Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          z+9L+KAEnOjpzpOi4AQitzynyDq5oE0/NAPrwF+Fknc=
Subject key identifier:   F5:E1:CB:53:E0:48:64:E1:0B:A1:9F:9C:0C:5A:C9:E7:2F:67:5B:D1
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       019CAD594DB80DA8E4475349A7682713AC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          05B7
Signing time:             Mon 02 Mar 2026 07:00:36 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:36 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:36 +0000
Files and hashes:         1: JXA8-jGbC4K_XrJLF-jKm9_Urkk.roa (hash: tDVb3RwyJVNSMR8JJRmNxAV5uGwYhy7h8q3pBfOZ3t8=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: +8H0clHrv5lHkKbOLew3QfmwOOFDX/TB2mqW+efbIjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:4d:b8:0d:a8:e4:47:53:49:a7:68:27:13:ac:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Mar  2 07:00:36 2026 GMT
            Not After : Mar  3 07:00:36 2026 GMT
        Subject: CN=f5e1cb53e04864e10ba19f9c0c5ac9e72f675bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:13:9e:b8:a5:38:08:01:e4:f4:96:99:44:
                    02:55:c4:bd:0f:ee:cb:57:9a:02:e4:11:02:7b:fb:
                    eb:15:f9:d1:0d:4b:12:7b:9a:bf:84:42:96:45:10:
                    70:63:d6:b1:09:0b:16:c3:8f:62:72:66:60:db:7e:
                    ee:64:79:c2:57:14:39:67:b9:0d:ca:2b:7b:52:6c:
                    55:5f:a5:82:73:42:49:bf:80:d8:e9:93:f7:7e:62:
                    1a:30:37:9f:18:a7:c6:6b:22:9c:66:8d:2b:03:4d:
                    7d:26:d6:79:b8:ba:86:e8:5b:c1:a2:f7:cb:98:58:
                    7d:7d:cc:7d:14:3d:ad:94:4f:62:1a:6c:b5:48:aa:
                    6d:b4:20:26:c0:a9:02:75:7c:73:ea:6d:c8:fd:49:
                    37:fb:62:fa:4e:62:21:48:82:ca:39:2a:17:c8:65:
                    73:b1:12:d8:8f:29:4e:6f:56:ef:f2:b0:e2:fc:68:
                    76:06:13:a7:55:21:10:57:d8:db:f5:a8:de:29:70:
                    69:54:08:ef:35:4f:5f:f4:40:6f:2e:f1:93:5d:13:
                    3e:99:07:e9:20:90:b4:57:1d:ff:66:2b:85:b8:5b:
                    30:b6:06:53:14:9c:75:b6:a6:86:e1:13:c4:7a:37:
                    6a:33:a1:3e:2d:f8:27:3d:2e:57:87:5d:56:91:59:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E1:CB:53:E0:48:64:E1:0B:A1:9F:9C:0C:5A:C9:E7:2F:67:5B:D1
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:de:41:b9:ca:f1:59:6e:b1:2c:bb:64:0c:6f:79:c5:7f:39:
         43:a8:2b:1e:92:d2:3f:7f:1d:70:57:1d:ce:0b:5e:bb:34:b7:
         21:41:08:7e:aa:23:0c:9a:b9:ff:ab:b5:8c:87:f7:3f:48:13:
         aa:1a:0e:1f:b2:7f:e1:56:52:1a:6e:40:7d:fa:13:96:77:0a:
         c4:77:26:67:1f:6f:17:0d:d6:4b:8b:3b:2a:ba:04:7a:f1:91:
         73:6d:d6:60:8c:74:16:19:78:2a:5d:62:6e:60:66:1c:69:27:
         a4:67:8b:f8:78:14:9d:e5:02:f0:76:73:11:45:33:ac:af:29:
         96:89:84:eb:08:b5:c7:04:07:b1:31:b2:0f:65:8e:84:f6:0f:
         28:10:33:7d:23:0b:33:ce:2e:dd:68:f3:68:1a:63:da:40:88:
         18:2a:91:9a:82:7d:44:ba:be:a7:86:b7:82:68:f9:ab:7c:87:
         be:9a:00:6e:67:04:fe:fc:e3:f8:08:92:15:c0:b8:da:9b:12:
         f7:22:e4:1b:ca:89:ea:a1:83:ba:8d:88:ad:c5:ed:3a:c9:e5:
         dd:1d:e7:b8:13:8d:4a:71:53:b1:6c:0a:1a:ce:9f:ca:6f:10:
         ec:79:c4:26:0c:ed:48:5f:57:6b:39:76:be:9b:3a:ba:86:25:
         ca:07:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:02 2026 by rpki-client