Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File:                     tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier:          Hlxw5k1CkNEUdGffDQhvK0w4qI+YXLFOlPEoFPZNaOE=
Subject key identifier:   35:1F:7F:C3:9C:4B:6F:27:A6:5A:D9:D9:E0:02:3D:E3:D6:37:21:0D
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       019CACB4CE3A2B11796C7085640EE0DD10E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number:          103F
Signing time:             Mon 02 Mar 2026 04:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:56 +0000
Files and hashes:         1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
                          2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
                          3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
                          4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
                          5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
                          6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=)
                          7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: a53xQZIo8aztrTvB72USWvIuOpuD2IGyfOd+gMWEN48=)
                          8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
                          9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
                          10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:ce:3a:2b:11:79:6c:70:85:64:0e:e0:dd:10:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Mar  2 04:00:56 2026 GMT
            Not After : Mar  3 04:00:56 2026 GMT
        Subject: CN=351f7fc39c4b6f27a65ad9d9e0023de3d637210d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:d5:62:9a:3a:68:ff:40:4e:5b:a9:ea:7f:
                    07:2b:19:70:b4:a9:9c:3b:6a:c9:4f:17:fe:51:6c:
                    ec:e8:48:de:2b:3c:4d:b2:a3:83:6d:11:86:d5:6c:
                    3f:a7:76:86:9d:f1:c4:6f:21:5c:6d:9e:6d:d1:45:
                    83:fc:1c:ff:a9:34:f6:78:40:ea:0e:c3:2c:32:08:
                    9f:4f:18:73:a7:3e:c1:a4:e3:98:60:12:98:56:84:
                    5b:ab:b8:40:0f:e0:25:41:63:d0:b9:ea:36:c5:87:
                    8d:f7:24:81:09:4d:df:96:d5:22:c7:25:bc:2a:6e:
                    10:43:db:bb:9d:a5:ae:01:3a:4c:c7:3f:41:f0:4c:
                    bd:96:2a:6e:a1:ec:da:ac:56:09:33:25:44:94:53:
                    27:ab:6c:59:6b:20:03:77:ea:03:e9:5c:7e:5e:97:
                    ed:54:10:70:7a:7e:a6:ed:a5:36:ce:82:eb:d5:88:
                    6e:76:93:69:46:be:d3:f7:46:32:bc:e1:d0:bf:69:
                    92:7c:7d:a9:d9:20:16:64:39:06:62:23:19:ef:78:
                    4b:72:cc:9c:3c:21:b3:c3:ac:de:41:b8:e5:71:b3:
                    0b:51:7e:6e:c1:12:c0:3c:4c:33:76:53:70:7e:1b:
                    80:42:b1:e9:da:88:18:e2:86:6b:a1:a4:fe:19:cd:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1F:7F:C3:9C:4B:6F:27:A6:5A:D9:D9:E0:02:3D:E3:D6:37:21:0D
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c3:72:27:03:e2:3d:06:c4:1b:26:4c:b0:4c:fd:33:f1:3c:
         37:b1:14:17:33:d4:ad:19:a4:66:5d:44:7e:2a:5a:44:ff:3d:
         96:1e:04:62:21:5c:88:1a:cf:ba:d5:f2:cf:f8:e4:22:92:5c:
         9e:00:22:2e:f1:50:40:ef:6a:f0:96:f9:77:f1:5a:0d:55:bb:
         46:30:ff:a2:1d:0d:31:54:52:80:f9:4f:c8:dc:2c:67:40:0f:
         e8:39:2b:36:fe:4a:26:36:db:b1:0c:cc:0a:e8:4c:fe:d9:a9:
         bb:2e:dd:a8:64:33:e6:14:0a:b5:67:df:89:b0:6d:d1:f1:6e:
         03:6c:79:be:2f:ae:3d:db:26:b9:64:e5:ea:b8:78:ae:3b:a1:
         42:71:f7:e0:f4:7c:ce:64:4a:47:3f:d1:3d:e8:0c:e5:a8:80:
         60:94:3a:04:30:b3:3b:cb:ef:63:6e:b8:ba:6b:7f:51:96:fe:
         14:5d:6e:9f:80:39:42:8d:99:2c:98:fb:d8:c1:ad:7f:7f:33:
         50:49:70:67:69:5c:39:ad:4c:13:6c:2a:ce:09:10:84:de:26:
         ce:26:50:86:ad:dd:f6:9c:ed:bc:83:02:ca:eb:b2:51:0c:1c:
         10:bc:52:4e:9f:e3:75:fb:17:1c:35:39:13:d2:83:40:76:ca:
         22:c6:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:17 2026 by rpki-client