Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          9Xd2Q+kqIgZRg5qCMA+oYYgVChu60CPbKdNJ+lGUgE8=
Subject key identifier:   FC:52:E1:3F:4C:3F:ED:12:90:3A:FC:EB:C5:38:63:DF:7A:4F:EA:EE
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       019CAAFD8635E56BBA5D0992C1660DC386CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          09CB
Signing time:             Sun 01 Mar 2026 20:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:07 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: 8r4jzOrbJNHLAQ/MqG64wti0PwC2mjk9uETjew7/P4A=)
                          2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=)
                          3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=)
                          4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=)
                          5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=)
                          6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:86:35:e5:6b:ba:5d:09:92:c1:66:0d:c3:86:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: Mar  1 20:01:07 2026 GMT
            Not After : Mar  2 20:01:07 2026 GMT
        Subject: CN=fc52e13f4c3fed12903afcebc53863df7a4feaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:7c:cd:49:72:ad:e1:6c:bb:10:af:36:61:
                    9f:66:77:83:f3:a9:a1:3f:3d:03:55:b6:59:93:ee:
                    0e:47:49:c3:8c:dd:86:9b:5f:f1:da:92:08:95:6f:
                    02:81:3f:79:bb:16:50:e0:c1:56:af:7a:ec:45:5a:
                    96:b9:13:c6:e9:84:a8:5b:91:42:b2:73:43:f7:07:
                    a5:61:86:67:4a:e5:df:d6:79:f9:44:f8:5b:99:07:
                    8f:af:c4:f1:89:47:12:5e:9a:52:52:1a:6e:92:52:
                    6a:a4:28:50:fa:3c:26:5d:90:cc:0c:ad:8c:ae:ba:
                    d9:55:cd:fd:9c:9f:f2:4b:ad:91:b9:8f:7a:16:c7:
                    d4:ca:f6:f7:52:58:5f:18:cb:55:bd:6d:38:e0:f4:
                    a2:26:75:33:d0:81:1d:ea:23:cf:3a:61:2b:47:45:
                    76:d3:14:13:ee:76:bf:c6:14:06:95:61:38:59:0f:
                    8f:ad:f9:6c:c3:34:1e:c5:af:5a:74:c5:f9:dd:6a:
                    b1:3c:8d:25:c0:e6:49:4e:4d:24:61:13:0b:9e:cd:
                    55:6c:a4:03:1d:e1:73:ab:db:7b:72:15:5c:d4:74:
                    df:fb:d5:90:97:d4:4d:17:22:9b:46:3d:07:a8:a7:
                    cf:22:21:2f:50:e0:6f:e2:42:4d:4e:28:e8:00:5e:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:52:E1:3F:4C:3F:ED:12:90:3A:FC:EB:C5:38:63:DF:7A:4F:EA:EE
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:34:b7:61:14:aa:eb:62:be:fa:cc:e2:da:bb:a9:14:9d:2e:
         44:8c:c3:36:a6:ca:ea:0c:f7:e2:4b:53:6a:09:8c:83:87:ed:
         94:43:26:b4:72:c5:d0:03:79:df:1c:13:09:be:6b:25:f6:b1:
         5b:84:89:2c:5c:74:06:d2:c0:8e:71:9e:2f:9d:e3:3e:78:e7:
         bf:03:86:fe:54:96:66:09:62:f9:32:e2:77:aa:a8:85:c3:ca:
         c4:53:59:31:34:9c:ec:d4:a0:c4:88:ea:10:fb:eb:e7:ef:f0:
         9f:70:2c:02:72:c5:a3:bf:42:cd:bc:83:ff:9c:ae:b9:ea:e5:
         53:be:7b:c6:bb:4f:f4:85:07:aa:32:ca:f5:69:c8:6d:c5:c6:
         17:77:68:21:81:28:db:1f:71:a2:63:d3:36:e7:df:d5:01:ed:
         ff:09:07:53:fb:2c:80:2b:21:a7:c3:6b:7d:5a:a4:97:d1:58:
         19:45:5c:4f:86:74:e4:2b:0e:0b:ab:f0:fc:70:f2:ab:91:17:
         2f:38:e8:76:be:d1:86:32:0b:7d:0d:bd:e7:ba:6e:1c:70:a5:
         17:6f:80:9d:69:c4:75:47:d3:0f:98:0e:64:7e:40:2e:54:e6:
         15:62:d0:6f:fb:81:1c:c2:ec:0d:97:80:f5:97:c2:6a:de:71:
         5b:ce:05:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/YY15Wu6XQmSwWYNw4bKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk
MDc1YjEwHhcNMjYwMzAxMjAwMTA3WhcNMjYwMzAyMjAwMTA3WjAzMTEwLwYDVQQD
EyhmYzUyZTEzZjRjM2ZlZDEyOTAzYWZjZWJjNTM4NjNkZjdhNGZlYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/x8zUlyreFsuxCvNmGfZneD86mh
Pz0DVbZZk+4OR0nDjN2Gm1/x2pIIlW8CgT95uxZQ4MFWr3rsRVqWuRPG6YSoW5FC
snND9welYYZnSuXf1nn5RPhbmQePr8TxiUcSXppSUhpuklJqpChQ+jwmXZDMDK2M
rrrZVc39nJ/yS62RuY96FsfUyvb3UlhfGMtVvW044PSiJnUz0IEd6iPPOmErR0V2
0xQT7na/xhQGlWE4WQ+PrflswzQexa9adMX53WqxPI0lwOZJTk0kYRMLns1VbKQD
HeFzq9t7chVc1HTf+9WQl9RNFyKbRj0HqKfPIiEvUOBv4kJNTijoAF5eewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxS4T9MP+0SkDr868U4Y996T+ruMB8GA1UdIwQY
MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjS3YRSq
62K++szi2rupFJ0uRIzDNqbK6gz34ktTagmMg4ftlEMmtHLF0AN53xwTCb5rJfax
W4SJLFx0BtLAjnGeL53jPnjnvwOG/lSWZgli+TLid6qohcPKxFNZMTSc7NSgxIjq
EPvr5+/wn3AsAnLFo79CzbyD/5yuuerlU757xrtP9IUHqjLK9WnIbcXGF3doIYEo
2x9xomPTNuff1QHt/wkHU/ssgCshp8NrfVqkl9FYGUVcT4Z05CsOC6vw/HDyq5EX
Lzjodr7RhjILfQ2957puHHClF2+AnWnEdUfTD5gOZH5ALlTmFWLQb/uBHMLsDZeA
9ZfCat5xW84F+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:31 2026 by rpki-client