Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
File:                     9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json)
Hash identifier:          p4DmZHS4yIIH1cK4xOuLNmUqDZauEK/xN4/+ZnHOAGk=
Subject key identifier:   71:67:C7:E5:5C:9F:43:9D:88:09:D5:B6:8E:E7:D0:A4:04:C0:C0:94
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Certificate issuer:       /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial:       019CADC794A77BAF6A97D35116B15D79298B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
Manifest number:          89
Signing time:             Mon 02 Mar 2026 09:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:03 +0000
Files and hashes:         1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: 5X1jpZROPMb1wDPsmimehZL/klnxU2pHlxbjRrZSd/U=)
                          2: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=)
                          3: tTIiXNFmVwT5T0hHiGKIodMu4-0.roa (hash: 1Yst/9/lTuLJaVKmnwJPraD68CwcsXf9gsuFNgo7ggI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:94:a7:7b:af:6a:97:d3:51:16:b1:5d:79:29:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
        Validity
            Not Before: Mar  2 09:01:03 2026 GMT
            Not After : Mar  3 09:01:03 2026 GMT
        Subject: CN=7167c7e55c9f439d8809d5b68ee7d0a404c0c094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:65:20:24:d9:48:73:99:b6:4f:17:f2:1f:
                    20:8a:82:e8:15:44:58:59:ae:03:13:8b:b3:a1:07:
                    a4:ee:01:bb:cd:32:87:64:4e:0a:85:9c:c8:01:99:
                    16:ff:3a:91:01:e4:bc:29:b3:f6:cb:72:60:d3:64:
                    b0:e7:54:5a:3b:38:13:a5:1b:00:c5:25:d4:76:82:
                    d1:32:f6:dd:59:ca:9d:58:d1:68:a9:75:79:e2:aa:
                    b5:df:78:58:17:53:49:ac:9c:4b:e0:95:c8:34:f1:
                    43:6b:78:f9:64:e2:ef:5d:d0:1b:1a:97:79:14:09:
                    d7:d3:7e:66:7a:d2:7c:d7:17:1c:a8:fe:56:5a:4c:
                    5d:c9:f0:32:f7:46:d5:ce:c5:82:3e:12:2b:ad:04:
                    98:b7:06:48:f8:9f:59:17:fe:2d:5f:b4:e7:c7:ce:
                    6f:11:b5:6b:3b:b3:2a:d2:6b:29:23:40:7c:e0:00:
                    bc:1f:21:80:ba:8e:9d:d4:a4:ce:78:7c:ea:46:25:
                    c4:b6:73:c9:d4:f1:3b:46:c6:b0:a6:fd:ea:f3:8a:
                    c3:61:48:f0:2c:e7:5c:3d:dd:b0:8f:0c:00:2d:67:
                    9b:65:f6:e4:53:4d:53:4f:68:37:93:27:cf:2d:5e:
                    a1:ee:b5:b8:15:95:82:6b:0e:d2:f0:26:61:bf:e9:
                    af:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:C7:E5:5C:9F:43:9D:88:09:D5:B6:8E:E7:D0:A4:04:C0:C0:94
            X509v3 Authority Key Identifier:
                keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:84:37:79:7f:78:e0:a6:51:f3:e1:50:28:e4:c9:c7:35:8f:
         a6:29:2d:e1:97:cf:a3:58:39:20:37:cd:eb:4c:22:75:8e:98:
         cd:18:22:7a:e9:a0:cb:3f:86:65:f3:08:dc:4a:9e:96:5e:d8:
         0a:26:22:fb:a7:94:34:f1:0c:8d:01:f8:cc:9b:3b:8b:30:9a:
         27:86:bd:5b:d6:e6:73:9d:c8:d6:0a:54:a9:b4:61:2f:7d:de:
         0e:9d:db:30:ba:fe:87:be:61:bb:24:ae:63:39:fa:8e:e4:d5:
         5c:6c:a3:d8:77:b9:2e:19:6e:e8:37:b7:8b:bf:7e:23:ca:0a:
         42:59:db:e7:13:1a:ae:67:b3:7d:2c:38:1a:5d:d3:97:c7:6e:
         38:96:79:43:d7:8e:2e:93:cd:09:be:62:a9:cf:8b:a7:db:2d:
         e3:b8:ee:9f:1c:82:36:e1:2b:7f:03:17:37:f9:cd:bc:45:d5:
         84:ec:35:dd:47:3d:54:88:e1:15:d1:d1:bc:54:b3:d2:6a:b8:
         0a:44:a2:36:17:ef:51:54:28:f3:0c:1e:3f:55:a2:22:66:1c:
         37:b7:b2:fe:e1:a7:7c:96:d7:c5:88:41:1f:25:a0:66:8a:65:
         45:e9:54:19:01:f5:98:8c:1f:84:a3:6b:79:39:80:c0:3b:8e:
         18:e5:d0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:22 2026 by rpki-client