Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          3ubljUDMvVK0/e6JLf2Zb/q8PDDqj+tTggUHj+R0i3U=
Subject key identifier:   D6:C8:44:02:7A:79:3F:54:A0:88:6C:88:C7:00:46:43:E3:5C:08:2A
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019CACEBAC592465DBC7641E5A99EA10CFBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          08FB
Signing time:             Mon 02 Mar 2026 05:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:51 +0000
Files and hashes:         1: 4YRS6EEeuTI9ZfzO53iKNIfSN4s.roa (hash: Tv3HULU0Zra1BolAPc2Q/gu/Km7IonOCAUA8ZpZ63Jo=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (hash: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: iT7vCcKBHYo80gi46h2eAHk1SVnaZec6NOr8tz0M2tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:ac:59:24:65:db:c7:64:1e:5a:99:ea:10:cf:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Mar  2 05:00:51 2026 GMT
            Not After : Mar  3 05:00:51 2026 GMT
        Subject: CN=d6c844027a793f54a0886c88c7004643e35c082a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:58:81:22:b9:b5:b0:17:38:0b:d8:8a:fc:
                    92:20:1d:65:a3:0f:50:66:dc:72:ab:7d:26:81:53:
                    c0:23:a5:8a:15:d5:67:eb:99:fe:d7:0c:d1:e7:8a:
                    01:58:0a:06:01:8e:52:2b:75:60:4d:b4:a0:85:a9:
                    af:34:e3:b3:14:89:57:60:26:52:5f:57:bc:08:9f:
                    13:9a:80:c6:47:71:a7:a4:6b:32:b0:c3:24:94:77:
                    c5:34:a6:ba:04:29:b8:87:96:a3:0a:b4:e1:f1:ca:
                    b2:dc:42:74:1f:2f:e2:f3:5f:88:c7:72:2e:4f:b2:
                    5e:1c:76:9c:97:ac:7b:05:98:19:40:74:b8:90:81:
                    55:ce:48:7f:62:fd:29:6e:04:57:ac:54:62:d9:68:
                    a3:7f:a3:76:78:e6:0e:28:2e:0e:d3:a5:34:88:ab:
                    a8:d6:4b:71:f1:23:63:fb:06:00:3f:16:68:d4:c0:
                    b1:4e:4d:30:60:52:3a:0d:7a:95:6a:a8:6b:e8:39:
                    8e:7f:0c:a9:a3:35:2c:0b:a7:92:42:fa:15:72:22:
                    e7:e6:2c:b9:f3:ac:00:da:78:3e:98:45:a5:a0:3a:
                    3c:fc:48:79:93:84:ae:31:f3:20:eb:4d:2f:53:89:
                    d7:67:33:06:44:de:e7:2f:8d:ff:d0:05:cf:c5:db:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:44:02:7A:79:3F:54:A0:88:6C:88:C7:00:46:43:E3:5C:08:2A
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:f2:ef:b8:c6:10:94:52:97:81:93:52:48:3d:ce:49:d2:
         80:19:3d:af:10:d5:0a:9f:82:39:b5:0e:3f:f3:6e:a6:5a:f3:
         3a:f6:ef:66:2c:e3:3c:c9:43:46:44:d7:6d:7f:53:ee:7a:5c:
         96:c3:02:f1:e0:c6:b9:c6:07:58:24:15:af:6c:47:d0:0d:77:
         2d:47:e9:71:81:a8:f7:1e:f0:61:05:26:20:ea:7b:2c:6f:1d:
         a9:6f:f4:ed:bd:15:ac:ba:1c:ee:3f:d2:1c:f2:4d:7e:f3:85:
         ec:60:76:ef:ec:01:b3:7c:aa:6d:27:23:7d:a6:a2:30:d5:c4:
         4d:cd:49:ad:f1:de:03:47:b4:3e:08:0e:fb:0c:3c:c2:8b:c5:
         bb:f9:1d:a0:0c:a9:23:6b:b3:a3:30:41:d7:c0:12:4b:65:01:
         47:48:eb:53:12:8a:ec:ac:db:af:d3:b1:43:dd:b8:1e:0d:a8:
         ff:60:66:ad:e2:22:86:3e:0c:f4:e5:6a:2f:73:58:8e:c3:4b:
         91:1d:d2:40:43:f7:95:c7:67:fb:f0:5c:3b:10:46:fe:73:20:
         4c:17:e2:af:ab:ee:c1:c4:50:5c:5e:7a:c5:b4:a1:dd:47:a5:
         14:64:e4:ac:89:24:83:27:ce:ac:41:f3:80:82:d9:12:f0:3f:
         5a:03:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:54 2026 by rpki-client