Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File:                     p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier:          TfkKHll+2piBjpEyJk/LhD5Bj8eD2tmmXz/72sDXhuE=
Subject key identifier:   B0:AE:35:72:FF:72:A0:F4:1B:7D:9E:5C:4F:15:41:02:57:1F:ED:F9
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer:       /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial:       019CAA8FF99D2CC9556D6B49AF5BBC45279B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number:          065D
Signing time:             Sun 01 Mar 2026 18:01:27 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:27 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:27 +0000
Files and hashes:         1: SdRMQSisA3A52kvZfTcOqIZi7WM.roa (hash: FjVPIrI7M5sGkygChCHAIE+8f/f2VPSzrAXNL/N59yU=)
                          2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: gP4owG/ChCu4iUhCdgBtw9EYltF69Flta/g9Ticj8MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:f9:9d:2c:c9:55:6d:6b:49:af:5b:bc:45:27:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
        Validity
            Not Before: Mar  1 18:01:27 2026 GMT
            Not After : Mar  2 18:01:27 2026 GMT
        Subject: CN=b0ae3572ff72a0f41b7d9e5c4f154102571fedf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:d9:29:1e:d5:f7:a2:7e:ec:f4:89:4f:88:
                    2e:ed:f8:fe:e5:4f:b2:65:70:39:1e:50:6d:d9:48:
                    1e:72:99:a5:22:55:fe:fb:f7:1d:ce:24:15:3a:41:
                    62:1a:25:84:e1:ed:b9:48:e4:3b:72:35:de:26:b4:
                    9e:d1:da:c4:9f:9e:1e:f7:2e:93:bb:aa:86:eb:de:
                    ae:2d:c8:f8:1a:b7:7a:e1:45:af:fb:1f:59:46:e7:
                    62:48:7e:73:a0:b0:ab:f7:d3:20:bf:d2:51:cc:1a:
                    57:ce:e2:38:e6:bd:98:9e:05:91:cc:72:bc:a0:ed:
                    58:03:56:4f:ce:95:b6:8d:bd:a3:f2:e4:71:40:90:
                    cb:74:40:07:fb:4a:0e:27:b3:4a:d5:34:93:40:35:
                    98:21:e8:e9:b9:01:aa:5e:ad:9b:55:e4:32:53:bf:
                    3b:05:18:f0:b9:30:52:ec:81:f6:59:54:e9:d5:fe:
                    d9:4d:dc:4f:14:84:15:55:8c:d0:11:5d:78:d7:76:
                    43:e0:fe:ca:56:06:e2:3d:db:f7:68:30:df:2d:9f:
                    0a:3a:6b:95:28:be:b5:b9:0b:54:8b:99:ff:d3:f3:
                    54:b9:f3:66:ce:0a:ad:a4:5c:2d:4d:0b:a2:08:4b:
                    d3:ed:a7:94:12:2a:d5:b7:ad:de:fa:00:a0:78:7d:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AE:35:72:FF:72:A0:F4:1B:7D:9E:5C:4F:15:41:02:57:1F:ED:F9
            X509v3 Authority Key Identifier:
                keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:0b:ad:9b:69:fa:71:45:fb:e7:d9:91:ef:e5:ec:0f:e3:
         ed:39:73:47:0f:8c:ab:8b:6e:20:bb:ce:06:46:56:c8:30:55:
         89:a5:66:7e:5c:dd:90:7c:f2:cb:aa:9c:93:33:ad:db:d7:d2:
         ec:75:08:ad:be:67:e1:c0:89:f5:f5:b8:33:7f:21:e0:4f:b4:
         bf:d3:57:0e:57:18:cd:70:a0:06:08:96:2e:90:4a:09:24:34:
         4c:d8:cf:f9:c9:d8:a9:0a:86:de:86:3c:34:18:2f:7e:54:8b:
         69:d1:92:74:68:81:36:a7:be:85:63:af:c0:d6:90:d5:ae:ba:
         57:7e:db:ab:fb:18:53:31:34:d3:58:26:22:20:c2:52:d1:66:
         bf:0e:53:cd:35:94:a6:98:f3:25:d5:df:e8:99:9a:32:30:a5:
         d4:70:07:ee:74:9f:06:9f:8d:4a:08:2d:7b:ea:dc:4d:1c:eb:
         5a:e8:50:3d:6d:5e:e8:5d:af:fb:e1:05:5a:56:72:ab:5d:5f:
         a8:8d:f4:ec:66:ee:cc:d3:18:49:65:27:4d:c6:96:45:0d:de:
         1f:83:da:f8:12:e2:09:21:8a:06:11:ee:41:64:fd:56:36:55:
         5f:bc:f8:89:58:8c:10:8e:63:8f:3a:ef:46:5c:05:f1:44:3d:
         ee:e3:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:42 2026 by rpki-client