Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File:                     jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier:          aHHh0ZKoq7UHh7QjkUlZeA1cZFPzSYQvEuLD0WN+Efw=
Subject key identifier:   54:BA:43:3F:DF:C1:56:F2:D4:1B:9A:47:3F:6D:97:66:87:A0:71:D0
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer:       /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial:       019CAC7DCC7D4F8249386546781ADF0B0CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number:          0F55
Signing time:             Mon 02 Mar 2026 03:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:51 +0000
Files and hashes:         1: WixuCuv6oK2h_hFTQCqiu7aJKaY.roa (hash: q9PZjoZVbTamxQQPVsYxw6N358GhwOGzbBLOqLT/7OQ=)
                          2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: mh8Ez7vwgLG/jNS0xjmwVlViQPzGVdZSFVXvaXFz6wY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:cc:7d:4f:82:49:38:65:46:78:1a:df:0b:0c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
        Validity
            Not Before: Mar  2 03:00:51 2026 GMT
            Not After : Mar  3 03:00:51 2026 GMT
        Subject: CN=54ba433fdfc156f2d41b9a473f6d976687a071d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:57:aa:72:52:d4:d7:62:dc:52:6f:96:cd:
                    2d:5b:42:81:e8:4a:86:87:09:28:a1:4e:7d:2d:d2:
                    f8:dd:42:78:64:63:a8:c1:1b:d8:99:a6:68:d4:99:
                    7e:aa:5e:88:94:c3:69:9a:63:62:85:45:82:59:d0:
                    2f:3c:74:f5:f2:0b:34:57:c4:03:d5:d3:b1:7e:8e:
                    a7:63:70:ff:b1:90:71:d8:2b:87:a9:b9:cf:b1:11:
                    f8:6f:6f:7f:d9:0b:2e:21:36:13:4f:7b:81:0f:ce:
                    d1:2e:f2:7a:fd:08:4e:b4:71:18:73:ef:5c:d5:a6:
                    6f:b3:46:ee:07:b5:81:26:39:ee:f8:db:12:2a:3e:
                    bd:c4:34:11:49:8f:e7:04:d3:00:e1:6c:91:e2:c6:
                    55:46:3c:1e:95:0c:f4:f6:e9:77:d0:cf:92:c3:7a:
                    6b:59:43:bc:e9:cc:c5:40:f8:1c:89:77:04:f2:33:
                    75:0a:35:38:87:6e:28:ff:5d:50:09:0b:3b:30:3b:
                    d6:9e:86:51:0e:52:39:12:e8:b9:36:70:9d:73:a7:
                    89:f0:a5:58:be:39:fa:11:70:8d:8e:05:0f:56:00:
                    c5:03:69:8b:ed:ae:73:70:7b:57:89:2c:c7:b9:1d:
                    4a:d7:5c:02:06:d1:04:6b:f6:bd:e9:13:cb:f8:09:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BA:43:3F:DF:C1:56:F2:D4:1B:9A:47:3F:6D:97:66:87:A0:71:D0
            X509v3 Authority Key Identifier:
                keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:fb:74:25:e7:03:9e:ce:12:7e:56:5b:83:63:33:f1:0e:
         d3:ab:fd:7b:f8:be:fc:d8:6f:18:4a:97:a7:cd:8b:6e:35:65:
         e8:a2:ca:f3:60:e0:fc:8d:13:e0:26:58:3a:27:09:a2:50:cb:
         75:b2:ff:a2:33:e0:98:9d:4f:72:ac:1f:57:0e:0a:1b:10:a4:
         f3:4e:a4:03:c6:ad:59:dc:14:d7:47:9c:c8:b3:fa:3f:64:8b:
         6b:c9:c0:4c:07:4b:f6:39:20:56:35:2b:6a:2b:cc:03:8b:bd:
         44:3d:21:13:1e:a6:fc:7a:ab:e5:1b:96:4e:cb:04:18:20:03:
         88:c3:c4:d5:39:f4:50:5e:99:fd:3a:a6:76:da:ab:46:40:db:
         56:68:53:c6:bc:61:28:28:de:41:07:42:fa:4f:b7:f4:b5:58:
         32:50:bc:3b:f5:dc:d4:ac:43:c5:c0:9a:7e:b4:ac:f9:3c:35:
         0f:56:54:cc:b9:36:e0:53:74:b7:74:41:4c:c9:36:5c:17:5c:
         b1:31:3d:29:a0:df:10:5d:e7:4d:52:40:82:6f:3f:62:4e:99:
         3d:cb:5e:81:ac:6d:a8:02:bf:fb:1d:34:60:e7:96:3d:f2:f6:
         0e:0c:c3:67:7f:e9:e1:0d:b2:ff:e8:1f:dd:19:8b:84:d6:56:
         51:c7:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:37 2026 by rpki-client