Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
File:                     rlLbggkLND-J98Y3z0GpS8_UNGo.mft (raw, json)
Hash identifier:          0tZsWn4t0T9jqxrhGU8kbMkuYGhaTtZDCiVQZTRoMsA=
Subject key identifier:   0D:62:64:53:65:77:EA:4D:D0:21:22:E2:84:88:6D:18:97:3B:21:20
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Certificate issuer:       /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial:       019CAE6C19BA7F73F15AA14ABBD176AE3613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
Manifest number:          0175
Signing time:             Mon 02 Mar 2026 12:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:45 +0000
Files and hashes:         1: 7ydENpjQareWHpO9uslcqsis6UA.roa (hash: wTeA8bx96xEJxxUYSI6aHxzjGmdwgzhbWWttVJ8dPDw=)
                          2: Da4zofv_3zQcJHV3L83VNbH7UEY.roa (hash: p+hoOJTvA0x6ON4Ggw3OE0Gfu4aJUBLpv1YI+CkSFhc=)
                          3: co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa (hash: kD/drcWwBr6x5xqwMF16Xc4LXWddRLyNIKIsPwoN+78=)
                          4: eEnkFR6pXLhlHa3K_hBPWDi1w58.roa (hash: SV4R5qDN4YbUrJOQ/Cn0+Be7TsAwFGb5aLPqwWgd988=)
                          5: rlLbggkLND-J98Y3z0GpS8_UNGo.crl (hash: AGer+j4ySa8yDR0dux9POuD/6kFAsupRXepRivU3hKY=)
                          6: sN3nanuzELsiTRZZnMMhpzRL9CQ.roa (hash: iIsUfUIoF5P1otrI7EzZzKCaeejtCwHBloYzwegYqT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:19:ba:7f:73:f1:5a:a1:4a:bb:d1:76:ae:36:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
        Validity
            Not Before: Mar  2 12:00:45 2026 GMT
            Not After : Mar  3 12:00:45 2026 GMT
        Subject: CN=0d6264536577ea4dd02122e284886d18973b2120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:14:2a:48:50:e3:ae:83:e0:57:10:9f:97:
                    56:d7:d5:a3:d9:23:dd:2f:c3:a3:fb:65:33:59:e6:
                    bd:13:9c:f4:8f:ac:b6:23:23:87:cb:c6:ea:4b:4c:
                    cf:f7:36:af:f6:47:e9:95:a6:5d:19:8c:cc:2b:3c:
                    2d:57:76:71:06:21:5a:cc:19:7e:db:9d:90:18:53:
                    3d:86:43:dc:35:e9:5a:83:1b:83:83:c8:e3:a0:fc:
                    bd:b7:55:4f:0a:05:f5:ba:19:80:b6:be:32:4e:69:
                    ad:24:17:b2:cf:fd:45:5f:32:dd:c9:07:03:83:06:
                    8c:9d:3e:1f:89:d6:ba:f5:23:5b:ff:fc:15:91:4c:
                    6c:96:1f:59:e5:e0:6a:06:d3:e4:6c:ab:b8:79:b4:
                    15:92:74:cf:ff:4b:58:d2:e8:3e:45:17:00:53:b1:
                    49:31:ac:9e:a5:6a:fd:e5:20:8e:e2:e4:46:42:5d:
                    5f:84:be:2d:f2:fa:a7:ec:b3:16:db:b7:f0:65:c8:
                    f2:02:52:59:ff:c1:44:00:83:5c:19:7b:ae:a5:97:
                    24:e8:ea:bb:26:5a:88:80:e1:b4:9d:9c:f3:1f:d1:
                    47:42:2d:b8:cf:d9:f1:65:0d:eb:cb:05:5c:9b:cf:
                    bc:f4:9b:99:93:04:a8:4d:74:9e:7c:ab:95:a4:50:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:62:64:53:65:77:EA:4D:D0:21:22:E2:84:88:6D:18:97:3B:21:20
            X509v3 Authority Key Identifier:
                keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:74:0b:b0:0d:43:d7:cf:34:dc:d8:b3:e7:1e:3a:0f:fb:73:
         21:46:d3:ed:ab:61:38:41:1c:da:a2:d3:cd:48:7d:83:cc:b3:
         05:f9:c9:37:d3:33:3a:9a:13:72:4a:73:12:29:0b:03:e3:75:
         90:ea:0e:48:ae:e0:ed:c5:d4:1c:22:80:f9:35:67:ca:d9:54:
         fa:39:be:b1:75:74:c2:b4:dc:46:49:f8:ef:d1:36:56:38:1d:
         d7:ae:2c:d9:30:25:b9:1b:3d:5e:50:d1:ae:0c:b4:1a:62:f5:
         95:62:7d:3b:95:26:76:7b:bd:1e:d5:50:fc:37:b8:d7:d7:a9:
         e3:fb:c1:b3:54:2b:20:e9:c7:02:53:8a:7f:9a:cc:ea:cd:da:
         9e:af:99:12:8e:52:b5:29:a4:2b:72:67:18:c3:40:f5:4f:35:
         46:26:19:3e:ba:9f:64:06:e4:74:0c:cd:c2:a7:c5:26:81:63:
         38:2a:97:d9:39:bd:0d:40:58:ed:e0:1f:bb:30:12:98:a8:63:
         24:36:6a:b6:95:5c:70:d9:d6:e2:78:ce:f0:7a:97:87:2a:d4:
         ca:6e:e3:8b:09:a4:c5:91:5a:38:c6:ae:40:2f:53:d0:96:24:
         43:69:b2:d9:09:89:31:83:f0:59:88:7b:d8:50:9e:54:09:cb:
         05:27:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:09 2026 by rpki-client