Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
File:                     T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json)
Hash identifier:          /LAsIUz+hnYBzU8hLx+CuwJ4d5CAdXclNT9MjUwe/Ts=
Subject key identifier:   8D:00:84:30:B7:E3:CA:22:05:4D:B6:AF:93:FC:DA:FC:0D:E6:B7:91
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Certificate issuer:       /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial:       019CA97CB73067256287255BF78A00AAAC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
Manifest number:          65
Signing time:             Sun 01 Mar 2026 13:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:48 +0000
Files and hashes:         1: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=)
                          2: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: 7JMtEN5eBGVl7YQrT5PDMXvunzT7XHrLjBY8ZfosnDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:b7:30:67:25:62:87:25:5b:f7:8a:00:aa:ac:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
        Validity
            Not Before: Mar  1 13:00:48 2026 GMT
            Not After : Mar  2 13:00:48 2026 GMT
        Subject: CN=8d008430b7e3ca22054db6af93fcdafc0de6b791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:4b:32:16:55:79:70:22:4c:bd:32:78:02:
                    71:bd:07:cb:cc:2d:d3:63:05:e9:c1:33:15:d8:60:
                    50:0e:63:bd:1c:cb:22:78:4e:94:a7:17:cc:b3:cb:
                    cb:e9:a9:f2:a4:53:86:fa:db:31:fa:3b:75:a0:b7:
                    67:c1:b9:b1:ac:59:a5:8f:db:00:93:44:ee:d9:83:
                    4b:df:8a:a4:48:69:18:df:e5:3f:bc:9c:de:8d:c1:
                    3e:8b:fd:0a:55:47:73:30:f4:2a:b4:3f:dc:8e:eb:
                    17:33:0d:26:bc:56:49:42:a2:ea:02:97:87:39:6c:
                    a2:5c:5e:ba:d8:37:e4:0b:2b:a1:59:bc:2b:cf:cb:
                    03:d6:fc:8b:e8:29:53:2d:48:e0:bc:f7:81:ae:0f:
                    93:80:0d:f2:9d:d2:37:88:3b:9e:f8:83:04:93:67:
                    13:e4:f1:a8:33:56:e0:a2:36:65:43:4f:05:74:3c:
                    16:21:12:95:18:9b:bf:20:ef:15:28:0a:e5:8c:96:
                    96:a9:24:ab:50:cf:9c:a8:44:e1:e9:cd:33:11:8f:
                    c3:00:2e:e4:08:a0:b9:8d:a0:7c:07:87:35:ac:ce:
                    30:28:49:18:93:53:10:46:35:df:ad:5f:9b:7e:82:
                    1d:3d:28:0c:37:fb:59:be:ba:2e:d3:cf:c7:e7:6e:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:00:84:30:B7:E3:CA:22:05:4D:B6:AF:93:FC:DA:FC:0D:E6:B7:91
            X509v3 Authority Key Identifier:
                keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:02:52:8e:36:04:72:e4:a2:84:61:7f:3e:7e:94:8a:8b:
         1b:79:7e:ac:cf:ca:6a:eb:a8:42:ea:fc:46:ba:79:51:7f:fd:
         46:2e:a4:c4:3f:48:33:09:81:8a:ed:40:c0:6c:39:32:31:39:
         d3:58:70:30:3e:b8:96:bb:8d:31:ac:7e:40:8c:ae:02:30:1a:
         17:0f:20:8f:12:5c:fa:b0:b9:ea:ba:c4:a4:d1:14:36:97:e4:
         48:db:39:52:aa:0b:d0:57:e8:6b:b9:af:6a:b3:4f:a4:44:df:
         ee:48:66:44:08:c4:de:61:20:90:73:37:ec:fb:e5:c9:04:2d:
         f5:be:e1:97:9d:4b:e4:05:ce:a5:7d:d0:73:bf:c8:ae:79:44:
         9e:94:3d:b0:a5:a1:a7:35:50:02:56:f1:06:17:7a:9f:d5:e9:
         26:65:16:8c:65:a1:92:62:85:f0:d7:d7:02:5a:7e:bb:12:8d:
         4b:8a:27:45:65:30:b6:77:58:53:8f:b5:96:99:24:ec:15:6f:
         15:50:a2:19:63:d7:f8:2e:2e:35:37:11:3a:a8:70:a5:f3:ce:
         ad:ee:ac:bb:4b:4e:f6:7b:26:80:e0:bf:13:14:48:46:a7:fb:
         06:8e:fa:17:d0:aa:0b:42:8a:48:ad:e8:39:70:ca:32:3e:28:
         79:6f:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:18 2026 by rpki-client