Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File:                     danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier:          AtM7wvkcBn3yzhkYXqFSkeIbIyeT/kghRu8edqDkpyQ=
Subject key identifier:   0F:B8:AE:B2:38:DB:E2:94:A1:62:53:C5:68:51:99:88:86:12:AF:37
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer:       /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial:       019CAB6BC01E10B741CD82A0AB88E4FBA0CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number:          0517
Signing time:             Sun 01 Mar 2026 22:01:31 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:31 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:31 +0000
Files and hashes:         1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: PIx+XRC7iHxlTmH8MGl4KpVkvvWc8+63t0G7++bqjtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c0:1e:10:b7:41:cd:82:a0:ab:88:e4:fb:a0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
        Validity
            Not Before: Mar  1 22:01:31 2026 GMT
            Not After : Mar  2 22:01:31 2026 GMT
        Subject: CN=0fb8aeb238dbe294a16253c5685199888612af37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:80:b0:c0:17:3f:80:13:ec:fa:bc:d0:b1:
                    d6:7e:8f:06:97:0d:7d:6d:00:e3:f0:42:11:2d:94:
                    d2:d6:70:e7:eb:1f:2c:98:0a:83:dd:46:80:ba:30:
                    42:a2:9b:c2:2e:5e:5f:45:56:2b:ec:00:ac:7b:a4:
                    90:b0:3f:1a:47:bb:54:30:ca:0b:eb:68:0a:46:d8:
                    ab:12:74:9a:7f:df:79:bf:31:32:c7:20:e1:b6:0f:
                    d4:d3:29:93:2a:db:5b:5d:75:06:24:d6:1e:01:9c:
                    d8:2d:d9:b8:30:e9:3c:3f:52:14:19:53:22:a7:e4:
                    00:8b:60:78:8b:5b:4f:a9:46:bf:a1:79:4a:02:f0:
                    2b:d2:b3:e6:f5:81:87:31:91:66:f7:e5:b4:84:c6:
                    85:eb:bb:3a:83:b1:9e:06:b1:d7:c9:b4:e1:68:98:
                    16:c0:dd:94:47:61:6f:da:60:a8:8e:7c:34:8f:54:
                    3f:4a:fc:ab:0d:05:f8:93:8b:51:df:34:05:24:67:
                    44:4c:e2:0e:05:f7:ce:24:1f:a0:ff:a3:29:ac:34:
                    f7:34:51:a6:a2:c9:e2:06:c8:61:0c:20:27:5d:53:
                    0c:f3:0a:46:74:a0:b9:45:eb:e3:af:f9:cf:72:f8:
                    a0:7f:3c:28:ae:f8:39:d0:d5:4c:5a:a9:73:fa:d8:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B8:AE:B2:38:DB:E2:94:A1:62:53:C5:68:51:99:88:86:12:AF:37
            X509v3 Authority Key Identifier:
                keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:65:45:c8:e7:ad:4f:f5:5e:90:d5:74:dc:55:f4:32:6a:
         0a:17:fd:bb:ae:79:65:6c:6e:d8:ca:81:72:ed:0d:ed:bd:72:
         a0:c4:33:2b:ea:b2:df:f0:cc:34:29:99:d8:29:b4:55:88:3d:
         bd:48:40:5d:c0:e4:88:ea:5c:77:15:46:a0:1e:b3:2e:da:03:
         24:b8:12:97:9a:fb:9c:76:f9:b3:80:f7:5c:7d:19:0c:5e:c0:
         35:53:f2:8a:96:8c:73:5c:21:1d:d8:a6:be:61:2f:f3:d1:f3:
         0c:e3:dd:f2:18:de:26:c6:d2:6e:b9:a7:6e:86:69:cc:b8:36:
         40:52:da:00:64:10:eb:88:f3:ff:01:7b:23:c6:85:4f:c2:41:
         ce:f6:87:a2:5e:78:73:9b:53:ed:b5:ee:40:d3:b3:59:da:a5:
         57:53:0a:7a:05:1a:09:84:4c:0f:88:ab:e4:12:8d:d0:f2:42:
         0f:65:65:e2:09:3a:0c:33:47:55:2c:26:3c:12:82:cb:2c:3f:
         45:8a:5c:46:20:81:17:14:f3:3e:3a:64:a8:27:40:98:6c:e5:
         4e:c7:83:f5:a5:aa:ed:4f:4c:fa:21:73:a0:86:e3:a7:20:cc:
         51:7b:e3:82:a3:2e:8d:23:ba:4c:cb:bc:b5:5b:8a:a2:eb:e7:
         a4:0e:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:14 2026 by rpki-client