Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          TRtAMHjB+dnX285OKSR4pf5unRp0rRC2rfccIyyi2u8=
Subject key identifier:   F9:00:BB:71:5A:54:37:1C:AF:70:19:1C:48:9A:A5:DE:ED:D9:01:36
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       019CA97CD8403EBC22B63285A0B189DEB377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          0B6A
Signing time:             Sun 01 Mar 2026 13:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:57 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: nJy9Sh6HZANcJk26oRqvZdLNtuzZFr59HORa9Mww9J0=)
                          2: E5D8fKpIoYmoCBAx0hdWVglrEi4.roa (hash: pGzsUX/AZG/SjNx7mj675+/yamBKkvpo0vVvYUiCPeo=)
                          3: JAzjeJHR2U7YuIIVZrHMUJ67_CY.roa (hash: diV/D1rDBps/tMrFtDTTIATooDbsSBJghGmPrY6r1ao=)
                          4: Jn01qxsLWCeYXj7aVo4H-m10IZ0.roa (hash: +IhEtdYgbQ3RqLJ1+1wXo5Yct1f7HJ/H7hJgtsB8R10=)
                          5: TuF1yyTgBJhW6oC5dwAW2GS084g.roa (hash: TcfD3AosMJkeleoYgBuUrwlWZpCWe+Rbnmh9egzYaWg=)
                          6: _PXhlZCjQvwPQ3-H5--9ECU2Un8.roa (hash: +OxXVp7CCvXwGvmdylv8hYCUGBTiCJtYUdC1nBHjCGU=)
                          7: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:d8:40:3e:bc:22:b6:32:85:a0:b1:89:de:b3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: Mar  1 13:00:57 2026 GMT
            Not After : Mar  2 13:00:57 2026 GMT
        Subject: CN=f900bb715a54371caf70191c489aa5deedd90136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:c7:b1:d8:23:cc:0d:76:bc:69:ec:35:73:
                    9d:65:52:3b:5d:ab:52:81:f9:9d:59:56:1f:80:56:
                    ad:48:50:0a:4c:b2:7b:42:ec:ae:4a:a8:be:ed:0e:
                    80:b7:4e:6b:67:ba:46:1e:9f:74:31:c1:5e:af:dc:
                    1c:99:65:1a:da:e8:af:f4:f4:ec:18:9e:9c:f4:cc:
                    a9:bc:9a:60:ea:a5:d8:27:a2:9a:6b:9f:3f:fd:41:
                    d4:c6:35:03:db:19:d4:04:99:3f:b3:3a:ca:02:8e:
                    64:73:2c:7b:5a:8f:40:64:f8:81:2d:3d:72:b3:cb:
                    8d:f8:b0:18:19:57:06:6d:7d:80:a1:cd:cc:c0:e1:
                    b1:1b:cc:56:72:ec:62:05:f3:42:de:8e:b1:ff:d5:
                    29:67:62:43:a3:b4:8f:15:b8:36:b3:ab:76:75:c8:
                    86:67:69:a8:de:df:2b:9e:67:10:93:81:cb:d1:ea:
                    1d:5d:ba:33:6a:be:af:83:fd:48:d5:5a:4a:06:15:
                    d6:ae:6a:7b:b2:28:87:d2:7c:bd:cd:70:aa:ec:0b:
                    45:fb:80:a0:0b:ff:69:bb:13:aa:ac:75:13:a4:92:
                    65:62:61:7f:02:1f:8d:66:97:c0:f9:23:40:d5:fe:
                    ca:ff:1e:ff:6e:c8:d3:a3:0f:b6:69:c7:69:fb:ed:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:BB:71:5A:54:37:1C:AF:70:19:1C:48:9A:A5:DE:ED:D9:01:36
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:84:b4:dc:77:fd:02:c2:e5:9b:be:90:a5:d4:64:62:57:9b:
         78:ce:d3:c9:09:bc:b0:9c:9a:23:68:93:3c:7e:b0:eb:2d:e1:
         93:81:bb:9f:7e:3a:02:7c:8c:ae:d5:a5:80:2b:ec:5b:4e:74:
         fc:fd:cf:ad:b5:04:88:bb:de:e8:13:cd:fb:8a:d6:16:01:d4:
         53:75:20:33:52:f5:f7:b6:39:b9:5d:8e:a5:57:ea:06:cb:d4:
         30:52:01:42:bb:b5:63:06:4d:46:9a:fd:a1:bd:d2:e5:a6:77:
         37:11:df:e5:5c:6a:ab:ab:a6:77:70:d3:1a:5a:1a:b8:1d:36:
         4b:f3:80:a6:e5:ff:f5:f2:c8:c5:0a:41:a3:0c:af:f2:e1:07:
         88:c8:e8:f0:44:b1:b9:da:62:e0:23:05:e5:4a:1c:9f:a7:07:
         d1:7e:b8:77:9a:0d:85:b4:6a:aa:07:3d:7a:f1:d6:9e:95:91:
         c3:2a:39:b4:2a:b1:5e:07:02:19:61:42:9d:7b:c2:ab:de:88:
         96:70:8c:b8:51:0d:08:f5:ee:c5:a1:6f:a6:8e:83:a5:df:d5:
         2c:02:00:1a:21:96:f9:0b:53:8c:fb:75:26:6d:98:02:96:a5:
         3c:61:46:91:56:bb:8b:77:40:5d:5b:31:e6:ae:f9:30:fe:51:
         be:1b:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:51 2026 by rpki-client