Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File:                     u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier:          Rn+jltmXxfNZ27FkkWNwl4TKXaDvBWodS/qFlBJBZuc=
Subject key identifier:   FF:91:41:0E:C0:FB:0A:6F:55:52:B0:1F:CB:83:42:77:71:98:E5:0B
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer:       /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial:       019CABA21A264F1EF4C43E29ACCF2F77F19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number:          076A
Signing time:             Sun 01 Mar 2026 23:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:53 +0000
Files and hashes:         1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: 06mRNlOSaGSq/526GXoqwif6drI5NmIkbiMP9wI4Zy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:1a:26:4f:1e:f4:c4:3e:29:ac:cf:2f:77:f1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
        Validity
            Not Before: Mar  1 23:00:53 2026 GMT
            Not After : Mar  2 23:00:53 2026 GMT
        Subject: CN=ff91410ec0fb0a6f5552b01fcb8342777198e50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:1b:67:97:17:d8:8e:3a:50:55:e7:02:94:
                    45:01:da:2d:dd:f8:da:86:6d:d0:df:40:ca:7d:23:
                    34:f5:ac:27:2e:9a:a2:60:19:a8:5c:3e:85:6a:bb:
                    39:28:df:7b:c3:28:4b:c8:f4:b7:3a:b9:cc:a1:18:
                    94:8e:e8:e8:fd:7c:c4:65:dd:52:c8:ac:f0:b0:12:
                    d4:b3:1d:50:87:90:5c:48:b5:04:77:0e:e7:c2:a6:
                    93:ec:2d:58:9d:2d:21:47:e7:1b:d1:24:12:7c:4f:
                    f3:4f:85:96:ed:a0:74:d1:ef:c5:d5:82:ef:a6:a0:
                    0e:5a:fb:fd:a9:95:5e:d3:30:cb:7e:3d:7e:ec:e5:
                    38:f3:9b:cc:04:89:ea:ea:df:74:c2:3e:bf:21:b5:
                    fb:87:e5:16:18:e4:74:16:34:cb:94:7e:6c:91:7c:
                    fb:cb:69:0f:e7:d4:19:ce:db:6b:63:98:1f:34:48:
                    6a:5b:3e:45:49:02:9c:b0:76:0e:e1:56:ec:62:fe:
                    c7:77:96:e4:a8:8e:4b:24:71:ab:f3:6a:0f:d6:fd:
                    ed:90:fc:f8:68:15:a4:88:e8:36:bc:fb:ad:12:a5:
                    99:44:0f:04:c4:6e:9c:6a:ea:fe:a4:e3:7e:50:9e:
                    83:21:27:d2:0a:5c:77:0c:f6:3f:0b:2e:5f:a3:d0:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:41:0E:C0:FB:0A:6F:55:52:B0:1F:CB:83:42:77:71:98:E5:0B
            X509v3 Authority Key Identifier:
                keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:79:65:d9:1a:b9:93:d7:27:c8:ac:53:36:03:18:9f:7d:ee:
         68:3a:6e:23:1a:91:e3:94:c4:10:a3:cd:16:9d:63:86:44:2c:
         02:c8:b2:a7:b0:ee:3a:03:f1:4e:6a:45:97:d6:79:b4:af:0b:
         a1:ff:c7:45:d0:f9:20:83:c4:b0:f4:25:a6:9f:2a:16:2c:1c:
         46:6e:7d:86:46:7d:53:c4:12:c4:96:19:7c:aa:16:a3:26:aa:
         7f:cf:e1:22:93:1e:36:53:5d:27:9c:fa:50:35:d1:09:ec:30:
         2f:11:52:31:62:3b:58:32:52:b2:30:60:7f:78:b8:cc:9e:21:
         b0:5f:7a:37:38:2f:85:0d:70:80:8f:32:b0:d7:79:36:55:e1:
         15:76:02:7c:a0:13:2a:5a:c9:8c:ed:05:7a:ec:dd:df:b0:7f:
         fb:d9:ec:80:11:91:8d:69:3c:d4:15:8c:58:75:08:c8:c8:68:
         30:84:54:76:c6:83:9c:e1:01:81:2a:d4:85:b3:5c:0b:c2:5c:
         a5:29:64:54:18:5f:6d:91:a8:03:1a:6a:cb:d6:ec:05:dd:65:
         79:e2:79:ed:14:ff:5a:48:e9:98:06:8b:9a:f2:b5:74:6e:1c:
         19:74:41:dc:0a:94:b4:c8:94:d7:5e:87:d9:f3:7c:7a:54:9c:
         88:25:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:20 2026 by rpki-client