Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File:                     ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier:          /ru3gijAMC+AjWs+9nvJcSmwRMDmaKnmy5Unr59kifg=
Subject key identifier:   69:04:53:64:71:3D:E9:90:D0:29:E8:56:34:2E:BC:3B:06:36:EF:12
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer:       /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial:       019CAAFD99610AC4DC80E125D3D9057DA3A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number:          091F
Signing time:             Sun 01 Mar 2026 20:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:12 +0000
Files and hashes:         1: 7CSVGtYUX5r3HPpcYYedHjS20IQ.roa (hash: hzzOsdStylJXNXeCzZeL6+XDTe9J82yzkNqZCVPm+lM=)
                          2: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: /rxDGdMloXk445LNPsTrEVLvNVogADymUR13WvuDfGM=)
                          3: nQENJbRz1W0WhBM6EIeWbWaXGe0.roa (hash: XnC7G+pMyq9QIiJSY8PXtmwY2A35n+casWMMCOJ/vOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:99:61:0a:c4:dc:80:e1:25:d3:d9:05:7d:a3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
        Validity
            Not Before: Mar  1 20:01:12 2026 GMT
            Not After : Mar  2 20:01:12 2026 GMT
        Subject: CN=69045364713de990d029e856342ebc3b0636ef12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:b1:0b:20:3f:a0:a3:33:05:3a:00:91:54:
                    75:bc:33:eb:de:cf:f1:50:c0:16:f3:50:ba:3b:c5:
                    e9:5a:f0:42:8a:fe:d5:08:78:20:9e:a2:25:2d:39:
                    67:15:69:0e:48:96:31:3e:2b:93:3c:18:4f:25:2e:
                    c5:11:31:2b:73:2b:05:bd:e5:c6:0d:6e:c8:d8:c2:
                    23:79:58:a3:d4:d2:21:9a:37:f5:b4:02:54:b5:8d:
                    59:31:94:bf:ae:be:5e:93:2f:f8:75:b5:da:e2:dc:
                    c3:91:57:f1:d4:cb:09:c0:4c:29:26:b1:36:7d:af:
                    41:5b:80:ae:82:f6:43:9c:68:0d:ba:9c:d4:47:df:
                    77:5b:11:8b:ca:b6:96:ad:27:f4:ec:c4:a2:d9:2a:
                    11:6d:52:aa:86:f2:c3:b9:f5:18:f6:37:b9:c6:ea:
                    9f:62:39:cc:5f:58:95:06:43:93:e9:29:b0:0a:63:
                    20:1c:ed:a7:c1:6c:7d:1e:9f:8e:6e:ab:94:fd:70:
                    43:98:27:eb:f3:db:02:ac:68:96:eb:71:90:77:af:
                    17:03:7c:57:ae:b4:31:3b:ae:0b:60:f1:76:c4:11:
                    6c:3f:44:0b:42:f1:ad:4c:b4:31:f4:e1:8b:a7:b0:
                    e2:1c:ef:d4:f1:00:5a:e6:8a:e3:f3:39:b2:9f:ac:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:04:53:64:71:3D:E9:90:D0:29:E8:56:34:2E:BC:3B:06:36:EF:12
            X509v3 Authority Key Identifier:
                keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:fb:6a:f8:9e:a5:5b:ae:f1:da:99:7c:66:bf:1d:c6:bc:
         1e:25:c1:8e:bd:98:d2:f0:4c:54:12:c7:b3:ee:e1:ea:f8:5c:
         8f:b0:0a:33:29:f8:a2:2a:4b:ee:d3:bc:84:0c:a6:9f:2f:2b:
         4b:ab:be:50:59:7d:67:24:80:48:65:88:ed:49:35:b5:d9:d5:
         23:89:02:94:04:88:51:fc:0b:cc:3e:4a:06:bd:c6:f2:eb:c5:
         27:88:ea:60:69:be:1d:7f:cb:9d:69:09:c5:44:2c:ff:a6:03:
         b2:99:dc:39:8d:ff:26:0b:0e:44:37:f0:c8:75:d0:49:c4:47:
         73:20:c2:f9:4f:30:76:7b:4b:2b:8c:98:27:78:69:db:2a:bd:
         f1:00:f1:5f:6f:8b:c9:3d:3a:9c:4b:ac:84:74:d2:a2:4d:57:
         df:26:86:3b:36:68:5f:2a:f5:ff:97:93:3d:5a:ac:3c:62:50:
         91:85:e0:85:0e:6d:f3:48:59:ed:7f:1c:b4:8f:93:28:14:0d:
         80:f2:2f:e0:0f:73:7d:7f:49:71:47:20:81:50:4f:f8:0c:57:
         c7:7c:d2:b3:dd:88:bc:26:ac:1f:8b:94:68:63:89:f0:7d:d0:
         88:f4:c6:35:89:82:40:4a:2a:57:e0:8d:e5:9c:4d:c9:86:e0:
         ed:88:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:28 2026 by rpki-client