Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          3k4vAx70GO5vxqPrPzFdhQk/84pBdlPE++HgFdfDQ0s=
Subject key identifier:   E1:A2:A7:69:4E:04:42:52:D9:9F:B6:91:EC:37:C7:B2:27:66:01:58
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       019CABD8DF98AFE8153F043911A8AEB98B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0F98
Signing time:             Mon 02 Mar 2026 00:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:42 +0000
Files and hashes:         1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
                          2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
                          3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: Xpef+KgOsxtuqXuL83udn7NMSUW4LyIQo0b9OXGBavM=)
                          4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
                          5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
                          6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
                          7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:df:98:af:e8:15:3f:04:39:11:a8:ae:b9:8b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Mar  2 00:00:42 2026 GMT
            Not After : Mar  3 00:00:42 2026 GMT
        Subject: CN=e1a2a7694e044252d99fb691ec37c7b227660158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:33:50:e6:11:42:3f:cd:d9:63:be:a5:4d:
                    a7:91:b2:c7:2f:93:bd:e2:59:8e:5b:bf:59:d0:a4:
                    b2:dd:81:d1:82:af:21:8c:65:d6:58:fc:d4:69:5c:
                    fd:6c:06:67:2f:dd:2d:8b:c4:b5:50:e6:8f:9a:72:
                    3e:5d:ac:b3:be:aa:14:ab:54:cb:c7:72:bd:f6:a2:
                    50:e8:f0:88:24:ff:c3:b4:36:3d:8c:19:fc:60:69:
                    4c:67:10:1c:96:34:38:b0:05:bb:74:43:64:80:41:
                    ce:8c:f1:a6:d4:e8:bf:32:c6:a9:40:66:90:09:f9:
                    7e:95:61:08:f9:e1:0e:14:26:43:57:b5:99:1c:8c:
                    1f:3e:f2:2d:3f:03:ad:b1:2e:c1:c4:f1:97:0a:fc:
                    4a:9d:fa:84:31:98:aa:af:e0:4e:c6:8f:21:10:80:
                    66:b0:51:40:28:b9:61:8d:21:19:51:9e:f9:7d:de:
                    d7:b7:91:38:52:75:f6:34:e3:b1:25:68:a8:e2:98:
                    70:b3:45:2c:44:6c:dc:55:cb:d5:6f:ac:61:99:f4:
                    32:ee:21:4d:c2:26:cc:65:0e:27:a9:9f:65:a0:e5:
                    d5:4c:6a:e8:49:f9:bc:97:27:88:74:a2:54:6d:9d:
                    54:31:c9:7f:72:53:42:3a:3f:47:71:8f:96:04:0e:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A2:A7:69:4E:04:42:52:D9:9F:B6:91:EC:37:C7:B2:27:66:01:58
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:ea:64:cc:e2:3c:7f:94:30:8b:ad:88:42:ba:68:d9:4d:
         f4:6b:6c:55:6a:0a:89:ff:3e:90:14:fd:34:ea:fe:fc:5d:a2:
         d7:62:67:95:05:09:80:28:0e:09:95:b8:7d:a6:7c:44:87:b9:
         30:7f:d4:95:bc:b6:c0:86:df:d3:83:9d:67:28:a5:d5:fc:9c:
         1c:5f:8e:87:ec:35:59:b4:39:e8:63:56:57:ff:1d:bf:6b:b2:
         55:66:db:6e:bc:35:1f:cd:6a:85:a7:83:24:6d:91:6c:66:81:
         05:6f:1c:af:24:db:61:cb:55:47:f9:c9:2e:14:db:ba:a1:e6:
         f5:6a:69:6a:de:0b:2e:ac:0e:81:d5:50:f5:34:96:d5:97:30:
         83:dd:f6:ce:f8:ff:ba:55:d6:1e:95:ef:fb:d7:ce:57:60:94:
         76:f4:3d:09:77:5d:fe:7d:45:ab:97:ad:80:3a:0a:fd:8f:bd:
         bb:f5:e3:00:01:1d:53:89:51:77:cb:06:a7:ee:29:d6:d8:18:
         05:85:5a:39:97:f0:6e:31:3b:8e:42:ed:fc:d0:5b:e4:9b:71:
         0b:44:bb:87:0f:fb:e9:d5:51:6f:d0:ad:74:2a:d9:d0:5f:b3:
         e6:4a:60:1d:fb:06:a2:61:fd:9e:8b:d8:b8:cf:79:20:ef:ba:
         66:67:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:01 2026 by rpki-client