Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier:          r/N5a9X9TeVG8WJWx5kBcCloIArl7Qt7jDWLKJJcHXk=
Subject key identifier:   10:3A:89:E5:A4:1E:71:4A:C2:98:6F:2F:1A:35:F9:66:82:5A:56:A3
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer:       /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial:       019CAD22BCDFBAF8A266835A8572C629294C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number:          055F
Signing time:             Mon 02 Mar 2026 06:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:00 +0000
Files and hashes:         1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: YYPvZJQ0TKIDPceqmDm46y+11yCxbcGlfR1CVBOtQMw=)
                          2: oDA53_TqkIEki7vjmeUnbfm3c9Q.roa (hash: BpchUDcPGzZIpm4ZqgsdohzNj45y1DQKxSYrFxk8C2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:bc:df:ba:f8:a2:66:83:5a:85:72:c6:29:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Validity
            Not Before: Mar  2 06:01:00 2026 GMT
            Not After : Mar  3 06:01:00 2026 GMT
        Subject: CN=103a89e5a41e714ac2986f2f1a35f966825a56a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:11:20:02:2f:e4:52:3d:d2:08:ce:fe:d2:
                    63:08:0f:94:78:b3:c3:d1:cd:c8:30:b0:f2:de:aa:
                    53:a2:d3:20:ad:e7:47:74:08:94:44:9a:bc:35:02:
                    50:7a:13:5d:7b:7c:e2:25:1c:60:6b:2c:61:a1:ff:
                    f3:0c:31:85:e9:2c:e1:8f:c4:f7:76:6c:a1:da:c5:
                    01:22:b3:94:9e:00:1e:f5:fb:66:32:fc:09:c0:a8:
                    a8:d6:a8:b0:35:68:6b:ef:21:8f:4b:7f:36:cf:78:
                    9e:91:2f:7f:c1:2e:fc:7c:f7:30:79:e0:b0:99:e1:
                    40:87:10:e1:f5:2e:42:53:af:15:d6:57:7e:6d:e5:
                    92:c4:78:b5:0b:8f:28:7d:b6:57:77:78:98:74:d1:
                    49:95:2e:5d:99:b6:ce:c8:ce:ca:08:d1:e2:8d:45:
                    88:e9:15:4c:35:15:79:cc:39:47:91:53:97:b3:55:
                    92:a9:f1:7d:d2:a0:8b:86:75:37:c0:23:6d:18:03:
                    2c:75:65:56:a0:83:9c:5c:a4:15:18:18:81:27:0f:
                    22:f4:a7:53:53:93:cd:d9:8e:a7:2b:4f:54:c6:33:
                    6a:91:0e:2d:46:0b:8d:41:92:6a:d0:92:d5:6f:19:
                    54:d2:c2:44:8a:fb:1c:21:ab:f8:f7:e4:f6:80:5a:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:89:E5:A4:1E:71:4A:C2:98:6F:2F:1A:35:F9:66:82:5A:56:A3
            X509v3 Authority Key Identifier:
                keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:46:30:41:7a:52:c1:71:17:40:56:31:49:5c:2b:e9:91:8a:
         4d:05:6f:02:5c:aa:0f:ba:4d:35:68:7f:27:3d:21:01:84:30:
         16:c6:74:29:3c:48:ca:39:e1:2f:f5:5c:60:cd:4b:97:e4:bf:
         75:7a:7d:f0:c7:db:03:76:da:97:d6:c6:c4:28:90:19:3b:f9:
         8f:6b:e3:f1:20:39:d8:ad:28:1c:6a:e0:5e:43:70:30:e5:39:
         17:b8:c6:6c:68:8f:d1:c4:e0:2c:4a:35:ad:10:49:10:16:11:
         d8:92:23:09:0d:65:34:6e:19:15:c3:b3:d0:9b:9b:b4:24:62:
         0e:06:bb:ac:4b:bb:57:15:2d:1d:42:18:70:6a:d0:93:1a:73:
         10:b3:43:b3:d5:eb:ca:d6:fa:5c:b8:ec:21:74:43:28:19:46:
         40:ef:d6:ce:21:f1:83:d8:01:b3:d3:e0:25:40:47:a9:b9:fc:
         6c:9c:b3:f7:28:b3:df:e6:3e:16:67:4f:cd:af:b1:38:76:7a:
         7c:90:89:f8:7b:6e:2e:1d:da:84:b9:b3:ee:e2:34:e9:30:48:
         d8:0e:8d:9a:fe:d6:aa:6c:a3:f6:56:5e:f1:89:9c:d0:b8:4e:
         8b:db:45:76:b9:16:6a:8e:53:a1:5b:5b:8b:94:b0:44:ea:de:
         f1:c2:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:24 2026 by rpki-client