Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          BEWg7hhCs1A4qzPIaSu4vY2jF32Iw+jQb9Fi3roYt+A=
Subject key identifier:   B6:A4:E7:78:22:C4:5F:65:F3:34:C9:69:18:91:29:C6:53:E1:95:E3
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       019CAE35F1FD8138E8FD303711C0413A9B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          0A68
Signing time:             Mon 02 Mar 2026 11:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:36 +0000
Files and hashes:         1: FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa (hash: qrm8Hvv6ZY4XD/rO0TyVVz8/PmIjDcXusRWAzudBFPw=)
                          2: Q-_VAhr_3KM6k7h05hr8GonF39M.roa (hash: sBlSBxemwWOVZDZUFiQlhe/vEkuAulILbiLVu6l2Y+s=)
                          3: _gMstHGZPe_7SzCes23Xk4_prxs.roa (hash: UfaVFa/Va8RG4LCVknZ/sC6sc8zENIigGZfQiIzmNA4=)
                          4: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: +ZEli/VUqZV7xShJpELCosQLmVo71iOpzC4J/C78Gy8=)
                          5: swQMeQBE5wb78ss3tCTd5K3tnlI.roa (hash: uIGxjGabnvBWdl9aXtwznXWVFMHKBrwT9BZDyH0VO8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:f1:fd:81:38:e8:fd:30:37:11:c0:41:3a:9b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Mar  2 11:01:36 2026 GMT
            Not After : Mar  3 11:01:36 2026 GMT
        Subject: CN=b6a4e77822c45f65f334c969189129c653e195e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:ae:26:88:a7:be:48:49:a0:b3:73:b7:9e:
                    32:ed:47:be:ac:6e:d0:4f:c9:d7:26:72:94:9a:e9:
                    15:6e:81:34:1e:1f:10:26:53:74:48:74:4e:b9:92:
                    83:da:71:b8:2c:9a:93:d2:ea:aa:73:1b:a4:c0:10:
                    38:42:b7:e5:88:22:de:92:af:21:50:8e:48:37:ce:
                    10:05:6e:7e:d2:50:0f:94:44:f7:1f:28:35:e8:d3:
                    4c:b4:08:cc:11:b7:66:9e:8f:36:b1:98:58:7f:b2:
                    60:b5:f2:29:2f:03:dc:e7:ca:a6:47:95:fd:ed:32:
                    8a:47:12:83:e3:67:d9:61:05:1b:0f:e5:2e:c9:d7:
                    e3:8d:b9:c0:30:37:75:40:e9:0d:0f:2e:1d:c8:06:
                    d1:59:6f:eb:af:2c:f8:5c:24:cd:7c:d4:45:82:e7:
                    14:e4:18:0a:b7:32:4a:05:00:14:7f:82:72:ca:cc:
                    7f:fb:9a:fe:7f:c9:b3:93:97:5f:ca:19:93:9c:71:
                    df:fb:3c:68:45:4e:32:0e:00:04:bf:f2:01:d1:69:
                    ba:a2:e9:08:22:ce:80:4f:a4:5e:aa:45:3e:b6:05:
                    c2:f8:4e:76:74:97:61:4e:7d:2b:f9:e8:fd:1f:55:
                    46:90:40:c3:a0:7b:e9:10:4e:36:b0:00:b3:e7:c2:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A4:E7:78:22:C4:5F:65:F3:34:C9:69:18:91:29:C6:53:E1:95:E3
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:46:3b:b9:a5:7f:16:ce:b4:74:0f:6a:05:71:79:81:de:
         e1:02:f4:68:c6:2c:e7:0d:68:b7:6c:06:19:85:54:16:f3:0f:
         4e:b8:51:9c:93:e0:68:b3:69:f9:9f:d3:bb:6f:61:a0:45:2c:
         77:21:45:70:28:b0:56:78:f2:20:19:fb:e5:ae:f7:14:95:0f:
         c4:22:2e:a1:29:02:39:5d:70:67:ea:47:21:49:f7:53:d2:01:
         aa:8e:84:04:1b:ac:f5:98:a6:3a:1d:56:c7:ae:e4:76:d1:d5:
         3b:2b:91:9c:1c:78:82:55:e5:90:25:04:2e:12:be:da:a3:7c:
         92:6d:15:7d:dd:1c:eb:5f:d1:9d:f3:e0:5c:d8:8c:97:be:a2:
         43:4f:df:b8:d2:c2:08:8c:bd:62:70:3c:71:8a:b1:b4:22:4f:
         54:d7:63:47:5c:45:52:3b:45:bb:ad:9f:e3:91:65:c5:7c:b2:
         01:75:ba:20:c7:63:02:6e:10:a0:56:e1:bd:b1:6c:cd:27:45:
         ec:ba:bc:78:af:72:05:7a:9f:10:55:c3:bf:d0:38:33:86:80:
         a2:9c:3a:e1:25:f1:32:68:01:d6:45:d3:79:99:ee:ea:fe:96:
         f7:3a:ab:07:de:92:43:96:53:09:c9:8b:c3:f5:35:2b:85:68:
         15:1d:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:14 2026 by rpki-client