Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File:                     F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier:          LqHVp48EWGKWFJxTZdLH78lPJShS9YTXsedA3jBw+tk=
Subject key identifier:   90:9F:6A:04:EA:A2:1E:84:AC:90:96:70:89:A7:AE:1D:57:A7:A6:0A
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer:       /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial:       019CAC4681333E305CBE39E69C7C4DF7E83B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number:          0F54
Signing time:             Mon 02 Mar 2026 02:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:27 +0000
Files and hashes:         1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: 5pFAyXfdFxjUisc6jO44vRo2B2cTAMRRyGgkwmMJb5g=)
                          2: J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa (hash: MlQZGeS1jAVBfO3R8nnm0N8oigQzbZ43khot/CP8lDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:81:33:3e:30:5c:be:39:e6:9c:7c:4d:f7:e8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
        Validity
            Not Before: Mar  2 02:00:27 2026 GMT
            Not After : Mar  3 02:00:27 2026 GMT
        Subject: CN=909f6a04eaa21e84ac90967089a7ae1d57a7a60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:08:f7:60:ee:9b:75:c0:30:0e:40:67:fe:
                    1c:38:ff:3e:92:0b:ff:bd:21:dc:37:b9:7d:61:e6:
                    b6:4e:5a:d0:42:17:9e:b5:34:6c:c1:80:31:86:0d:
                    d7:9b:0c:49:a7:f7:c9:8d:63:02:a3:c2:31:2a:4d:
                    d0:b8:d6:1d:8e:58:97:a8:5d:4f:66:3a:ec:ab:ec:
                    5b:c6:14:6e:6c:64:d9:a1:c7:9d:d5:d5:b4:2b:50:
                    b1:0a:a4:ff:39:8d:9d:05:d4:20:d3:43:69:d6:72:
                    7a:c3:42:7b:1c:28:c1:f2:6f:05:20:44:62:8d:10:
                    63:e0:60:4d:d8:44:b7:cd:7e:62:5c:38:ea:6e:a6:
                    e3:c5:30:7e:6f:02:3c:7b:e1:a1:8e:bc:de:a9:d8:
                    12:93:ec:78:67:7e:88:40:79:03:1c:56:7b:14:5e:
                    a8:bd:4a:7e:48:51:84:0f:0f:b9:7b:3d:41:33:ba:
                    f4:9e:50:75:bd:7a:1c:fd:b2:4f:c9:e9:1d:7f:cd:
                    6c:da:7d:25:6e:1d:38:8b:38:92:42:b9:12:49:e8:
                    63:19:19:7f:ba:c8:ba:23:a6:01:6b:ce:59:ec:2f:
                    34:74:e3:7e:5c:fa:53:7c:42:f5:2b:df:95:65:82:
                    2e:8d:f6:f3:f1:26:9c:c6:9c:d0:5c:b1:67:50:b5:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9F:6A:04:EA:A2:1E:84:AC:90:96:70:89:A7:AE:1D:57:A7:A6:0A
            X509v3 Authority Key Identifier:
                keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:f2:67:e2:c9:b7:d6:40:71:2a:8b:78:f5:eb:bb:07:b9:
         56:e8:96:dd:b6:ad:f0:74:9c:10:9d:9b:cb:44:60:a6:4f:8a:
         50:54:ad:86:4f:55:08:56:8b:c0:a8:97:d2:70:b4:35:da:5c:
         bd:85:4e:45:14:f8:e3:01:b4:03:43:44:f5:b1:30:9c:10:aa:
         9f:d5:38:85:8e:1e:4a:e1:2d:80:2f:86:e0:27:80:99:19:ee:
         79:65:ae:b1:ec:00:ca:63:5d:f7:82:44:2a:34:dc:c3:fc:4b:
         34:22:e5:21:b7:67:14:46:15:1f:10:70:a2:fc:e6:d5:b3:d2:
         c8:d7:ae:79:5c:2d:a1:12:b5:dc:2c:6b:d5:ca:f3:f2:70:3f:
         8e:22:32:f2:1b:6a:4d:55:58:0c:86:5d:fe:f7:09:6f:39:83:
         62:96:fd:86:14:7e:a5:76:e0:2b:cc:53:11:b7:4c:69:bf:83:
         8a:3c:b9:64:03:59:6d:39:80:3f:0a:3d:75:1f:13:6b:cb:0a:
         15:e1:c2:92:07:0e:fa:21:90:0c:66:6f:8c:14:0a:bc:ec:d6:
         1a:55:79:51:cf:9b:5a:9a:e7:e5:d3:cb:f0:e5:9f:3e:4e:3b:
         48:d2:9f:81:8b:36:ef:49:7b:50:04:b3:b5:fb:36:b9:e4:91:
         90:9a:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:35 2026 by rpki-client