Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File:                     _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier:          1aImewK9/ZB1YeInLqrzvPriifw3lc/sEIZpVJxozRY=
Subject key identifier:   8D:A2:AD:C3:FD:AF:3F:D7:CD:1F:32:A8:E5:35:79:FC:BB:8E:C3:73
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer:       /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial:       019CAC46DB68919F775CC1F1D0F0A6BDC5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number:          13C6
Signing time:             Mon 02 Mar 2026 02:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:50 +0000
Files and hashes:         1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: DG54eCttllcsgvOhKCEYJINGqN+oBjtN5P0tJbiR0wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:db:68:91:9f:77:5c:c1:f1:d0:f0:a6:bd:c5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
        Validity
            Not Before: Mar  2 02:00:50 2026 GMT
            Not After : Mar  3 02:00:50 2026 GMT
        Subject: CN=8da2adc3fdaf3fd7cd1f32a8e53579fcbb8ec373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:e3:00:18:26:22:1e:62:a8:48:4d:0f:1b:
                    b2:c2:d6:d2:53:37:1f:fa:3b:7d:90:57:e6:66:eb:
                    61:00:a0:f8:9f:05:e2:15:1d:81:8a:1b:93:38:fb:
                    e0:95:d5:ed:6e:cd:b4:1d:02:ee:a0:06:6b:82:4c:
                    33:00:d8:ad:88:91:a2:43:4a:01:7f:e7:6a:b0:04:
                    b6:82:2b:30:4e:7e:13:ee:af:53:7c:ec:03:eb:34:
                    3e:e1:51:bd:6c:95:08:54:9c:73:5b:ba:61:b1:8d:
                    2c:e0:89:aa:79:a6:c7:b2:86:0b:0d:d7:45:12:31:
                    07:8e:7d:72:ea:6c:75:77:95:e5:37:c5:80:4b:94:
                    4a:07:7e:5e:a1:b6:07:4b:17:74:d3:29:41:89:fc:
                    3f:bf:d8:12:b2:52:9c:03:d4:64:63:02:bc:1d:70:
                    73:f2:da:5a:33:cf:17:71:7d:76:2b:4e:c5:15:12:
                    2c:6b:c9:30:9a:25:e3:1e:0f:a5:44:fb:52:3f:ec:
                    ff:ab:ba:61:f4:46:19:73:28:fc:06:a8:e2:56:6e:
                    14:8f:01:76:ba:db:69:3c:00:0a:09:d7:b7:a3:2d:
                    a9:db:bd:b0:c6:09:2b:0a:b1:99:d7:36:5c:b1:2e:
                    4c:90:21:04:03:03:d9:01:d9:17:b3:f5:8a:6c:d9:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:AD:C3:FD:AF:3F:D7:CD:1F:32:A8:E5:35:79:FC:BB:8E:C3:73
            X509v3 Authority Key Identifier:
                keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:19:73:38:ac:36:51:f5:98:bc:f6:3c:62:8d:5d:29:a5:5d:
         f1:6a:1a:e3:7b:b4:51:c4:78:ba:f0:a5:63:50:ed:ba:de:70:
         ec:77:dc:2d:c3:88:72:67:47:44:6d:fe:cb:e7:86:8a:2b:a9:
         33:59:49:4a:9b:f0:07:a0:31:4b:08:38:28:0c:85:62:0e:8b:
         0b:34:7b:aa:8d:e9:03:7b:5c:e7:94:e9:af:30:26:bf:94:45:
         6a:f6:93:25:3b:41:6c:bc:75:9a:50:e2:f6:f9:cc:6e:ec:d4:
         80:71:9f:6b:74:54:6d:ba:81:2c:2e:76:1b:a7:c8:c3:29:a1:
         0f:88:ec:ba:eb:81:22:82:59:2a:4b:f5:9e:f3:f1:0a:66:c8:
         cf:9d:ce:c2:96:1b:f7:fe:bb:a8:40:ff:6a:f6:ea:87:7b:da:
         db:11:1e:4d:d9:81:02:27:3d:7b:bb:2b:d7:71:be:5e:d5:25:
         9c:33:9e:65:e9:ce:17:30:bd:7f:bd:3f:c4:60:4e:f6:0b:f2:
         41:25:07:bc:52:48:9d:8e:85:6e:e8:de:f6:a8:62:2b:95:1f:
         0b:67:55:05:52:64:5c:83:85:56:c4:87:cc:47:99:97:bf:a7:
         dc:61:45:b0:fc:7a:32:9c:34:f7:5d:a0:82:a6:94:7e:22:9e:
         0f:b5:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:31 2026 by rpki-client