Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          X3O/9xE7gqdUqevg/PtVxQykxeTrK9035GocE6JjEJ8=
Subject key identifier:   38:D1:53:63:2C:2F:87:13:CE:8B:12:FE:FF:17:15:CC:F6:DB:2B:23
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       019CAC7DBACDCD335ACDC4B05E807511DBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          0C08
Signing time:             Mon 02 Mar 2026 03:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:46 +0000
Files and hashes:         1: CXD8wfMhKiKiO997lKcwfqvgnd4.roa (hash: GXzecNWlAWU/oBfDZ4cMgGfToo/UFOLMCS/xikLLiZA=)
                          2: Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa (hash: rf5S758DEbKW96IfUMXXqn9C0gkyLzbP4cr3lVYPPio=)
                          3: p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa (hash: hdqNSuQrQNGkaTv7LpPhrSIwMr6CxzgGsrUQLxZoMvg=)
                          4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: 4ZuSAF7sAHMTVzZQ5lK0xzH2O0parB+EnhK0MGd6jGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:ba:cd:cd:33:5a:cd:c4:b0:5e:80:75:11:db:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Mar  2 03:00:46 2026 GMT
            Not After : Mar  3 03:00:46 2026 GMT
        Subject: CN=38d153632c2f8713ce8b12feff1715ccf6db2b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:15:f5:a5:ae:ba:26:61:b0:d6:ee:68:d8:
                    17:ae:59:a1:87:9e:09:1b:a9:b9:98:64:65:8a:2f:
                    78:ba:99:86:aa:45:9e:cd:24:a8:6f:6d:90:55:1a:
                    d2:5a:97:53:a5:9c:a7:62:ea:10:65:cc:c1:7c:56:
                    bf:63:2e:83:11:c5:e1:03:44:98:96:84:32:44:5b:
                    f9:79:b5:12:ef:eb:1f:5c:88:36:97:dd:d1:b5:00:
                    93:f8:4c:2a:2c:ec:08:da:09:1a:75:e7:30:ae:1f:
                    df:89:78:06:bc:95:41:d6:35:17:24:12:9e:0d:1a:
                    28:c9:09:6b:74:08:22:45:32:85:39:8e:67:cc:7c:
                    c2:05:f8:7a:db:d0:fc:5a:70:05:bc:68:1c:c2:ca:
                    11:57:53:93:58:f9:c9:dc:ee:f7:58:41:30:d9:02:
                    46:79:72:eb:89:4c:d3:00:b3:1a:f7:83:49:ce:c2:
                    42:8e:7e:50:a6:3c:bf:4d:15:b8:27:ba:1a:bd:d2:
                    cd:61:88:57:f8:45:66:19:17:ba:d1:65:27:4a:e5:
                    60:ee:f1:51:15:e2:2f:dd:0c:9e:ae:cf:68:0c:e8:
                    ba:e7:d3:9f:66:ee:a9:f5:5d:30:fe:37:a5:ac:00:
                    39:a2:08:b9:03:3f:59:bb:a5:30:2d:7c:74:30:91:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D1:53:63:2C:2F:87:13:CE:8B:12:FE:FF:17:15:CC:F6:DB:2B:23
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:ff:d7:c3:81:00:8a:b1:89:1e:b6:09:48:7f:c2:d8:9c:
         a2:72:1d:16:db:ec:7d:4b:b6:ac:09:1f:e2:7e:90:0b:6a:c0:
         08:35:cc:ec:bf:26:4d:04:73:c1:85:e9:8b:7f:ef:6c:c3:35:
         6d:01:16:3d:3d:a1:b0:01:53:2f:19:21:44:4a:8b:5b:32:76:
         68:4a:94:44:43:e5:66:7c:65:04:18:8d:78:9a:69:a8:dc:97:
         e2:af:0e:25:e7:a9:c6:e8:c8:04:dd:fb:10:22:b9:ed:e9:09:
         b1:1e:16:56:17:77:3f:07:ae:75:80:a4:09:ad:d3:9d:e4:0d:
         7e:43:03:d7:70:36:42:43:26:0d:ce:d1:4e:49:a6:21:6a:ba:
         31:61:e6:f2:38:7a:74:7b:98:37:27:fe:49:f0:40:0c:5e:3f:
         ab:6b:da:df:c5:3d:62:97:5f:ea:df:55:0b:9f:1b:eb:19:42:
         fa:77:a1:13:2d:56:b1:8c:7a:8c:4e:67:4b:2c:11:da:c8:fc:
         41:72:f7:d9:75:89:bd:51:c1:87:0e:16:f8:93:4e:3e:4e:06:
         0a:0a:9a:c1:ac:e0:d7:c8:d4:d3:84:86:ff:a9:1c:92:7e:21:
         c1:7d:e7:04:b8:5b:9d:9c:38:02:f7:1d:b1:1d:7b:5f:56:55:
         9f:22:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:44 2026 by rpki-client