Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File:                     eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier:          iTe1wtHPMHTkiR8khAs4Bc7y/oKr9613tTKeu+nQYj0=
Subject key identifier:   93:54:EE:92:76:C5:53:0F:D2:BB:6E:55:9D:AD:2D:4B:7E:3E:84:73
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer:       /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial:       019CACB51863590D97EBD2A8FB6D920C88E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number:          084B
Signing time:             Mon 02 Mar 2026 04:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:15 +0000
Files and hashes:         1: AAxqzE_DaNwqJtSiSRt01LrD11E.roa (hash: AsdkBWjUsMF1PMPWszixSJb73omz0Nujo4Z01ynXMW8=)
                          2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
                          3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: 68kSHzqitHSZWmM1uo8LixLOLthhyhBDDVO/FpSQ7VE=)
                          4: haFLcC9NWw9ub46milFGifb1wm8.roa (hash: MLM9+m/KRPi8dl+vkuj88InrFcUl/TiXCjaTZOweCP8=)
                          5: nVrsmiE4mZkUHdQosAPmUQgfiN8.roa (hash: HnvmyHFabWozXyzydQ+3XrK2DXsd/lYo1fc4nVOwXr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:18:63:59:0d:97:eb:d2:a8:fb:6d:92:0c:88:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
        Validity
            Not Before: Mar  2 04:01:15 2026 GMT
            Not After : Mar  3 04:01:15 2026 GMT
        Subject: CN=9354ee9276c5530fd2bb6e559dad2d4b7e3e8473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:03:f7:e3:af:11:6e:cb:2a:72:44:7e:32:
                    17:3f:c2:7f:66:65:88:e9:46:00:2a:df:01:79:e8:
                    78:cc:88:bf:5f:21:13:ef:cf:1a:08:96:c0:e7:4c:
                    e4:a9:83:29:f4:39:ab:c4:dd:ab:1c:e7:ca:59:39:
                    e1:d6:d3:d1:80:fd:fd:fb:89:fd:c3:92:dd:44:05:
                    c7:f9:64:15:07:93:2b:00:43:39:f7:9b:91:05:4a:
                    ca:6f:25:3c:d5:b6:25:3f:3b:e3:dd:94:04:d2:5b:
                    54:e8:53:f5:af:06:c4:05:83:c9:39:e1:e7:49:4e:
                    90:21:2e:03:95:b7:82:3a:0f:dd:a6:fd:7a:a4:2b:
                    56:ec:49:b5:85:e4:84:21:f5:a0:97:10:86:39:b8:
                    ca:88:69:16:2a:60:53:f8:a0:eb:bd:8f:cb:23:75:
                    8b:da:3f:91:8d:f2:57:f0:45:d5:49:76:ce:0d:00:
                    85:de:d1:fa:3f:52:02:0b:c9:38:32:56:e3:f5:91:
                    95:b2:b6:f6:d1:a5:61:72:f8:92:7e:d7:db:48:1c:
                    28:61:17:1f:0f:33:47:ef:fb:b1:f1:d9:4a:9b:82:
                    70:e7:54:28:78:73:a8:06:0f:66:86:28:fd:e1:42:
                    57:70:91:55:71:9f:e8:65:2e:0a:2a:b3:89:28:c8:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:EE:92:76:C5:53:0F:D2:BB:6E:55:9D:AD:2D:4B:7E:3E:84:73
            X509v3 Authority Key Identifier:
                keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:96:a5:29:57:51:59:5c:7a:9b:08:36:db:cf:f0:b3:4c:07:
         6d:95:58:5c:19:99:2b:80:83:6e:22:4f:fa:51:fb:81:31:27:
         0c:58:b9:e2:be:db:6c:cd:10:e5:40:d9:90:48:36:db:6c:c5:
         02:e6:dd:1c:40:03:76:05:d3:7d:a0:b9:24:d0:42:e2:f9:ac:
         92:9f:e9:db:dd:44:fe:38:7f:3d:ad:55:85:9c:7f:c4:67:3b:
         74:e0:8e:1f:1b:67:d3:87:a4:af:e3:54:29:ae:ed:ff:a1:a5:
         af:ff:5c:15:5d:b6:25:84:50:ea:2e:db:0b:3e:61:14:d2:88:
         b2:c2:6f:04:72:cc:66:eb:b6:fd:83:f5:b9:d2:94:4e:49:8c:
         80:7f:39:3a:d1:61:08:db:e5:8c:c1:36:3d:a1:fb:7b:99:16:
         d5:a6:a0:61:4d:6f:fa:e7:a4:42:b2:e7:d9:ff:f6:ce:84:bd:
         eb:29:31:03:05:a8:00:61:da:d2:14:63:15:5e:90:80:b9:54:
         67:2a:b8:7e:e6:25:69:8b:db:6a:dd:d1:1b:4e:d4:52:b2:c8:
         13:57:a0:05:51:bb:cd:e2:1d:7e:76:74:13:0a:a4:87:ea:50:
         df:83:7e:c3:b6:68:59:41:a8:af:c1:d7:be:8a:2b:12:d3:6e:
         69:5a:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:58 2026 by rpki-client