Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File:                     aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier:          CDafn39PgEXP7fdSESMx35V5NZX7CICBUF3P9IpMXdM=
Subject key identifier:   BA:42:DC:6C:3F:9C:45:57:C2:AE:7A:93:02:FE:6F:A9:2B:1F:70:60
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer:       /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial:       019CAAFD7382E549439FCE05C56115E592D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number:          8E
Signing time:             Sun 01 Mar 2026 20:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:02 +0000
Files and hashes:         1: AV49wejGjr9Hxex13Q4l2cqGohs.roa (hash: R5bHWz2gU7R0C+az37mAsWmVht2m6Ethy9QvAiIWbnA=)
                          2: EKFVe3lhYj6jr5_3RpA87baa62A.roa (hash: iFYcc4LAzWal4NgvTgKRECkxudvUvf7OtOA2IykPmM0=)
                          3: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: oDlUreT8Uerim3YMJlrIJRFv5CejX8MdlxcbCpe2HwU=)
                          4: t1xYaJRtfUgULrJoptcVd6gvgwY.roa (hash: F1TqQ2BADGP1scC8Z1a5EC0HiMkRify0XGZa9awNQiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:73:82:e5:49:43:9f:ce:05:c5:61:15:e5:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
        Validity
            Not Before: Mar  1 20:01:02 2026 GMT
            Not After : Mar  2 20:01:02 2026 GMT
        Subject: CN=ba42dc6c3f9c4557c2ae7a9302fe6fa92b1f7060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:b8:0f:8d:75:b8:2e:ad:16:c9:22:c0:99:
                    ff:cb:0b:0f:c2:01:e1:b5:7e:fa:ed:f8:c4:68:8b:
                    09:45:8b:ad:de:d5:dc:d6:7e:f2:2f:81:23:d1:e4:
                    c5:c5:1e:58:f4:7a:dd:e6:e7:97:cc:19:73:29:e2:
                    c1:e5:3c:b6:e7:35:34:05:a3:29:71:54:45:e3:43:
                    29:76:7c:88:e5:40:d3:67:32:58:61:14:63:83:5b:
                    d7:d7:9e:1f:d7:19:b6:e8:cb:9a:96:ea:39:3a:75:
                    1d:e9:50:77:8b:b7:8c:f8:a5:bd:39:bf:8a:c6:96:
                    0b:3e:d3:c4:f1:b1:19:ae:3e:80:b1:93:63:45:cf:
                    05:e0:f6:54:a7:bc:53:ad:2b:e6:31:56:2a:6b:a6:
                    ff:c5:93:a6:52:4d:d7:63:a7:17:49:30:f4:7d:fe:
                    82:da:6d:92:82:7a:8b:9f:3b:8a:e5:a3:aa:87:86:
                    19:53:3b:94:7e:12:f3:c4:a5:0d:71:36:b3:4a:e3:
                    18:de:da:2d:6f:28:d1:db:e0:ff:8a:44:a1:5e:7c:
                    2d:77:a5:68:76:ec:65:84:fe:b7:c0:0d:65:be:d6:
                    80:85:c7:68:2c:0f:4c:1d:8e:cf:37:29:64:f5:fa:
                    b6:62:e5:54:25:70:83:7b:82:10:e5:7c:67:54:bc:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:42:DC:6C:3F:9C:45:57:C2:AE:7A:93:02:FE:6F:A9:2B:1F:70:60
            X509v3 Authority Key Identifier:
                keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:bf:ca:ea:31:21:f8:f9:ff:05:a3:5d:98:e8:e0:46:a2:
         00:5d:f4:04:7c:2b:4c:27:37:00:ec:64:cd:c5:8e:e6:bd:e2:
         8c:7c:5c:3d:70:59:88:a9:29:5d:a4:28:d4:72:25:c6:7c:50:
         57:48:36:0a:d9:f7:f8:31:5b:c1:de:42:98:e5:36:bc:c3:20:
         25:26:c0:2d:74:7e:44:02:a7:e6:8e:8f:22:36:49:db:9a:5f:
         d7:13:02:76:f2:e4:94:0c:d5:31:88:e6:d5:e1:09:47:5d:05:
         ab:13:53:9b:cc:f0:67:8c:ec:24:4c:55:72:b9:c5:ff:b2:64:
         a5:86:f8:cf:18:af:4d:fd:aa:08:0b:6e:1a:ed:50:ac:03:6c:
         fa:d2:7c:2d:e9:f9:db:8a:9e:f1:39:bd:bc:c9:75:33:ff:82:
         bb:cf:16:d9:b1:6a:36:89:8f:f0:32:7d:c2:3a:21:b5:39:e4:
         ac:c8:12:83:60:36:d9:c4:27:59:75:24:dd:3a:0e:85:96:51:
         0f:cd:55:61:92:5f:c1:b7:dd:54:34:e8:73:16:08:5a:28:bf:
         db:0a:5e:fb:4f:ad:e2:e2:60:f1:73:a4:66:5b:51:21:7a:53:
         3f:06:62:05:07:c3:84:93:71:ff:dc:dc:a7:2a:af:41:48:bf:
         be:f0:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:02:44 2026 by rpki-client