Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          UQkoBLW8GNVVtIL0RF73Brcofl1CWMULkEPq8tG84z4=
Subject key identifier:   73:23:0D:AB:01:12:4D:6E:AD:7F:F8:7E:83:21:B7:91:95:C7:2A:06
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       019CAC101E4806119B84B6CCC651E19205A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          0BA2
Signing time:             Mon 02 Mar 2026 01:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:03 +0000
Files and hashes:         1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: GOqQ/iqxcoyLMYDCAV7tywhzc/P0ora2u6oJL0IcpHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:1e:48:06:11:9b:84:b6:cc:c6:51:e1:92:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: Mar  2 01:01:03 2026 GMT
            Not After : Mar  3 01:01:03 2026 GMT
        Subject: CN=73230dab01124d6ead7ff87e8321b79195c72a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:13:57:1d:fa:3a:ba:1a:a4:aa:56:b2:ed:
                    12:37:f4:14:e2:28:46:73:07:86:67:01:45:8c:d1:
                    6f:4b:18:48:e4:9c:9b:53:8d:81:ba:f8:54:ec:44:
                    dc:94:37:ae:f6:51:2a:69:5c:bb:6a:90:5c:7f:18:
                    0d:90:70:f1:2b:e8:de:4a:78:51:b1:08:71:a8:cc:
                    63:36:f5:c4:ab:8d:2c:48:09:77:d7:89:6f:38:6f:
                    ae:59:a1:8a:93:98:a8:f9:91:58:2d:b2:76:28:dd:
                    c0:df:93:8c:90:86:bd:df:f8:7b:7d:d8:12:45:b7:
                    d3:81:3e:3c:b7:c2:36:34:3c:0a:ce:a1:cf:c9:0f:
                    a9:64:2e:32:16:de:4d:2c:41:a3:ef:e8:eb:1c:a3:
                    28:46:55:1e:70:db:69:b8:af:d7:fe:59:31:31:75:
                    14:0b:a9:84:a3:c0:b5:b2:fd:59:e6:5a:5f:8d:c5:
                    2e:ba:f7:7c:40:3c:80:d2:3f:09:b4:3e:95:bb:74:
                    97:4f:49:00:f7:65:87:f6:47:8e:0d:51:3f:14:39:
                    4f:e5:07:1f:8d:d0:88:b9:ec:7e:38:33:f5:6f:cb:
                    08:ac:2a:e6:3c:8d:de:a5:32:38:c0:1d:6b:9e:2c:
                    44:21:98:e8:61:b7:a1:48:c4:3d:ef:0b:7f:ee:62:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:23:0D:AB:01:12:4D:6E:AD:7F:F8:7E:83:21:B7:91:95:C7:2A:06
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:58:12:df:c6:2a:78:0c:eb:cd:80:00:22:95:af:ea:db:
         16:3f:a4:99:36:08:dc:9d:cd:e1:3a:e3:fb:10:d7:2f:40:8c:
         1b:90:05:2e:c9:99:b6:48:74:2d:ea:a9:7a:de:68:97:76:7d:
         3a:34:f0:aa:dc:7a:be:6f:57:20:7b:65:3f:05:4c:21:7d:44:
         b5:41:0d:5e:03:e3:f9:99:ec:7e:25:33:9f:92:ec:ab:ec:40:
         a0:22:4e:0c:66:62:07:0c:b2:ee:96:fa:1b:0f:be:62:dc:eb:
         68:73:85:67:a6:42:1c:16:24:80:24:14:2c:51:fd:fe:49:fe:
         2e:d4:8a:6d:49:24:62:26:6f:17:19:8c:3a:8a:8e:9f:a5:08:
         9f:ec:73:32:35:06:e9:40:89:5c:c1:4d:5a:bc:54:a5:f9:44:
         18:09:e1:23:34:6b:3b:1a:8b:67:b4:7e:4f:5b:d2:c7:40:b4:
         1e:88:0c:bc:92:c0:d6:96:66:ec:95:0c:23:dc:91:5b:aa:4d:
         e5:c0:fa:98:a8:98:69:19:d5:80:16:e5:b7:1b:78:f6:01:28:
         eb:f6:6c:89:b6:60:06:9b:10:eb:f3:e7:5d:42:cc:82:28:17:
         30:ef:e5:c7:6a:af:e5:5d:9c:ff:30:dd:0a:32:2f:ff:bf:a3:
         f7:2c:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:06 2026 by rpki-client