Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
File:                     loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json)
Hash identifier:          /VqbzfrMwlz0jPwAYNl+q1F/FJc9+0bqKssBLICCgng=
Subject key identifier:   5B:65:75:E3:2E:6B:9F:EC:16:F0:D8:2E:4B:B8:4E:8D:65:5E:F7:39
Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
Certificate issuer:       /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Certificate serial:       019CAC102C2109E26C8A03E35A61B8094B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
Manifest number:          02E8
Signing time:             Mon 02 Mar 2026 01:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:06 +0000
Files and hashes:         1: 62xv2lQHxNM_l_YrJtcwOfnMuYw.roa (hash: gV7lklXQn/5hqUDHVsvJYf+Kfk/HDRP/U+DCEe4jlA0=)
                          2: PFGIVa0BOcrYn7LDn1lpTGcFlyg.roa (hash: KajiJYew3aM31pMlayFlO34jp69DaxrhYFWYOe/gl/8=)
                          3: i9dvXXtl86NkntskYAQaMtaTQus.roa (hash: jn3xesrUXS6xuu+2iCltP+AJecvksZHI4qYuAZ+46Rw=)
                          4: kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa (hash: lUmva7T7suBnjlbuPKGwGSN8q5aV/viwDRe/Z9TY9sA=)
                          5: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: GG2sShfcLGA3ljn8/yprIZv0JCyZToEtjuMql8qzPUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:2c:21:09:e2:6c:8a:03:e3:5a:61:b8:09:4b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
        Validity
            Not Before: Mar  2 01:01:06 2026 GMT
            Not After : Mar  3 01:01:06 2026 GMT
        Subject: CN=5b6575e32e6b9fec16f0d82e4bb84e8d655ef739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:a8:f9:44:99:28:32:77:55:3a:9f:6d:ff:
                    45:c7:89:b6:c8:f1:d4:16:d6:3e:37:86:81:25:44:
                    b7:2d:89:a1:b9:32:bc:06:2c:b1:0f:4f:b8:00:25:
                    2f:5e:15:e6:49:06:5f:fc:bf:01:7a:ce:b7:2e:9f:
                    27:40:7b:7e:e8:47:4e:fd:70:98:a8:b2:90:8d:41:
                    c0:51:65:7e:a3:5e:de:d2:d2:6e:ad:3a:e2:30:06:
                    e6:47:2e:5d:ce:96:6e:c7:f1:8f:0f:60:ab:70:6d:
                    81:78:8f:ef:7c:d3:ed:a2:96:1c:9e:f9:bf:1a:26:
                    1e:94:7c:b5:95:df:94:37:65:9f:90:00:4f:45:07:
                    0b:7f:b2:cd:04:d0:fb:8a:7a:10:ab:2c:dd:ba:dc:
                    95:64:e3:0b:8b:06:cb:ab:3b:6b:2b:92:8b:69:ed:
                    64:75:2b:06:b8:b8:10:f6:6f:ac:47:67:70:16:cb:
                    13:1b:05:f5:f4:a4:39:3f:60:b2:63:51:ea:a4:89:
                    44:be:b8:26:19:49:52:04:6f:cc:37:bf:f7:a6:e2:
                    0c:ef:f2:91:3b:66:ec:e7:5f:af:a3:38:33:2a:3b:
                    73:ad:b8:af:20:d0:c2:02:0c:0e:e2:22:7c:d3:e3:
                    d3:2b:32:9c:15:13:c9:c4:b5:dc:08:ff:ba:32:bb:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:75:E3:2E:6B:9F:EC:16:F0:D8:2E:4B:B8:4E:8D:65:5E:F7:39
            X509v3 Authority Key Identifier:
                keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ab:65:bc:77:7b:9a:67:c4:08:36:7d:e8:45:52:bd:b7:bb:
         1d:2f:b0:da:f7:ed:37:8a:d4:cf:cd:2e:75:4d:85:9b:a5:b5:
         f2:79:db:e8:58:2b:3c:29:5f:72:88:ab:f8:24:cf:cd:25:f9:
         5e:5d:0a:d9:43:07:be:7c:14:2a:db:7a:92:a9:29:bd:af:f0:
         77:ea:01:9e:af:e7:af:53:d0:49:c7:82:bf:20:3f:e3:0e:54:
         79:26:08:e1:c7:42:79:c6:f8:b5:d0:da:87:db:33:f3:7a:b8:
         af:5f:2f:bc:63:2a:2d:fe:1b:36:1c:68:71:77:98:68:c0:48:
         61:dc:f1:f4:15:d7:9c:3b:c2:ce:c9:77:cd:a4:b7:7d:20:0e:
         c4:65:b3:a9:76:30:89:9f:40:fd:8c:63:d0:07:b8:9c:66:bf:
         b8:fc:4a:88:42:8c:26:38:4e:ce:d2:6c:79:0e:60:32:31:36:
         22:19:36:a9:92:04:01:a4:63:ae:c6:66:ee:82:48:92:11:e8:
         fc:49:d6:71:7d:98:e1:70:76:6a:e5:53:36:32:d6:f9:17:bd:
         cb:f9:44:cc:45:57:a6:2d:8b:25:87:1c:36:61:de:f7:98:4f:
         96:15:d5:cf:61:1c:8f:5e:07:34:36:f4:9e:7a:5e:95:e8:7d:
         d3:09:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:14 2026 by rpki-client