Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          Gx5vLNtZgxapRlNgUna6PVybMIZ7fpa9/Va2Sh2WUSs=
Subject key identifier:   CD:AE:0E:7D:63:2F:3B:C7:0B:92:38:38:66:70:33:3E:45:2F:CB:9B
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       019CAB348AE767925E901B6F4A3FAFEA7035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          0F11
Signing time:             Sun 01 Mar 2026 21:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:13 +0000
Files and hashes:         1: 6_uqscAUqLl-U-FOdnB8b80ymVs.roa (hash: 6iIxj8hFU1rpgiG9WHmnrQdt6HoHVlv0NufbYcZmLKU=)
                          2: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (hash: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU=)
                          3: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (hash: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs=)
                          4: rFMfSzn-n7nZRas5UlWT_V3b0wE.roa (hash: BT3wbqOQUe0s9zLkAX65/Pmrb3QAkF3u9va25+8RZ8s=)
                          5: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: ybboNdP/LIob+9G/kk94bk409N20EG4xy7M4i3Yi6/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:8a:e7:67:92:5e:90:1b:6f:4a:3f:af:ea:70:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Mar  1 21:01:13 2026 GMT
            Not After : Mar  2 21:01:13 2026 GMT
        Subject: CN=cdae0e7d632f3bc70b9238386670333e452fcb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:7e:4f:eb:1b:7b:a1:fc:4b:43:46:df:52:
                    50:97:50:b0:d4:4a:45:1a:5a:1a:f7:6c:11:77:26:
                    6d:58:b7:b3:76:d1:92:3a:0a:12:1b:f3:b3:64:4c:
                    05:c3:01:b9:fa:74:c1:50:1f:1e:8b:30:05:67:d0:
                    ac:fc:d6:61:ff:72:a7:e7:a7:14:1d:57:88:ba:6e:
                    41:87:43:41:13:f8:c0:da:4d:8b:ca:dc:15:aa:5c:
                    ee:c0:22:99:07:ca:96:4d:10:7b:9e:cf:29:8a:7e:
                    ba:77:00:7e:ef:cf:1b:ee:61:48:75:c1:21:22:70:
                    ac:70:9b:26:91:47:fc:7b:a9:e5:85:c2:ae:46:ef:
                    dc:6d:d0:68:48:e7:dd:7f:47:07:40:2a:57:2f:f6:
                    73:e1:1a:be:36:1e:d1:ff:08:3d:30:ba:94:3c:4b:
                    9e:e4:8f:7f:80:2a:ed:fe:9f:fb:80:2f:cb:89:7c:
                    13:98:25:ea:fd:a3:8f:6f:98:0d:ae:e6:d2:7f:ac:
                    2f:ca:91:ba:1d:44:f8:8f:8a:de:52:cd:04:26:b5:
                    4f:6c:c0:8d:22:ca:be:13:0e:a2:5e:f8:cd:e4:52:
                    60:b8:68:88:ff:02:d2:87:81:1f:90:29:00:4f:82:
                    df:f0:98:57:b3:dc:34:49:0d:73:89:20:d6:ee:35:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AE:0E:7D:63:2F:3B:C7:0B:92:38:38:66:70:33:3E:45:2F:CB:9B
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:96:6e:90:65:0c:d9:a6:56:c9:02:bc:41:e6:ea:40:13:40:
         4e:5c:36:d2:f0:26:b8:f2:79:61:73:07:6b:74:22:fe:d7:04:
         fc:87:72:b9:be:fb:8c:d8:91:97:f4:25:ca:5a:6a:42:14:b6:
         bf:05:24:8b:9b:5d:38:9e:20:3d:d1:c5:20:3c:89:da:87:cb:
         38:d4:05:37:d9:c7:4d:e2:21:96:fd:d1:52:a4:99:ec:5e:da:
         30:6e:a0:a5:8f:6e:72:60:1f:a6:42:27:e3:d1:53:cc:43:12:
         2b:19:f5:40:c3:8e:08:db:34:7c:d7:98:89:bc:92:ca:9f:95:
         94:30:11:0c:7e:fb:93:4f:af:3b:56:08:9d:e2:52:b6:cb:e6:
         d1:36:73:45:48:8a:85:ff:cb:cf:ae:07:2d:6f:ec:1e:12:07:
         9b:f6:f8:46:34:5a:76:ff:4e:a4:75:79:b7:e9:e9:e1:7e:61:
         75:0c:1c:30:ce:20:62:03:ab:3a:ba:52:74:0a:1d:29:2b:83:
         e8:32:fa:b6:82:92:e0:d6:84:3b:6a:b3:5f:06:60:19:e4:a1:
         08:31:c2:41:36:43:1b:60:02:65:00:0b:4c:c9:5c:84:14:6e:
         82:ed:70:46:87:63:07:73:f3:f8:00:4e:ee:b1:6c:e4:1c:35:
         98:03:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:50 2026 by rpki-client