Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File:                     CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier:          BbJTBUiW+wJP3mbnGEV6B1QWcPPIIzXfnRsav9G9+HA=
Subject key identifier:   CF:24:32:F3:34:8C:08:59:48:FA:5C:CC:FD:92:AB:F4:57:4B:C7:20
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer:       /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial:       019CAD90700D0E945CBBA2ECEFC3A63A4140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number:          0935
Signing time:             Mon 02 Mar 2026 08:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:49 +0000
Files and hashes:         1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: XlINXMN3AsiG8lWqvWmKLxlDNmKYroiZWyafuWKKxvk=)
                          2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
                          3: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
                          4: laGYyUqPK3fHCKoz7nqL0OXT2Eo.roa (hash: Lwh1rsMavQm34P2hRAMjpx40Roi5BFidjgw/3tt2hhE=)
                          5: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
                          6: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:70:0d:0e:94:5c:bb:a2:ec:ef:c3:a6:3a:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
        Validity
            Not Before: Mar  2 08:00:49 2026 GMT
            Not After : Mar  3 08:00:49 2026 GMT
        Subject: CN=cf2432f3348c085948fa5cccfd92abf4574bc720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:8c:cb:75:87:e2:99:19:a1:1c:d1:ac:1e:
                    e4:b9:a1:ce:db:94:35:ff:62:d9:6b:48:28:dc:c6:
                    e1:8f:ef:ec:30:b7:ca:ea:3e:77:cc:c6:8c:f3:97:
                    cc:01:98:87:b8:46:27:14:04:22:9a:fd:f8:3b:74:
                    1a:37:fe:49:be:08:d5:c5:67:bc:99:7e:a6:97:eb:
                    ff:73:6a:90:f4:a9:33:ae:d3:1f:17:1e:55:09:d6:
                    04:4c:d5:9d:bb:c2:83:25:0e:18:12:3f:63:72:99:
                    c1:9a:ce:8a:e2:13:9b:fa:f0:62:80:8d:12:81:f2:
                    ae:14:5c:08:d7:22:25:96:30:83:bb:fe:05:d7:35:
                    54:83:47:39:05:81:f1:8a:4f:95:f0:22:2c:42:96:
                    ab:f8:f3:05:a6:31:ed:bf:40:d8:be:7c:99:3a:09:
                    94:45:0c:72:57:80:08:a4:11:d0:33:66:b8:25:f9:
                    4d:59:32:74:83:a7:00:48:a8:6a:e7:b5:bc:bb:b1:
                    aa:d2:b9:31:b6:0a:e2:51:4b:21:69:f6:96:6f:ba:
                    bf:57:6f:7b:cc:07:ad:d2:6e:e4:49:77:8f:89:cb:
                    9b:72:05:75:30:6d:73:89:bc:96:3a:26:ef:08:45:
                    3c:e2:7e:24:30:5d:48:ad:e8:de:d3:3c:9a:b2:e3:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:32:F3:34:8C:08:59:48:FA:5C:CC:FD:92:AB:F4:57:4B:C7:20
            X509v3 Authority Key Identifier:
                keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9b:db:58:07:eb:8d:ba:b4:4f:bc:0b:d1:f5:d4:94:ba:d3:
         9a:c9:7a:aa:6b:ee:60:62:a3:19:fe:69:8d:3a:33:25:e7:63:
         be:a8:0a:6d:75:b2:0c:de:c4:68:5f:78:e9:e0:f3:b8:e5:57:
         d8:70:d6:4c:a1:e3:a9:f0:72:2e:55:6e:0d:2d:5d:d6:4b:90:
         7b:13:fc:05:7e:80:3b:1f:e9:fd:a2:2a:f6:c0:89:13:9c:fc:
         d3:9c:85:5d:93:48:1a:ec:1c:53:6d:ee:61:23:a6:de:bf:41:
         43:3c:bf:68:26:89:8e:b7:81:c7:a5:4d:35:37:5b:c5:05:55:
         a0:0e:12:62:cd:bb:5c:e4:a7:9b:ad:c3:59:eb:8f:9a:df:12:
         f1:3f:61:c2:5d:05:70:cf:7b:e1:1d:34:c3:3c:ab:c7:34:15:
         70:85:65:ea:9c:cf:6f:fe:cb:df:84:38:e8:6e:03:16:ad:85:
         83:69:63:06:c0:97:b7:df:57:49:2b:1f:05:df:7f:f5:f9:d5:
         ae:75:25:e8:2c:2d:3e:3b:52:3e:63:5e:ab:1f:b3:8e:ea:12:
         4a:08:d5:7f:a1:89:64:98:3c:f1:0e:31:f5:8e:48:99:99:8d:
         42:22:04:94:c2:4f:57:cc:7a:5b:68:ab:05:f8:7f:aa:d9:16:
         e5:4a:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:07 2026 by rpki-client