Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
File:                     1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json)
Hash identifier:          eBXkn1Ftptk991W8+5SJXLpXb2d+EWfWF6UYo/7cEWA=
Subject key identifier:   D6:38:F6:5A:8B:E0:89:BB:9E:85:BC:46:1C:B8:F1:EB:80:3E:02:15
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Certificate issuer:       /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial:       019CAA593B861B6953B06C0D89EEF4475D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
Manifest number:          0F62
Signing time:             Sun 01 Mar 2026 17:01:40 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:40 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:40 +0000
Files and hashes:         1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: zinGQhnG7dw1nZoV78Std2d8UXIo5d9QGMRs56jpeBc=)
                          2: CdSvxh-qsouaR9D0nMWLFmlP_7c.roa (hash: w2S9yeJgNzOTOHLkky2uOaSMYllBxEErLoohZYBuiDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:3b:86:1b:69:53:b0:6c:0d:89:ee:f4:47:5d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
        Validity
            Not Before: Mar  1 17:01:40 2026 GMT
            Not After : Mar  2 17:01:40 2026 GMT
        Subject: CN=d638f65a8be089bb9e85bc461cb8f1eb803e0215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:f2:1a:7a:d6:4f:14:25:fd:2a:2b:ae:99:
                    d5:8d:68:db:2c:37:e9:5a:63:f1:a5:e5:7d:b4:e8:
                    5f:8b:ff:06:a4:40:24:a8:e5:bf:fa:74:24:0c:61:
                    63:3c:0d:67:93:15:f6:39:5b:81:25:33:f9:6a:29:
                    47:db:68:e5:53:f4:de:50:76:c1:ad:07:2f:8d:ac:
                    09:9f:4c:3f:dd:e4:b5:bf:5b:29:d7:f8:39:44:9c:
                    b5:95:f6:2b:67:51:11:64:ed:ff:f4:d6:5d:b7:67:
                    08:2b:26:f0:1b:7f:ff:57:ec:45:e0:74:b5:7d:4e:
                    76:13:50:8c:8e:8a:e6:80:75:75:8e:31:ae:59:34:
                    b1:9a:89:0a:cb:02:68:51:ce:f4:73:c4:f6:56:f6:
                    1f:be:c7:2b:9b:0b:ce:99:07:16:b4:97:a9:41:59:
                    1a:58:8c:51:c4:e6:3a:22:9a:f5:87:f2:8d:6c:b9:
                    9b:40:d3:fd:e9:0f:47:5a:d6:01:88:a2:29:0c:76:
                    ed:7d:72:31:b8:3b:76:d4:0d:5b:56:de:af:79:ab:
                    c7:8d:12:78:69:3b:a1:97:b2:ab:71:7f:40:ca:4c:
                    cb:22:0d:e1:c3:53:2c:4a:c5:72:1e:0c:d5:f2:2a:
                    d5:0f:25:71:f1:f3:39:69:94:dc:93:ac:51:22:8e:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:F6:5A:8B:E0:89:BB:9E:85:BC:46:1C:B8:F1:EB:80:3E:02:15
            X509v3 Authority Key Identifier:
                keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:44:97:a3:1f:05:96:42:cd:cc:2b:58:dd:27:71:5c:f1:
         e6:55:0f:3b:f4:93:5b:9b:15:a7:33:1a:fa:6d:24:e3:0a:62:
         5a:56:6c:87:bf:a2:1e:25:a9:f0:26:2c:63:26:cd:f0:b8:9d:
         40:01:62:51:f2:89:1c:d8:ee:2a:c9:51:dc:a4:b1:06:bc:ac:
         e1:51:3e:a0:77:b2:6c:aa:74:f6:54:54:5f:f0:4c:1e:fe:5d:
         42:75:6b:d1:73:96:89:8c:29:4a:1a:5f:2e:41:ab:a0:4d:4f:
         ef:09:ad:9d:d2:fd:c0:58:10:39:d5:24:91:f2:39:27:a1:53:
         34:45:72:ec:df:da:62:63:ed:35:26:ea:49:d4:e0:de:8a:64:
         40:97:1d:4b:fd:cb:a6:2d:ae:26:db:5c:45:99:d3:ff:d3:fc:
         31:3a:1a:1f:62:66:e5:67:f8:32:8d:8b:6d:36:fa:99:11:b0:
         87:45:a2:bc:6b:2f:e3:8e:9f:1f:1f:af:30:b3:b8:4e:83:af:
         72:d8:8d:49:4f:78:f3:1c:ca:6e:b9:ff:1f:fb:ef:cc:ca:0e:
         91:a1:7c:1d:b2:6b:bd:a9:98:3a:65:c6:40:dc:df:f1:78:bb:
         f2:f0:d6:65:60:9a:98:42:a2:1a:77:d9:af:3f:2d:b3:db:d5:
         96:2d:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:01 2026 by rpki-client