Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File:                     m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier:          kL3iuk1wW37nleaVs9EJEcIo8qMQ/745qncrMwbwvok=
Subject key identifier:   C8:58:96:69:7F:38:70:9D:F8:52:AE:9B:8F:5F:DF:76:28:55:1E:8B
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer:       /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial:       019CAAC66F58452393C31167C512603740D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number:          06EC
Signing time:             Sun 01 Mar 2026 19:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:57 +0000
Files and hashes:         1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: Hg3LAnoG0kv7gCEtUxuyDgT0+l7YsQlbuUd5rR0PIkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:6f:58:45:23:93:c3:11:67:c5:12:60:37:40:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
        Validity
            Not Before: Mar  1 19:00:57 2026 GMT
            Not After : Mar  2 19:00:57 2026 GMT
        Subject: CN=c85896697f38709df852ae9b8f5fdf7628551e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:c1:ea:9c:39:b0:16:33:0e:0a:96:6b:b2:
                    5e:03:9e:9b:b5:d8:f1:0a:00:e5:6c:33:07:76:38:
                    75:a8:dc:ae:fe:70:e4:41:da:72:43:59:ee:2f:e7:
                    f8:90:d5:36:50:72:c7:ba:87:77:a4:d9:36:16:8a:
                    97:08:0e:32:61:5e:0c:6d:05:f2:fc:7f:35:3a:7a:
                    59:62:ac:a1:75:1c:ec:6f:13:bd:f6:9f:02:9b:04:
                    53:99:8a:5a:7b:0a:41:f3:7c:38:d4:6d:be:7b:1d:
                    8a:09:bb:29:ae:bc:46:3a:36:d8:cc:0a:fc:00:dd:
                    f3:0b:b2:8a:4b:8a:c1:89:6e:82:84:cb:b7:12:a1:
                    68:df:d2:c6:ba:f7:11:b7:71:fd:0f:6d:82:1c:21:
                    9d:07:d9:3c:12:ce:2d:66:1e:3c:ec:d8:04:61:ed:
                    e3:f1:7b:41:d6:dc:d1:2e:c9:b3:b2:5b:4a:40:6e:
                    2e:0d:92:64:e1:35:fb:44:12:35:71:c6:1f:23:b8:
                    7b:e1:b1:b0:bc:4b:77:02:8c:82:d8:fa:13:f6:66:
                    bb:db:8d:46:ad:dd:5e:9b:14:8e:40:bc:89:5b:c0:
                    78:52:58:29:9e:f8:f0:f7:aa:38:2f:ce:15:e2:08:
                    38:92:fd:bb:da:aa:76:35:9f:08:18:7d:e0:0b:a4:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:58:96:69:7F:38:70:9D:F8:52:AE:9B:8F:5F:DF:76:28:55:1E:8B
            X509v3 Authority Key Identifier:
                keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:75:f9:c6:50:c6:6e:04:38:b7:88:ed:c2:4f:d6:c7:a2:41:
         fd:39:c7:86:28:4b:33:22:ff:3f:58:df:cc:8e:2c:8c:af:76:
         28:df:8f:f5:07:07:da:10:ef:63:9b:fb:70:28:df:0d:c7:b6:
         e2:50:ad:77:5b:5b:a7:91:82:d5:d5:0d:dd:71:4f:e2:28:9e:
         c2:55:17:e2:27:66:11:d7:dd:8d:31:d4:f3:f4:54:2f:74:be:
         c6:52:a5:fc:f2:f6:56:93:38:48:a5:d2:2a:99:dc:6b:cf:b2:
         94:ce:e9:68:32:33:fe:ba:cf:dd:fa:e7:e7:a3:02:b4:4a:79:
         a9:a9:02:2b:bc:37:7a:43:d3:d2:32:96:8d:10:3a:b6:09:76:
         48:9e:fb:4c:ff:08:43:bc:6c:dd:d3:ca:06:d3:6c:58:83:89:
         ab:53:44:ad:30:86:f7:c0:e8:88:0f:5a:b1:e8:b2:c9:3e:54:
         9e:54:be:29:6c:61:53:c2:4d:86:e6:43:42:6a:3e:b8:aa:e0:
         1b:ea:6d:f5:b1:d5:ca:29:cc:76:3c:77:a8:2b:c0:f8:2d:30:
         bc:d9:02:fa:13:50:76:44:62:91:88:55:d1:da:d2:0a:6a:35:
         16:ee:24:3a:db:0e:17:92:93:f0:34:7e:62:a5:8c:f3:c2:dd:
         49:ab:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:50 2026 by rpki-client