENT44IWjYvShteIMA.asa (hash: cjw0dcwU+VRciQW/zDHQdmfkPqgl6w46zUMqg73c0pw=)
                          3: b84BPERKuOU7XfEOPsJAZAHPSDU.roa (hash: O1yboufDOcbfnri6uWC9z7NwLPBbQ/YoUC4nJjBq2XA=)
                          4: wE8ISYtrI1jkz3hkFW01WhiNM5Y.asa (hash: iAmHSKDocjQmKtaNN1bnl1pex9KoDtpWCgQVRogFg3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:c5:9b:99:1d:63:a7:12:fb:ea:f4:19:b4:60:03:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Mar  1 05:01:11 2026 GMT
            Not After : Mar  2 05:01:11 2026 GMT
        Subject: CN=e922c9c6f65b4e2714cff12b4686e812cc3375c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:b9:d6:cf:b0:1a:6f:3c:1b:3f:b3:df:b1:
                    8b:c3:0d:f6:d3:0b:f1:5b:89:ed:53:cc:dc:95:17:
                    7f:0e:f0:ec:8a:11:fc:b2:6f:41:5c:9b:0e:f0:52:
                    6f:bb:b7:86:67:8b:53:2f:a7:b6:f2:3c:75:13:ef:
                    ab:54:cd:34:89:ff:7c:a9:c5:f6:50:bb:84:10:fa:
                    2a:3d:de:db:e5:de:de:e5:71:c8:62:a9:40:c8:0c:
                    dc:7f:e9:d9:89:45:74:3b:76:82:20:1d:14:5b:af:
                    d8:7c:5f:f1:42:81:37:6b:4d:9e:b6:b2:ef:9d:29:
                    53:1f:e6:98:c7:0b:87:87:49:a4:82:9c:5b:f7:7e:
                    e7:51:f0:9f:87:4f:15:2e:41:31:a2:3f:93:06:77:
                    08:07:c0:20:25:76:2f:5b:dd:e7:5a:bd:9a:76:b5:
                    a6:32:0e:67:ff:d2:59:bb:81:da:b7:97:dd:49:9c:
                    ac:60:bb:c0:3f:dd:70:46:85:45:d8:d0:62:63:7f:
                    f2:6e:de:6e:5e:ad:7e:68:ca:8b:4b:ab:5d:11:65:
                    5b:0a:26:c3:86:ac:e1:e9:ce:a5:6e:58:2a:06:85:
                    2e:90:3e:03:a9:fb:79:c0:fc:e1:28:b8:66:7a:0d:
                    ba:ce:ac:df:c0:cd:32:b8:62:12:c4:52:f4:be:b2:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:22:C9:C6:F6:5B:4E:27:14:CF:F1:2B:46:86:E8:12:CC:33:75:C3
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:43:31:e9:7a:7b:ce:19:3a:1d:ea:7d:0e:33:a8:ed:a4:56:
         9f:e3:83:62:28:00:eb:67:c0:2e:27:1c:a8:f1:cb:68:d3:ee:
         d1:b4:e0:d1:5d:4a:7e:f3:01:61:6f:14:fc:60:0f:d5:00:bb:
         e5:f5:42:68:90:44:17:cf:01:46:58:40:60:86:06:53:06:88:
         e2:88:14:c1:d8:e9:08:46:70:0c:4e:2d:ad:e5:3c:e2:99:e2:
         41:ca:12:ed:e6:76:2b:b7:fe:7e:3f:e0:c3:8d:2b:28:d0:30:
         5f:28:0e:1e:f5:56:fd:7a:ac:7a:c2:3e:e7:95:ce:d9:95:69:
         c1:42:fa:18:f3:41:2d:5c:59:33:91:9a:d5:4c:a3:06:84:c3:
         a7:94:62:52:f5:53:92:26:be:90:a3:3f:a2:77:a7:0b:fc:53:
         23:1c:64:71:02:a9:c3:7f:a2:cd:8c:07:98:c2:36:76:e5:22:
         82:d0:67:6d:eb:80:2e:8d:a4:f2:9e:50:57:87:a5:b9:7f:63:
         90:57:51:ec:ea:6e:e2:78:9b:b1:08:62:bd:c1:e7:7a:85:8b:
         75:cc:cb:d7:b5:be:40:84:24:25:77:a8:23:86:e6:fc:65:89:
         42:3b:d8:c6:85:7b:e9:49:a7:45:66:61:2a:b7:a8:77:d5:ce:
         dc:0f:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:50:37 2026 by rpki-client