Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
File:                     DRjKnIs9feaqzD0ULHfe9l2dmhM.mft (raw, json)
Hash identifier:          lcA+2Ej9Tk4DG7OKrURQ78nQyZ6jO/p6/FrtAgm6OO0=
Subject key identifier:   C9:B0:85:C1:04:23:DD:DF:FF:09:0C:54:FB:E0:D3:A3:32:27:23:B6
Authority key identifier: 0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
Certificate issuer:       /CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Certificate serial:       019CA832F83F33F3515D2469B2ACF5490EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
Manifest number:          6E
Signing time:             Sun 01 Mar 2026 07:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 07:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 07:00:38 +0000
Files and hashes:         1: DRjKnIs9feaqzD0ULHfe9l2dmhM.crl (hash: 1AUTNIdsywLX/MXidd8tweUPksspy0qXrf9r7UFs5bE=)
                          2: ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa (hash: ZGB8JxWLMriUzpJGh2DaBjMMjMXaanV6HNWfgfO/KEc=)
                          3: Jxxd5aNDgIwuXw-fe_JV9RJ9Vsk.roa (hash: ZyYRE97Gj5xlNTvz04w5Yl/LKVZnUZ+i5Xl5eo6U8Qo=)
                          4: fENZ45chq7I0lirDj-NqEzfJV48.asa (hash: Oziqs0HzmzOziXtI95DiC50goIAtPYUpO9KwNqQbRR8=)
                          5: pfh1mEMWGqfMBsjXKJm7o71cR4U.roa (hash: +3H4MNFNTpOXbo6c9xASz6EPy+aohNw/Bgmf/lrX1YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:32:f8:3f:33:f3:51:5d:24:69:b2:ac:f5:49:0e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
        Validity
            Not Before: Mar  1 07:00:38 2026 GMT
            Not After : Mar  2 07:00:38 2026 GMT
        Subject: CN=c9b085c10423dddfff090c54fbe0d3a3322723b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:f5:03:ea:30:43:e9:13:c9:82:63:af:72:
                    3a:27:54:e3:84:e1:2b:a0:8e:f2:66:3e:49:c7:66:
                    84:85:33:09:0f:ad:80:10:c0:46:54:9f:8a:36:ff:
                    95:14:38:ed:6e:d9:d9:48:8a:e4:cf:23:36:49:15:
                    48:1a:d5:92:d4:47:57:b6:18:d8:09:13:3a:f7:45:
                    4f:27:db:6b:c6:d1:0c:03:63:18:53:d4:0e:4d:ec:
                    c2:18:3e:96:3e:38:55:7f:cc:e4:9c:21:48:3d:ca:
                    f2:46:fa:e0:62:38:e6:d6:d1:50:99:bf:de:16:34:
                    1e:19:4f:a4:57:b8:d7:09:76:12:4e:cc:18:3b:12:
                    9d:3d:a7:2d:62:ec:01:ee:d0:75:33:d5:66:48:de:
                    58:0b:cc:51:3a:9d:e2:a1:85:aa:57:91:50:7a:ad:
                    c9:9f:ae:f6:d5:aa:a3:a2:d1:31:03:af:84:8a:d0:
                    b6:cc:3d:3d:7a:e3:48:ea:f7:c6:d5:c4:2c:c6:1c:
                    e8:a4:47:01:90:07:10:5d:41:0e:be:d2:16:2f:d1:
                    c0:36:d2:64:f0:d8:e5:73:24:d1:71:49:ce:d1:1e:
                    e5:8d:73:62:ca:ef:67:11:2d:9e:42:bf:c5:30:04:
                    9c:d4:11:98:e2:09:7a:52:a5:3f:3f:47:4f:4d:2e:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:85:C1:04:23:DD:DF:FF:09:0C:54:FB:E0:D3:A3:32:27:23:B6
            X509v3 Authority Key Identifier:
                keyid:0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:32:04:6b:d8:8b:4b:cb:d2:8c:38:6b:3a:7d:0e:6a:14:
         7c:9a:73:c7:37:a0:e0:8c:98:96:b2:20:93:cc:15:77:fc:93:
         32:cf:02:8a:c5:0f:06:33:c3:1f:98:c7:c8:61:3c:f1:92:bf:
         90:90:a6:df:22:a5:d5:58:91:a5:7d:8d:51:9f:58:ac:5b:01:
         a2:7f:04:2a:a0:51:b1:c8:a9:82:b2:e6:6a:13:e2:6f:e2:86:
         4a:c6:78:1c:72:85:ad:f1:47:83:b0:46:ac:53:7d:68:7a:87:
         32:c9:dc:42:f6:ee:f9:a9:29:f2:f6:6c:65:93:ae:27:43:0a:
         25:53:2a:49:93:86:b5:21:66:4c:87:d2:e6:8e:29:18:35:95:
         09:ad:8b:20:b2:3f:2e:44:a0:89:76:11:95:c0:27:15:a7:24:
         67:08:cd:7e:79:87:05:59:52:a1:78:88:67:f2:91:b9:c1:7c:
         a4:cf:14:01:21:09:03:79:ff:77:c7:b0:80:d3:05:2b:fc:d3:
         05:20:96:ce:8c:c1:74:a9:c7:fa:13:55:db:57:ef:6b:9a:43:
         eb:b8:7c:4e:45:58:39:a7:69:28:09:88:7b:43:bc:29:b8:2f:
         6d:50:5d:69:e8:95:02:37:59:6d:fa:58:9f:e4:46:5e:3e:2f:
         10:bf:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:01 2026 by rpki-client