Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File:                     dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier:          RfdYE179fdGJlpfweLJpArsiTQL+QZedj4FZr1antbw=
Subject key identifier:   F4:C8:FD:0D:7A:53:CD:F4:CE:93:C3:D1:08:B0:72:75:DB:C0:9C:79
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer:       /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial:       019CAC46CC7E1D982E0A40EF3C40C28D1E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number:          0EF6
Signing time:             Mon 02 Mar 2026 02:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:46 +0000
Files and hashes:         1: W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa (hash: uj8H5eTLBr1gPNFQuaCxy8xIYKyHOwh/HEUJd6NH5bA=)
                          2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: KA9NTU55lJLGmdWqFqhrJZkrewK34LNZ/F9/L7+fZ7k=)
                          3: qRvOBOttCCifdXKg-Zoy28a2Djg.roa (hash: 5kgQNG99oZ4RgWldWg89plnXeCTFfBF0bfhCfheFwpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:cc:7e:1d:98:2e:0a:40:ef:3c:40:c2:8d:1e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
        Validity
            Not Before: Mar  2 02:00:46 2026 GMT
            Not After : Mar  3 02:00:46 2026 GMT
        Subject: CN=f4c8fd0d7a53cdf4ce93c3d108b07275dbc09c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:b7:21:0c:2d:e1:0a:ac:39:2e:ed:66:7e:
                    74:b7:71:92:fd:41:29:4d:9c:0f:a1:ef:d7:78:4b:
                    6d:4a:c3:c4:f2:d0:c4:af:d7:e1:14:38:b2:e9:1a:
                    56:87:71:c3:c1:f6:d5:f3:e1:56:1c:9e:40:11:d1:
                    3c:62:f7:6c:96:f1:9e:7c:81:96:bb:b5:3e:15:25:
                    40:b5:ba:46:b1:50:97:e2:25:6f:e3:a6:af:12:15:
                    0e:e8:7b:37:45:83:a8:4a:9c:2f:29:2d:da:be:01:
                    f6:2d:42:da:fa:56:a7:ab:d1:72:48:9a:da:50:cf:
                    a5:94:a5:98:e3:ca:9b:49:32:2b:97:75:9a:3f:72:
                    57:04:97:d7:80:e7:db:06:b4:17:e5:e2:13:dd:e1:
                    30:9d:02:96:16:8e:aa:34:74:50:3a:25:ba:6b:95:
                    fe:b5:8f:42:6c:e8:bd:76:a4:6e:10:91:19:5d:32:
                    d8:2f:57:da:bf:64:dd:ef:f0:7a:52:ef:61:3b:99:
                    ec:eb:a5:8e:f1:f3:91:11:83:3b:a4:55:54:02:f8:
                    fc:90:2a:ea:2e:4c:26:9f:6b:5c:9e:00:3e:78:f7:
                    cb:db:95:1e:ef:dc:a1:e0:a0:7e:43:4d:f2:ed:53:
                    8b:d9:e3:c2:64:af:3d:2a:5a:93:cf:dc:db:a5:63:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:FD:0D:7A:53:CD:F4:CE:93:C3:D1:08:B0:72:75:DB:C0:9C:79
            X509v3 Authority Key Identifier:
                keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:db:aa:04:31:5f:12:63:36:ed:6c:1c:51:ea:e8:51:39:97:
         9b:09:62:4c:46:de:a6:f1:23:e4:31:a9:8b:dc:cc:34:51:c6:
         ba:a1:6e:53:06:9b:a6:ed:ba:6e:cb:26:15:f1:47:18:99:14:
         a7:79:1a:11:b6:dc:af:d4:cc:26:82:11:6c:58:8a:eb:5c:38:
         d9:73:0b:34:14:1a:e1:af:bd:7c:6c:1b:a8:58:35:44:be:b4:
         c4:9d:63:4e:3b:7b:91:61:e2:1f:d0:df:14:e7:47:b9:a2:bf:
         65:a7:f0:5a:73:e5:0d:53:e8:ab:9f:06:e2:4a:63:a1:74:11:
         44:13:ee:56:b2:fe:51:bb:e1:45:80:9c:fd:78:b2:54:b9:91:
         0e:e4:f8:26:d4:00:93:15:c7:99:5d:23:d1:27:9f:be:3a:ab:
         a6:1c:6b:b4:8b:b1:d7:48:de:29:e1:90:81:d6:dc:ca:2a:80:
         96:db:29:a9:46:94:60:1f:9a:fc:c3:11:d4:50:0a:8e:3f:46:
         5a:0e:91:78:45:5d:7c:53:7a:7e:e9:f3:89:e8:f1:98:81:c1:
         74:40:aa:d1:ae:31:d4:42:a3:48:8c:59:c7:29:e5:fc:a8:e4:
         f7:e4:55:5e:58:4a:bb:8a:6c:8f:d3:ab:60:0f:1c:3c:3b:c3:
         12:84:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:19 2026 by rpki-client