Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File:                     ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier:          YbQhY7l8IxIXd0Uhzi1wf9uwlpXP0XR9YUPrVs8KYBs=
Subject key identifier:   4F:26:5C:6F:0E:61:B9:D6:0F:74:40:5C:07:3B:A6:49:2C:4D:89:69
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer:       /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial:       019CAAC617F75FC015C21ECEE3C41A4A47DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number:          10F2
Signing time:             Sun 01 Mar 2026 19:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:34 +0000
Files and hashes:         1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: TMrfiFIjOJYdol0SWmvr7koZegob2wqixeY256ygE3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:17:f7:5f:c0:15:c2:1e:ce:e3:c4:1a:4a:47:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
        Validity
            Not Before: Mar  1 19:00:34 2026 GMT
            Not After : Mar  2 19:00:34 2026 GMT
        Subject: CN=4f265c6f0e61b9d60f74405c073ba6492c4d8969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:35:50:4f:be:b7:39:61:28:8b:a2:79:d0:
                    aa:fc:38:ec:25:c7:b0:98:1a:dd:87:2b:4a:fd:7e:
                    54:f2:05:48:5b:46:51:b2:20:20:2f:61:87:be:92:
                    1b:77:69:a1:94:fa:5c:20:16:81:64:50:5a:e3:08:
                    4e:e4:9f:5e:e2:c0:92:76:81:c3:aa:0e:da:fd:76:
                    e7:39:2f:17:a7:0f:ed:a0:56:c5:c3:cb:54:a1:9e:
                    22:cd:25:99:f7:95:12:74:74:f6:65:0f:cd:53:92:
                    f3:50:4e:82:7e:73:fd:5b:69:ee:8e:54:93:5a:b0:
                    eb:fc:3f:8f:ff:98:0a:5d:3d:52:70:a9:72:53:cc:
                    fc:25:42:6d:a8:52:31:99:b2:8e:5d:11:1b:1b:43:
                    59:ab:c5:1b:b3:ed:ef:64:41:ef:c4:6a:8f:89:6f:
                    0a:83:36:84:04:73:82:8c:f5:a2:6b:17:59:30:fa:
                    24:97:15:9c:9a:33:fe:be:7a:09:b8:af:4c:76:c4:
                    e5:69:2c:48:22:d6:35:b2:55:18:be:f5:c5:05:8c:
                    89:16:09:7d:b5:ed:0e:83:44:de:76:2f:a4:36:48:
                    1f:08:c9:46:40:fa:22:c1:1e:68:16:51:43:03:51:
                    13:f3:56:25:d4:fb:a7:46:85:0d:0b:a7:83:01:0e:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:26:5C:6F:0E:61:B9:D6:0F:74:40:5C:07:3B:A6:49:2C:4D:89:69
            X509v3 Authority Key Identifier:
                keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:70:b1:2f:b8:a4:3e:42:6b:f3:0d:93:6e:cf:7e:05:44:2e:
         65:19:63:ba:fe:be:af:8d:ee:d6:40:80:82:1d:41:cf:c7:ae:
         17:cd:be:57:db:8b:80:0e:75:25:fe:a9:e5:8d:d8:d8:3f:e8:
         87:63:5e:1f:c1:17:f2:ec:b3:dd:95:d5:d2:7e:d1:01:06:18:
         04:b2:d9:7d:84:08:e7:9c:37:3c:30:3d:16:e4:f0:f2:1b:68:
         d8:60:46:c5:df:e8:74:2b:bb:84:c3:20:fa:92:08:f4:d3:23:
         8b:94:16:7d:88:86:8f:44:1e:63:e6:e8:ac:af:8a:3e:f9:3b:
         b7:9c:14:ca:75:28:ad:90:e5:3f:84:5f:e0:52:9e:7d:17:bd:
         24:e2:aa:f1:e2:7e:cf:36:f0:2b:76:34:91:3b:90:7e:0d:bc:
         cf:6e:51:66:65:ef:ae:08:78:d4:ff:18:54:eb:0a:46:37:23:
         83:92:9a:c7:23:f2:08:47:97:4d:24:53:80:97:0f:c7:35:58:
         49:17:6a:52:66:e7:96:8c:c8:1f:70:08:fc:42:c5:07:5f:00:
         82:fb:2d:0d:35:9f:ce:96:65:4f:6a:1f:62:ac:c6:05:c8:01:
         4c:68:dd:47:e0:9d:41:28:32:12:60:57:1b:39:95:bb:09:0f:
         59:1c:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:22 2026 by rpki-client