Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          2s8IV5pUcugjwOtlvFsYNwFpzMvk+mNC9okOa6Z6bmM=
Subject key identifier:   45:BA:18:34:11:4D:EE:AC:FF:68:DE:AB:11:D7:9C:A4:2B:B9:BF:01
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       019CAA21897898CB2202E0ECB625CB955B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          111D
Signing time:             Sun 01 Mar 2026 16:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:50 +0000
Files and hashes:         1: 1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa (hash: kC5aY81+7wV5FaAuCbcDPO88uURjqA0og191H8ou4nk=)
                          2: IArcm7KHrcc-PY-XbMM0EYnJC8o.roa (hash: D8OnazQ4CkBXy0mTUKLIq9zAP3v8FKdV/2bmVQK5YE4=)
                          3: Wsun9qUEkz7Qte-mPAle0T2WkOc.roa (hash: 3L85Zuxdwbe+qNboOx36lUzHEqWROzqfxPyAEkPek0w=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: Sx5mKjD3KSvXIfNV7TzNTpIsgM8AD3VF1nmExmiqzb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:89:78:98:cb:22:02:e0:ec:b6:25:cb:95:5b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Mar  1 16:00:50 2026 GMT
            Not After : Mar  2 16:00:50 2026 GMT
        Subject: CN=45ba1834114deeacff68deab11d79ca42bb9bf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:3c:75:9d:7b:a3:62:43:d8:62:b1:3f:4e:
                    b3:c6:c3:c4:eb:7a:ea:16:fc:f6:53:d4:9c:0c:d5:
                    d7:f8:db:eb:f6:8e:19:9e:cf:99:4f:b8:d5:3f:5b:
                    1d:8a:ac:04:13:a7:22:34:ca:a6:06:a5:43:91:ad:
                    44:01:6a:5c:a3:ec:11:73:47:68:8d:56:98:9d:2d:
                    c7:2b:66:67:b6:a4:79:8a:19:4f:c2:de:ea:ba:17:
                    ba:4d:6b:32:e5:1d:9c:98:af:32:be:60:52:55:0e:
                    de:c5:93:ac:58:d1:d1:cd:e2:86:7c:0d:77:36:6a:
                    6e:e0:a0:5e:48:5f:67:0a:e4:a2:d8:d2:81:ee:28:
                    6d:d4:aa:3f:38:34:ac:77:10:10:08:38:a9:12:36:
                    e0:12:d8:55:78:d8:24:30:a8:c8:5b:40:a5:a3:f8:
                    4d:62:17:fa:77:78:f8:6a:25:1e:84:28:d7:cb:b5:
                    e8:fb:41:cc:df:f4:52:27:30:32:47:3c:a4:5b:3c:
                    fb:c6:15:a6:ce:83:0e:86:9c:38:f8:2e:32:7b:ca:
                    dc:7b:05:42:88:6d:21:86:79:10:45:34:ca:6d:91:
                    75:1f:87:0b:40:79:ae:61:c1:a4:ae:45:2b:ff:35:
                    7a:29:57:48:0a:96:8a:0c:f5:1c:0a:35:2d:9c:c5:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:18:34:11:4D:EE:AC:FF:68:DE:AB:11:D7:9C:A4:2B:B9:BF:01
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:eb:6c:37:ec:9b:25:81:34:1b:db:4a:b8:58:ee:cf:e3:ef:
         ad:f0:bf:1d:29:99:fa:0f:33:d0:58:36:f1:fc:e8:82:3f:30:
         fa:a6:c0:f4:9c:2b:6a:1b:a9:77:65:9f:5a:c7:20:d6:95:80:
         a9:d6:35:8a:5a:70:09:1d:a0:4b:c7:2c:de:39:04:e8:e8:d5:
         84:75:04:e2:62:8c:64:cf:06:e3:52:63:80:70:6f:c0:23:09:
         8c:6d:a4:b0:09:51:c1:8a:8e:4c:8b:ab:57:ce:aa:45:74:af:
         2e:db:e3:42:64:9a:d8:bc:67:83:2b:55:dd:a4:6e:ec:6c:0a:
         c4:18:b1:d5:16:28:5c:6b:1c:be:73:f3:47:80:6e:e6:b5:cf:
         e3:88:0e:1f:a6:a9:f9:9f:7e:3b:66:56:8c:fe:52:3c:95:66:
         3e:67:4c:d7:2f:3a:a3:78:58:ee:c3:42:dd:33:ba:4f:5a:76:
         1d:3d:28:6f:b2:4a:07:d4:1e:e1:15:e6:eb:02:fa:f4:56:b2:
         97:8c:6f:eb:39:1d:2e:61:a8:00:1f:8f:a5:9d:9e:fa:53:36:
         54:3f:0c:46:27:1d:23:30:c9:d0:e0:00:e4:2f:23:df:e8:4d:
         69:bd:9f:13:3c:ff:c1:84:bc:53:a3:c4:9f:de:ef:f7:73:ab:
         d4:d8:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:26 2026 by rpki-client