Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
File:                     C27I7Y_JP3IzT3qXSka8J9EQKSM.mft (raw, json)
Hash identifier:          ld4plc1lHmztkTl2xlRpxoyH9+UT/L+v+hl2XwFtcRE=
Subject key identifier:   94:65:34:BA:09:84:DA:08:8A:5A:0B:27:9B:E7:29:EE:BF:6B:82:06
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       019CA9B3E28F0E495251B4DACC27D48C5434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
Manifest number:          E2
Signing time:             Sun 01 Mar 2026 14:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 14:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 14:01:04 +0000
Files and hashes:         1: C27I7Y_JP3IzT3qXSka8J9EQKSM.crl (hash: xfUg8MBN8mAzgd6eeLtHEjhLdppPHqG6JgKb7q3UUlc=)
                          2: DKgUlR5pbKENT44IWjYvShteIMA.asa (hash: cjw0dcwU+VRciQW/zDHQdmfkPqgl6w46zUMqg73c0pw=)
                          3: b84BPERKuOU7XfEOPsJAZAHPSDU.roa (hash: O1yboufDOcbfnri6uWC9z7NwLPBbQ/YoUC4nJjBq2XA=)
                          4: wE8ISYtrI1jkz3hkFW01WhiNM5Y.asa (hash: iAmHSKDocjQmKtaNN1bnl1pex9KoDtpWCgQVRogFg3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:e2:8f:0e:49:52:51:b4:da:cc:27:d4:8c:54:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Mar  1 14:01:04 2026 GMT
            Not After : Mar  2 14:01:04 2026 GMT
        Subject: CN=946534ba0984da088a5a0b279be729eebf6b8206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:b8:4e:e3:67:07:c9:9a:4d:02:d7:88:e6:
                    dc:1f:f1:0e:d9:b8:5a:d2:e5:fd:f2:fb:34:ad:63:
                    74:39:72:ab:42:03:84:6a:da:5f:65:70:6d:a7:8a:
                    64:2a:3b:42:69:94:b6:6f:fb:38:05:71:f7:17:90:
                    01:35:3d:35:74:c9:d4:90:37:57:76:71:25:3b:b6:
                    35:34:71:f9:d2:a3:d3:61:23:c5:06:ba:d8:51:a1:
                    73:21:25:e2:12:4f:2e:aa:fa:4d:5e:76:4b:2d:0c:
                    5f:62:c4:7c:45:c9:90:f5:43:58:59:24:9f:c8:5b:
                    ed:57:cf:5f:f4:9b:2d:91:d0:68:58:c4:d7:2f:6d:
                    0b:fc:a7:5d:23:8f:e4:0b:3c:af:bb:78:28:11:86:
                    88:d8:5b:42:71:75:4a:db:aa:32:da:a7:c3:13:97:
                    95:08:b5:59:83:80:b6:98:c7:5d:9e:e1:fb:89:52:
                    aa:6e:4e:b7:65:06:4c:fb:a1:38:8e:6f:76:59:72:
                    16:de:3c:54:fd:f8:d9:65:2a:7d:f3:61:95:78:73:
                    12:d5:cc:ac:d8:d5:14:4c:e2:ec:a7:3b:cf:a1:57:
                    7b:f5:9e:52:04:05:f8:ff:08:c0:5f:90:e9:5a:22:
                    be:d3:4c:93:4b:bd:d3:74:0d:76:4c:70:5e:e7:ad:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:65:34:BA:09:84:DA:08:8A:5A:0B:27:9B:E7:29:EE:BF:6B:82:06
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:44:7b:d9:2c:45:e5:be:4b:8f:e6:fc:7d:58:99:a5:cd:6d:
         06:c4:24:48:39:59:96:c3:94:0f:be:49:6b:e9:08:e2:36:85:
         af:97:0c:23:6e:d4:70:29:28:a9:47:72:57:06:16:88:e9:03:
         13:ed:79:b8:a2:83:38:8f:d7:44:cf:a0:6f:c7:b3:02:39:c0:
         49:b2:d4:0e:48:16:9a:03:fb:5c:ef:bd:33:3f:db:91:9e:d4:
         67:b9:43:9b:cb:6e:ab:bb:43:c3:c2:8b:6b:83:bd:f4:a3:01:
         c3:6e:16:01:01:38:3a:52:44:82:b9:b0:c1:33:48:22:b5:dd:
         6a:dc:28:5c:f8:aa:54:24:2b:a6:c8:32:c2:67:47:c6:91:db:
         11:83:65:9a:69:92:39:5e:7c:83:04:5b:4e:7a:db:7c:59:53:
         ae:fb:29:e4:f5:3a:96:3c:6b:03:4d:9e:13:dd:ec:af:9d:2d:
         fd:e0:ca:7b:21:8d:14:ca:bf:0c:5d:11:82:bc:de:b3:50:8f:
         fe:9d:a0:d5:65:b9:26:a8:68:00:65:c1:85:c2:2e:7e:62:08:
         cb:43:e5:d9:b6:d3:e8:10:a2:03:51:c4:d1:a1:41:c1:1e:5c:
         ae:c2:1c:29:0c:9f:cc:fe:8e:63:a2:98:05:9d:76:60:5e:bb:
         61:38:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:34:56 2026 by rpki-client