Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File:                     T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier:          aPL11sCkqbNtyCeaQQ6qZhHy0zGNF60oNsbKVYzbpJ0=
Subject key identifier:   D5:9D:54:8C:D6:29:5B:71:86:74:58:8F:49:18:77:62:86:63:B8:5B
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer:       /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial:       019CAE6BE9D7A2BF111A773EDB06D09ACB2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number:          03BB
Signing time:             Mon 02 Mar 2026 12:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:33 +0000
Files and hashes:         1: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: woEKwM71Z58i5xPwZftNoQ8b6GeecTBeJfywRz4GPV0=)
                          2: rcLAbqWbscU0-zedseFFQJGt_wI.roa (hash: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6b:e9:d7:a2:bf:11:1a:77:3e:db:06:d0:9a:cb:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
        Validity
            Not Before: Mar  2 12:00:33 2026 GMT
            Not After : Mar  3 12:00:33 2026 GMT
        Subject: CN=d59d548cd6295b718674588f491877628663b85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:ac:a9:d7:13:7b:27:ec:f5:fe:c6:ba:1d:
                    a3:26:27:e3:45:6b:81:b7:b2:8f:70:c1:b8:9b:5d:
                    c8:4c:0f:a2:e4:97:f1:e4:10:3f:7f:a9:08:ed:5d:
                    c4:6e:58:e9:70:fe:40:94:9f:43:13:d8:09:3a:0a:
                    80:0d:ce:ad:38:bf:cf:0f:cc:b8:1e:58:b1:2a:58:
                    fd:b1:60:3b:10:41:60:c7:69:21:e9:7d:29:b4:e7:
                    2b:de:09:e7:0a:4e:52:29:6a:30:5a:01:6d:69:2c:
                    e5:7c:1f:07:ee:d8:c7:81:23:8a:09:08:bf:55:7b:
                    10:9d:2c:26:bc:e2:06:a2:57:41:cc:5c:88:11:9c:
                    7b:2d:36:df:d8:cd:b0:1b:71:85:6d:8d:00:f7:77:
                    f2:b6:88:78:f8:68:2a:48:61:18:ff:f0:54:4c:e5:
                    2f:b0:c2:aa:85:b3:48:48:43:2f:93:aa:30:a4:da:
                    5d:95:00:55:74:2a:a7:82:77:37:8e:e0:9e:cd:5d:
                    d9:4c:1b:85:f5:45:cf:81:23:ba:ee:08:b0:f1:1b:
                    d9:a0:44:67:0a:a6:5e:f4:fb:82:6d:1e:38:44:34:
                    dc:3d:88:15:ee:36:dc:25:7b:7d:bc:90:f2:e6:57:
                    07:32:9d:f8:f3:6b:ac:77:93:e4:5c:f0:e1:56:2f:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9D:54:8C:D6:29:5B:71:86:74:58:8F:49:18:77:62:86:63:B8:5B
            X509v3 Authority Key Identifier:
                keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:60:a4:d1:1c:e5:83:72:54:e5:a3:c4:7c:27:98:e1:d8:
         8c:39:dc:41:2c:9e:1d:cf:6a:fe:28:30:82:b5:05:f0:f9:29:
         b7:85:56:42:04:a2:12:d8:cf:08:11:d3:00:58:c5:0f:9c:ea:
         72:16:4b:0e:55:b3:e2:04:cc:d0:50:af:e0:b8:33:82:bd:4a:
         8f:b2:20:df:49:0d:9d:1d:55:00:4c:7d:45:d7:1b:d8:8f:47:
         13:f0:fd:0c:a7:a4:24:eb:15:af:3a:72:05:5a:42:0f:db:44:
         fa:ff:7e:83:ba:4b:a2:a0:e6:8c:d7:1f:26:31:39:ea:ea:51:
         48:83:da:43:3e:ae:54:16:33:4b:a4:14:63:1f:4a:e5:17:af:
         0d:ff:35:68:ab:0b:27:13:8d:96:17:40:29:16:a6:cb:15:52:
         82:81:b3:79:01:85:b2:b9:28:fd:34:f4:5d:80:7b:9e:e4:2d:
         a5:f1:c4:bb:67:98:e8:4f:47:b3:48:70:29:64:61:6b:c7:ea:
         59:4c:75:bd:20:a1:59:13:40:89:1f:54:b1:58:db:cc:7c:8b:
         c3:e9:1d:3f:ad:ac:2e:74:74:2a:d5:22:ba:1b:0d:67:64:0a:
         e5:51:2a:2f:a6:dc:df:7a:c2:9f:f9:f7:21:c2:8b:de:81:5f:
         21:f5:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:49 2026 by rpki-client