Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          98nN9gR1X28WTCrgmydVhHpZDa9ubLG/OtKu0z3EXss=
Subject key identifier:   44:E8:FE:65:5D:45:3C:88:03:82:49:7F:E6:31:42:B0:3A:E0:D5:43
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       019CAA21757B46D1D7CEBEC8A75E67F0EBA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          0572
Signing time:             Sun 01 Mar 2026 16:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:45 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: 5OoXWeuD504WX1Br4cp2A8b+aL4I8kSQrjz+TjDLITY=)
                          3: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          4: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          5: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          6: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:75:7b:46:d1:d7:ce:be:c8:a7:5e:67:f0:eb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Mar  1 16:00:45 2026 GMT
            Not After : Mar  2 16:00:45 2026 GMT
        Subject: CN=44e8fe655d453c880382497fe63142b03ae0d543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:8c:b8:6c:54:8a:da:df:da:4a:14:36:8e:
                    1a:df:02:fb:06:44:65:df:59:0f:c0:16:7f:ac:51:
                    6e:d5:83:c7:f0:60:8a:a8:71:bf:21:bb:9d:3f:17:
                    80:6f:e2:bf:c4:ef:4e:1f:c4:b0:65:88:7b:1d:f4:
                    4d:ff:1e:94:fa:e7:25:91:a3:2c:d3:01:e9:50:f1:
                    87:e4:24:d5:47:d8:83:89:99:af:98:94:16:6a:de:
                    32:80:c3:68:78:5c:d1:db:17:0b:e1:62:4d:16:27:
                    f7:08:12:4b:2f:eb:75:dd:7f:ae:4e:9f:ef:cc:16:
                    8f:bd:eb:95:68:ea:f1:6c:12:e8:d8:3f:49:c8:82:
                    ea:4b:fc:9a:b3:a1:58:1d:95:22:7f:49:79:2e:a6:
                    86:03:ed:18:c2:8f:5e:ec:e4:a0:2c:37:ac:1c:e3:
                    bb:56:60:8e:8d:51:7d:57:7b:2b:ba:7c:df:a0:61:
                    6d:55:40:7b:f6:08:1c:4a:29:b6:08:c0:e3:40:7e:
                    61:a0:d8:03:ef:e4:8a:86:62:46:be:6d:79:c5:ff:
                    60:17:ea:c9:62:48:c5:37:0d:42:09:d3:9a:24:c2:
                    3c:8d:8d:05:fd:ff:44:aa:2f:0f:89:e9:d6:4c:64:
                    f5:7f:b4:15:7b:ea:ac:f3:28:12:f0:fd:81:4e:ee:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E8:FE:65:5D:45:3C:88:03:82:49:7F:E6:31:42:B0:3A:E0:D5:43
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:08:2a:79:2a:c8:e7:f6:80:3d:f0:6f:25:2e:2f:1d:be:
         53:9a:e3:a6:c9:18:18:ad:e5:90:42:e2:ad:c3:1b:92:9d:6e:
         3e:57:f7:dd:f1:48:29:4e:61:ed:18:99:65:df:54:0e:a2:0b:
         3b:9f:ae:d1:c3:97:34:60:40:fb:22:71:01:c0:34:82:b2:84:
         35:52:77:59:66:b3:01:d7:f2:8e:71:e8:b9:b7:bd:17:b3:53:
         09:4d:ad:69:b6:dd:36:49:e7:bc:25:e4:e4:26:3d:b3:29:37:
         80:92:c8:ac:6f:cc:d0:80:62:86:72:ed:5e:da:1d:e5:59:37:
         4e:5a:91:75:06:01:87:3c:40:94:b0:e8:11:72:34:2e:b8:d7:
         c4:31:89:8b:e2:ea:98:2b:fa:72:23:28:fb:e5:f7:96:9d:c9:
         2b:6a:66:ba:41:41:79:75:a4:4f:22:1a:69:41:cd:43:6f:70:
         78:b7:f4:e9:53:62:8d:59:c0:78:ff:9f:bd:c3:28:f0:8c:15:
         0d:61:19:d6:5a:d4:db:69:49:97:ba:d1:f6:74:e9:0a:7c:9a:
         58:27:06:5b:c0:29:b2:19:43:49:4d:ac:ef:1c:79:51:cd:f4:
         e2:80:a6:40:76:f7:85:3e:ae:09:1f:b8:8a:21:33:c7:a6:84:
         84:1e:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:13 2026 by rpki-client