Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File:                     K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier:          TsanhU2y+HpuHqYvU1udc+w4ySwthBZbfFWfqx/8f2U=
Subject key identifier:   FE:E2:01:F9:C3:57:C0:7B:9E:2B:57:33:50:0C:10:07:00:7C:B5:AB
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer:       /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial:       019CACEBEBDE4D27D16401B3681FEF9ABC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number:          1026
Signing time:             Mon 02 Mar 2026 05:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:08 +0000
Files and hashes:         1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: C+2eEHWNSNQLMDWBS2rZV2kW4x11BcH4S5R1oy9t4ig=)
                          2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:eb:de:4d:27:d1:64:01:b3:68:1f:ef:9a:bc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
        Validity
            Not Before: Mar  2 05:01:08 2026 GMT
            Not After : Mar  3 05:01:08 2026 GMT
        Subject: CN=fee201f9c357c07b9e2b5733500c1007007cb5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:73:d4:7f:c3:11:76:4c:16:40:93:4a:1e:
                    e8:02:43:0d:4f:66:9b:04:ba:f4:37:fc:9c:32:3d:
                    99:af:fb:02:c1:3f:e9:39:4c:27:20:cc:08:84:72:
                    cb:d0:6c:b6:b9:39:75:a2:20:ba:11:f8:72:2e:0c:
                    8d:29:80:80:56:90:99:61:f3:f9:54:2f:6a:a8:bb:
                    33:00:79:31:a5:5d:d4:89:30:5f:f1:b1:4e:94:d4:
                    5c:07:af:ea:07:8a:0d:73:18:cf:db:3b:42:77:78:
                    f9:6c:bf:5e:35:64:73:ca:63:39:9b:0a:ba:e6:a0:
                    ca:36:05:8a:4c:eb:6b:54:34:17:a2:79:81:6c:90:
                    7b:af:44:bd:f7:e4:8f:87:e1:97:7c:08:88:47:de:
                    d4:03:f2:f0:be:1d:4d:2f:a9:4f:9e:73:28:18:db:
                    5f:61:ef:39:42:41:fb:9a:fc:0a:dc:ef:ae:77:52:
                    84:8c:e4:2a:60:38:97:23:ba:f6:f1:23:dd:7d:96:
                    ff:6d:e6:dd:cb:88:cd:ef:eb:6f:07:dd:7b:3e:f8:
                    72:8a:b6:45:87:5b:0b:25:be:1b:1f:2d:db:81:0d:
                    0c:4d:5a:e6:d1:b6:ac:59:6c:6e:89:be:53:88:95:
                    28:2a:a9:a6:9e:4a:56:c6:a1:04:d2:33:b9:7b:5a:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:01:F9:C3:57:C0:7B:9E:2B:57:33:50:0C:10:07:00:7C:B5:AB
            X509v3 Authority Key Identifier:
                keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:f1:05:a3:eb:d3:6e:b2:88:91:fa:96:55:16:1c:30:b8:
         85:6c:4c:0f:bd:92:1b:b6:af:30:3b:c3:68:53:24:f1:c3:86:
         b6:11:1a:3a:c0:3d:68:d4:4d:62:28:e2:40:7b:d0:bc:f6:6a:
         72:e0:a2:87:17:e8:e9:b8:24:81:00:b0:98:5c:a4:f9:89:3e:
         39:a0:d4:c4:23:b4:d3:74:0e:31:6b:a2:c8:1e:54:31:59:1c:
         2b:77:00:0e:c3:b4:4c:1b:7c:bb:fe:1a:11:63:ba:a4:5e:cf:
         b1:8c:eb:5b:cb:c1:bf:ce:e2:a6:45:8d:e2:9b:22:96:9b:f0:
         d2:1f:35:19:77:10:b3:79:35:e1:e4:73:8f:ce:e4:7d:ed:d9:
         98:34:5f:f7:d7:da:d5:db:aa:58:d5:0a:ee:bb:22:33:1d:b3:
         e3:1f:c9:15:df:a2:82:6e:06:3e:cf:19:98:77:bc:d7:fc:2f:
         c8:8e:a0:15:37:5f:10:3e:41:fd:6e:bb:61:f8:01:1a:26:25:
         f5:1d:36:99:bb:da:90:d8:db:b6:a7:7c:71:c3:e8:b8:90:4a:
         b5:27:b5:23:67:14:2d:14:de:3f:ed:3f:cb:0b:87:ce:86:3e:
         e7:f1:c8:8a:a5:69:a2:25:d3:1a:66:bb:c9:ba:00:a8:da:a7:
         23:dc:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:20 2026 by rpki-client