Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File:                     tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier:          pTFygMUME1QxgqLFBxKepWJG0RQB72mLIhrCA7f5zkQ=
Subject key identifier:   6C:6F:AD:D7:6B:B4:1C:C2:C9:CE:98:22:33:1F:08:DA:B1:DC:DD:A3
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer:       /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial:       019CAD59D684E8B0A4F97B21AFB67A412309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number:          10E1
Signing time:             Mon 02 Mar 2026 07:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:11 +0000
Files and hashes:         1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: tKjGEwhOh3mgrGCcTprJqESdp5Nn7agIO4OxqPrra/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:d6:84:e8:b0:a4:f9:7b:21:af:b6:7a:41:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
        Validity
            Not Before: Mar  2 07:01:11 2026 GMT
            Not After : Mar  3 07:01:11 2026 GMT
        Subject: CN=6c6fadd76bb41cc2c9ce9822331f08dab1dcdda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:51:72:e1:6a:23:27:a3:65:4d:9b:e8:84:
                    d2:e9:03:44:d3:c5:6e:dd:d7:09:fb:a6:09:be:bb:
                    7d:e4:7b:76:41:08:ed:c7:e0:4c:e6:84:b1:19:e5:
                    e1:f2:27:42:63:32:6a:82:41:60:98:fb:a0:69:c3:
                    29:0d:51:20:38:65:12:5a:c3:43:73:6c:e6:8c:4a:
                    f0:0f:31:70:81:13:d8:28:33:bc:af:40:7a:b5:52:
                    3b:0e:72:77:3f:8c:19:44:48:da:80:b3:d5:da:98:
                    21:2e:10:09:c3:71:ab:72:88:67:c9:c8:3e:58:7a:
                    12:ea:df:03:8b:9f:dd:f8:78:9f:56:04:c6:2f:b2:
                    ab:1b:46:ad:d9:0c:fc:9f:da:2e:22:59:79:65:7f:
                    8b:5a:ef:56:55:fe:a2:f3:ab:32:c3:ad:29:44:18:
                    f3:db:ca:a6:64:c9:70:ae:32:0f:35:b4:b1:d1:72:
                    a6:6f:0b:be:71:1f:a7:c0:73:11:e3:dd:4e:0c:50:
                    b0:97:ab:a9:3b:76:74:ee:1f:db:7e:44:ca:a2:00:
                    00:bb:4a:15:8d:65:16:ba:6e:9e:8f:94:5b:b2:be:
                    ee:2e:db:fe:93:3d:90:d1:2c:dd:d9:ac:d6:dd:1c:
                    cf:07:2a:e1:65:99:69:19:71:81:4a:2e:72:6e:ff:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:AD:D7:6B:B4:1C:C2:C9:CE:98:22:33:1F:08:DA:B1:DC:DD:A3
            X509v3 Authority Key Identifier:
                keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:8a:57:f2:76:4b:3b:f2:d7:1d:6f:0e:2c:2f:33:d6:53:
         6e:85:56:38:cc:14:44:a2:71:7f:94:3b:d1:d7:48:7a:ce:7a:
         ea:a6:5a:23:ef:85:1b:09:30:a3:e8:07:f1:eb:e7:c6:58:55:
         08:79:d6:18:73:a6:a9:e1:59:1d:1a:90:9c:06:be:5d:a1:78:
         7e:c6:5b:65:40:e5:17:c1:0e:45:ce:46:71:75:90:c0:8a:0d:
         82:44:89:5b:1b:cb:2f:d6:2e:02:a1:01:83:a2:8c:d8:77:ec:
         3f:3d:55:b1:35:32:0a:0e:e7:3c:5f:55:c1:24:00:16:b6:91:
         39:fa:df:81:a5:41:de:f0:81:1d:9f:58:fa:4d:5d:e3:27:f3:
         10:c6:ec:4e:bf:44:b2:f5:a1:28:68:19:7c:c8:be:75:3a:1e:
         a0:37:7e:28:6c:e5:c7:ee:2d:97:b8:f5:fd:a9:06:45:15:ef:
         b1:df:38:3b:bc:60:3a:da:8f:85:dd:ed:e3:4a:8d:ba:bb:66:
         4e:ae:d3:82:d0:25:8e:65:19:28:31:7e:e4:c1:45:42:2a:d5:
         8c:34:e9:6d:15:87:5d:63:c1:1a:58:65:6d:ad:62:bd:31:5b:
         69:0e:e6:08:0c:1d:5b:10:79:d6:8c:29:4e:1f:4d:c7:f8:9a:
         a1:34:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:39 2026 by rpki-client