Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File:                     TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier:          3xvc4Jd+hHsTfUkM9oSahSR1DLbvo13EDC1DWjSpcJI=
Subject key identifier:   C3:C8:7C:9B:77:62:03:C9:55:F1:EF:9C:8E:72:7A:26:31:0C:E6:D0
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer:       /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial:       019CADFEB0C4C74BEBFCA8366E8B85A064EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number:          0F0B
Signing time:             Mon 02 Mar 2026 10:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 10:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 10:01:15 +0000
Files and hashes:         1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
                          2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
                          3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
                          4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: qF6kXXjzVUkMGy66nuZS2I3nrKrzmRGqKRMXZVkZw+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:b0:c4:c7:4b:eb:fc:a8:36:6e:8b:85:a0:64:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
        Validity
            Not Before: Mar  2 10:01:15 2026 GMT
            Not After : Mar  3 10:01:15 2026 GMT
        Subject: CN=c3c87c9b776203c955f1ef9c8e727a26310ce6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:cd:06:59:6b:51:66:31:d6:a4:10:90:ef:
                    41:c2:f4:f0:11:b6:fd:c5:5e:9e:47:2f:b3:f2:a6:
                    b6:c3:2a:04:26:4b:49:fb:e1:6f:9b:c8:8b:80:07:
                    a1:cc:15:c3:7f:b6:c5:f7:a8:c4:5b:db:68:b9:5f:
                    32:89:27:3b:03:aa:f6:c2:a8:2d:64:5f:b2:37:0a:
                    82:8c:94:11:b6:d4:8a:0c:cd:a0:72:41:6f:07:5e:
                    e5:82:b8:24:40:1c:67:78:9f:6e:17:3d:6f:75:cf:
                    61:c4:df:ce:d6:b6:df:ef:90:af:5a:83:47:15:f1:
                    12:6b:b1:e2:5e:26:3d:aa:3a:63:37:e9:58:2b:dc:
                    98:2f:19:61:64:95:82:56:d5:83:66:f4:62:97:30:
                    11:f4:1b:ac:56:cb:83:b5:6d:cd:7f:bc:f5:98:20:
                    5b:78:ec:c5:5a:18:bf:39:11:51:85:90:ba:ef:57:
                    61:c1:44:74:f4:4e:94:49:3c:ff:c4:81:46:92:33:
                    e8:b1:e9:c5:7b:37:cb:73:38:7a:36:d2:d6:22:f1:
                    58:b2:5a:f2:e2:88:5a:72:91:8f:fb:1d:f1:22:f0:
                    fb:f3:f7:38:63:0d:dd:8a:55:c7:d1:a1:c4:cd:b1:
                    c8:a4:a6:2b:7d:b1:75:32:06:c5:74:52:9e:26:d3:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:7C:9B:77:62:03:C9:55:F1:EF:9C:8E:72:7A:26:31:0C:E6:D0
            X509v3 Authority Key Identifier:
                keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:24:77:08:c2:00:04:70:0b:33:f1:cb:ae:1f:86:cf:af:aa:
         53:ab:82:f5:85:89:3f:a9:cf:94:77:ee:94:34:2c:56:34:64:
         1f:4b:37:fc:a7:4d:5c:c9:c6:27:d5:de:20:9d:b7:e2:55:c9:
         6d:0d:25:d2:c2:bb:0f:a3:1f:b8:86:f3:96:f7:d8:6c:a9:c6:
         e7:31:8f:c7:78:ac:a4:0a:a3:01:bd:07:b1:f6:37:d0:cd:fb:
         a5:15:05:76:6c:01:48:34:01:07:b4:03:ff:5f:e2:f5:93:4a:
         7f:07:f4:72:5a:0c:c6:36:d2:13:b6:28:1a:da:b2:af:d8:3e:
         fd:87:66:df:30:5f:7e:72:da:ed:a1:e8:fa:dc:a5:b7:51:42:
         fb:44:a0:c8:ad:86:3f:a9:a7:d7:00:f3:29:06:bb:ca:6e:c2:
         a1:54:d1:05:af:4d:2d:54:88:a6:e1:25:0d:9c:59:01:80:6a:
         26:6b:2b:ac:d0:e5:a5:7c:71:91:18:c0:8f:d5:82:e2:fd:bf:
         93:20:e6:2c:bf:e2:df:99:74:52:b1:8d:a3:b2:e2:bb:b2:56:
         5d:9f:51:26:b3:0c:b7:04:6c:85:24:e9:3c:ab:1c:bb:26:4b:
         0f:aa:ac:b5:4a:40:83:97:b1:1c:c0:5a:60:c6:45:02:4d:f4:
         b0:ad:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:37 2026 by rpki-client