Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File:                     mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier:          0RDjU19NSA/LllURqe/BB+JAkleU7a43F8TllllIG00=
Subject key identifier:   15:8F:0E:6A:4B:97:44:B0:F9:92:C3:EF:38:CE:BC:5E:3C:B0:21:35
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer:       /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial:       019CAB3432237088C8EA293777E57D1D7DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number:          0D77
Signing time:             Sun 01 Mar 2026 21:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:50 +0000
Files and hashes:         1: URZzzgnH_vU72SoCNt0vpxKdJsI.roa (hash: 1rY1t7U3SZOaWNvkcyFE0XaSL49OxqIh8kaeVJhLfNg=)
                          2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: 3BfpwLY5t1VjABQstpgUf2SzEwYMH+1lgHPMV8oYjww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:32:23:70:88:c8:ea:29:37:77:e5:7d:1d:7d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Validity
            Not Before: Mar  1 21:00:50 2026 GMT
            Not After : Mar  2 21:00:50 2026 GMT
        Subject: CN=158f0e6a4b9744b0f992c3ef38cebc5e3cb02135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:b4:f9:04:bb:ff:3a:38:62:ae:fc:4a:1e:
                    d5:d0:5f:70:5b:ae:2a:c9:62:04:76:20:ae:f3:b8:
                    e4:37:19:81:e9:e5:5b:cc:21:69:b8:6e:e7:03:6d:
                    ec:88:c3:81:4c:c5:11:c4:4b:17:3d:c5:66:de:31:
                    ab:b4:3c:ae:54:dc:81:3a:60:ff:96:bb:cd:82:83:
                    69:b8:c1:51:e2:51:11:7e:5b:50:77:18:5c:77:92:
                    7e:7d:e4:e5:9e:0f:7f:4a:d4:88:bf:e7:44:82:08:
                    03:d7:ba:0a:87:49:fe:5c:d5:ad:a7:40:15:a2:ab:
                    73:a0:82:e1:86:d7:39:bd:06:9e:04:72:5d:c6:29:
                    34:f3:21:37:ef:67:ae:63:6e:78:8b:51:1d:d6:04:
                    43:51:45:32:c2:46:3c:0c:b4:d1:7f:53:a0:1b:f6:
                    9a:4f:d1:4d:2b:08:67:43:db:64:96:d7:10:e9:07:
                    48:b7:72:80:31:41:5c:63:b0:ec:f1:65:88:a4:3d:
                    6e:a0:71:1b:0f:ca:fb:27:a5:dd:6a:6b:29:cd:8f:
                    22:c7:b6:50:7b:99:cb:a8:f9:25:1b:f7:26:45:a9:
                    09:e8:3a:6e:eb:8c:b0:e8:b5:fa:85:7f:12:9a:69:
                    5e:f0:da:85:d5:c2:e3:82:d6:f1:39:0e:51:d4:b5:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8F:0E:6A:4B:97:44:B0:F9:92:C3:EF:38:CE:BC:5E:3C:B0:21:35
            X509v3 Authority Key Identifier:
                keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:3d:30:06:6b:73:f8:b5:f3:b8:71:02:b7:1c:d1:77:4e:ab:
         32:9b:24:a9:d7:23:2e:0a:5b:ed:76:0a:0e:bb:7f:38:5f:27:
         dc:bc:fc:d0:66:14:36:1b:2c:79:65:9d:c1:e1:71:7b:d1:5a:
         83:29:79:8b:10:df:5d:f9:c0:d2:49:e6:74:a5:f1:9b:37:c3:
         1c:75:d3:ec:e9:99:31:83:48:49:69:a4:eb:ab:04:47:52:76:
         52:95:05:56:95:2a:f8:3a:d7:11:28:33:38:fc:87:1f:86:8a:
         c9:0c:9a:33:ae:3d:c9:23:6f:b4:bc:9e:1c:3b:12:b2:7a:8b:
         16:07:54:d5:ac:3c:9e:b0:d8:ce:34:50:dd:cf:83:b3:09:f8:
         fa:cf:e9:f8:c3:23:43:54:a5:cb:d1:fb:9b:de:74:be:21:f1:
         05:51:ee:c1:ae:8c:cd:38:b1:a3:3f:99:a3:50:8d:55:07:33:
         c7:a3:ff:cb:75:63:de:e1:58:4b:41:dc:d6:f6:0a:03:95:69:
         d0:e4:ab:c6:a2:b9:62:a4:4f:c1:b2:d1:06:04:df:6e:05:91:
         71:1d:33:e9:70:1e:5f:5d:20:e8:54:e7:f0:06:31:75:3d:f4:
         ff:e3:92:47:d2:43:51:3f:62:fb:eb:d8:f5:59:af:88:9e:03:
         cf:5b:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:43 2026 by rpki-client