Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File:                     dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier:          BHroSa1AThG1qlR40b0tA6TwOuyko6P59tWAoWPpOoA=
Subject key identifier:   9B:E7:24:24:C3:34:56:9A:37:4C:7E:1F:1F:B9:1C:6D:6D:98:F8:59
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer:       /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial:       019CAC46F9CA35D4DAAB3732AD7AEB4D8B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number:          101F
Signing time:             Mon 02 Mar 2026 02:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:58 +0000
Files and hashes:         1: 7XwuNf8ZI8FggCTIu3xLPPBwACo.roa (hash: W+WJkHmtpXyF1YCQ32I9zdl7SdlSiAPaPn3XEwacVdM=)
                          2: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: wff3K4qUqArWQ6H/zUnC/oxolExujfvVbWbpVupKLIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:f9:ca:35:d4:da:ab:37:32:ad:7a:eb:4d:8b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
        Validity
            Not Before: Mar  2 02:00:58 2026 GMT
            Not After : Mar  3 02:00:58 2026 GMT
        Subject: CN=9be72424c334569a374c7e1f1fb91c6d6d98f859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:8c:21:f1:2b:63:69:e7:5a:ca:42:e3:23:
                    b5:21:44:88:69:44:9f:7b:eb:ba:e3:26:14:7e:55:
                    38:2d:25:63:6c:dc:f8:2f:7b:00:ff:e1:45:c7:9b:
                    48:82:b9:0d:c6:db:4e:47:21:ec:e6:71:21:03:2a:
                    fc:b1:1f:f0:51:6c:88:21:89:f1:8a:6b:5e:85:69:
                    54:dd:03:fa:ce:9b:13:3f:2e:58:63:d3:23:65:ba:
                    98:b3:8c:0d:89:3c:77:21:d7:5c:7c:27:dd:6d:f2:
                    6f:a8:c2:b1:44:2f:4d:26:3d:b4:11:7f:32:cd:63:
                    95:c6:14:94:e5:46:bd:6e:d7:2f:5e:8e:69:ef:53:
                    0e:23:25:1e:b9:ff:b4:8e:fb:c6:d1:04:7c:ec:9d:
                    fb:1a:9d:af:09:b2:46:4a:22:a1:28:36:a1:f8:0d:
                    e5:78:55:2a:31:ee:29:f4:3b:91:b4:06:5a:86:2a:
                    9d:5f:20:c1:e6:70:f1:70:91:46:27:e5:ad:33:79:
                    55:b4:ca:7e:be:91:a7:4c:4e:6f:ea:de:e3:c1:a6:
                    a1:0d:5d:66:68:01:67:15:2c:65:47:49:57:13:20:
                    7c:84:91:47:cb:2d:94:9b:3b:d3:5f:fc:e7:db:b5:
                    cc:2c:af:e6:55:47:b1:1c:5d:d7:9f:d8:8f:38:c0:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E7:24:24:C3:34:56:9A:37:4C:7E:1F:1F:B9:1C:6D:6D:98:F8:59
            X509v3 Authority Key Identifier:
                keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:db:e3:c6:45:63:55:59:3a:e4:d4:11:70:97:79:d1:17:16:
         60:91:9c:e7:a3:a7:a4:8f:ef:e8:84:bb:4a:ae:37:03:da:e2:
         5e:23:f2:79:6c:85:b2:c8:92:33:c2:07:83:fc:b4:0f:57:a8:
         fa:04:e0:35:9c:e0:16:4a:9c:dd:9d:91:62:64:50:14:86:ab:
         58:d4:5d:12:bb:81:3b:42:e3:b8:33:bc:08:a2:42:2c:b9:83:
         36:c7:57:7d:41:60:1f:4c:0b:39:a5:28:18:01:2f:f6:66:92:
         bb:a5:da:26:59:77:da:8b:4b:04:85:52:b2:98:b9:13:42:b5:
         f2:6f:88:3c:b2:ac:e1:aa:45:51:6f:c3:80:7b:38:5a:2b:bd:
         97:c5:9a:0d:68:3d:44:e9:45:fb:50:4f:6a:05:7a:8f:90:2b:
         de:43:f3:2e:52:73:fe:e8:72:4e:10:9f:be:39:cf:15:f0:3a:
         a3:6a:25:d7:d2:f8:ce:80:09:4e:10:7b:91:62:73:d0:ca:80:
         1a:10:f7:d5:5e:77:ca:3c:44:f5:1b:ec:cb:df:30:63:68:4d:
         84:86:63:51:59:65:5b:9e:46:f9:0b:1d:3b:a4:04:48:fe:94:
         50:21:24:55:08:2f:82:d9:96:7b:14:43:4f:ca:6e:ad:4c:ce:
         ab:d5:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:26 2026 by rpki-client