Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File:                     Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier:          R892MX8W1RY+iWVUyAAByH4/DT43sFIZo65tSQ+VUM4=
Subject key identifier:   07:01:4F:5D:E4:90:E6:BD:87:90:F1:17:8C:7A:12:88:3A:1E:6B:9B
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer:       /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial:       019CABA1D80BF47F99FA3E200CDCB3954125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number:          12CA
Signing time:             Sun 01 Mar 2026 23:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:36 +0000
Files and hashes:         1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: gom5nE/nKdShuW0dbxD7KtOAZPfSJCF40/KSkva6ic0=)
                          2: q96d216QAtoDZvD6M_G3XQbxl48.roa (hash: NAZ21w6eBGbL4I9za8usnSXilM010YnKcAiEgEn3/0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:d8:0b:f4:7f:99:fa:3e:20:0c:dc:b3:95:41:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
        Validity
            Not Before: Mar  1 23:00:36 2026 GMT
            Not After : Mar  2 23:00:36 2026 GMT
        Subject: CN=07014f5de490e6bd8790f1178c7a12883a1e6b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:0f:25:4d:d3:53:01:68:53:69:a5:9b:1c:
                    ee:16:0d:cc:16:80:25:bb:d6:02:13:9a:c6:75:0c:
                    c6:ee:82:d3:9a:64:e0:1a:b2:48:c3:cd:c4:ae:a1:
                    bb:6b:f6:05:71:b3:f2:4d:94:43:45:6c:3e:4e:1b:
                    b0:37:4c:15:dd:c7:71:df:de:2a:41:03:05:05:36:
                    9a:97:92:b2:37:74:d7:11:73:a6:74:df:95:b7:01:
                    16:33:c1:fc:6d:64:cf:50:30:b0:54:92:97:a8:54:
                    fb:31:b2:ac:02:b3:cd:fa:e6:2f:78:ae:98:93:04:
                    1b:4a:81:5d:d0:27:cd:38:e4:c6:d3:fd:99:0c:8b:
                    a9:25:de:54:4e:64:03:8a:29:2e:14:80:a8:02:a9:
                    fb:cf:83:ca:6a:c8:3b:74:a6:11:2e:4b:f3:c9:ad:
                    54:83:5e:b0:51:ce:d2:1a:0f:bc:03:b7:e1:89:87:
                    0b:a2:bf:b7:d7:fa:7f:f5:fb:2b:11:97:43:7e:b9:
                    85:d7:3f:68:fd:77:79:d1:20:bf:38:04:3c:45:42:
                    c9:7c:dc:14:4c:98:f1:f6:52:bf:07:2d:88:49:84:
                    90:0c:3e:99:2a:7e:7a:82:02:f9:34:71:34:ee:8c:
                    d1:f8:a9:d3:c8:1f:36:ad:5d:8a:4c:96:62:e4:72:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:4F:5D:E4:90:E6:BD:87:90:F1:17:8C:7A:12:88:3A:1E:6B:9B
            X509v3 Authority Key Identifier:
                keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4c:a8:51:74:bf:0d:d4:b5:62:02:d1:2e:78:70:f4:6d:42:
         59:1f:45:b3:af:b3:17:4d:e4:a9:9a:c7:e3:65:53:e6:db:65:
         bb:da:25:a5:b5:77:c4:b7:6a:4f:c6:a8:bd:31:ec:47:54:29:
         60:ad:38:6a:a7:a1:be:11:83:d8:10:8e:07:d9:76:b5:af:35:
         59:7c:34:d8:04:f5:4f:c2:fd:cc:81:22:eb:10:f1:49:b6:d9:
         8d:43:0f:20:13:d6:a2:c7:4e:40:ab:48:73:a7:4b:00:da:87:
         ae:f1:9a:67:68:0b:0c:5e:60:e0:09:57:8e:07:a0:2b:23:f3:
         15:12:8c:71:c2:cc:ee:9b:96:f0:dc:f9:48:dc:0b:76:54:00:
         af:e9:3d:08:ba:bf:a6:39:bd:73:52:97:ee:53:c1:83:63:23:
         3c:b0:00:a3:a4:c2:27:86:92:69:ee:04:09:78:b7:64:06:68:
         78:19:52:b9:5d:d8:99:84:a1:dc:02:e4:a3:63:fe:e1:96:5e:
         34:86:a4:bf:10:54:b4:9c:2b:d5:da:9e:1b:e5:60:92:ad:e4:
         93:eb:04:47:9b:26:35:12:15:39:df:7b:7d:67:fd:44:f1:cd:
         89:c4:f8:ed:cd:67:33:87:0b:32:b7:e3:fc:e6:f4:6c:41:15:
         22:d4:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:18 2026 by rpki-client