Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          7nHbsDkcn7tkK0dyjH6D/XmidLRvjTJZdRBJQq+SH4I=
Subject key identifier:   7D:1F:5F:02:06:A7:2D:41:23:9F:13:F6:91:E9:8A:D5:E0:6B:31:FB
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       019CAA21703BAFB8DB351C302BB0F5BEE2B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          0F26
Signing time:             Sun 01 Mar 2026 16:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:43 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: UWnO2qcMcsv/idI9JfEHLHeTRIws01CQlHCPFnFpywo=)
                          2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:70:3b:af:b8:db:35:1c:30:2b:b0:f5:be:e2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Mar  1 16:00:43 2026 GMT
            Not After : Mar  2 16:00:43 2026 GMT
        Subject: CN=7d1f5f0206a72d41239f13f691e98ad5e06b31fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:ba:60:dc:c2:e8:67:8d:ab:42:8e:ff:22:
                    52:b4:ad:86:7d:47:a3:54:18:a2:2a:66:ef:f5:2c:
                    8f:ba:79:24:29:54:d4:5e:36:fe:aa:2e:c5:80:02:
                    a5:f2:91:88:4f:c1:0d:0e:38:9c:8e:14:97:b1:25:
                    c9:79:51:13:f1:e9:bf:71:c6:f2:a8:23:8d:9b:b5:
                    f5:b6:0b:b5:b2:b7:73:1c:ff:7e:52:1f:10:47:46:
                    35:08:f4:a7:c8:53:19:33:bd:be:6c:6d:fb:d9:22:
                    d3:f0:75:22:4e:17:d5:ae:19:53:c5:0d:d0:78:69:
                    a1:84:57:d5:5a:4e:11:86:44:d0:b1:ad:0e:2b:43:
                    21:6b:75:d5:c2:de:8b:4e:0b:cd:9d:e2:36:1d:8f:
                    0b:34:ba:55:b6:da:ce:27:9c:6b:04:40:e3:bb:fe:
                    2a:4c:5a:43:70:49:01:10:29:b1:a8:91:64:41:c1:
                    9f:6a:83:5e:fd:ad:8f:9b:42:9c:db:63:c1:47:64:
                    b4:64:1d:c0:7f:33:f0:c9:80:92:51:7c:9c:6d:c0:
                    ff:d7:5e:d2:b3:23:e9:b9:ba:09:5a:62:a7:4b:f0:
                    34:cb:09:af:1d:16:3a:9e:35:13:ad:b8:4c:a6:da:
                    ad:9d:ea:41:87:92:f0:24:27:36:a8:32:9a:c3:20:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1F:5F:02:06:A7:2D:41:23:9F:13:F6:91:E9:8A:D5:E0:6B:31:FB
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9f:21:60:99:b6:14:17:26:4d:80:fe:68:2e:c0:43:90:83:
         65:d6:a9:06:3c:aa:b7:ae:ce:61:60:41:ca:ba:07:1a:fa:e0:
         c1:04:41:51:93:78:b4:52:92:bb:19:9c:fc:ac:15:cc:f1:f9:
         90:6d:04:74:c5:c5:3b:1e:8f:6c:fa:7e:80:09:71:a7:5c:36:
         98:41:75:bc:93:48:a3:66:7e:fe:bb:3e:fd:3a:9f:71:2c:b6:
         a5:64:11:5e:3c:e0:03:fc:65:1c:38:fb:e7:dd:e7:37:2c:ab:
         5e:11:c2:fe:77:b8:28:a1:bb:93:82:b6:fb:11:75:fa:c8:fb:
         16:ae:64:d8:17:93:7a:eb:c4:b7:f7:cb:3a:3b:62:ec:98:7f:
         92:65:13:aa:cb:70:36:1e:b6:79:87:f6:80:0d:a9:b7:1a:3a:
         61:3c:78:08:00:6b:95:2f:95:fb:30:3b:11:9d:22:61:7e:0f:
         66:20:2a:bc:77:c2:e1:01:45:01:f3:47:77:d5:5a:4d:82:c7:
         18:0f:2a:1b:e8:26:a3:02:64:b7:ef:bc:2a:33:06:78:aa:3a:
         32:c3:64:01:63:65:56:99:f6:a6:70:56:e1:13:3f:76:41:76:
         5f:61:11:9e:bf:40:b1:8e:ea:e4:79:eb:5a:5b:cf:a6:f6:a9:
         af:6f:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:50 2026 by rpki-client