Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          KUi2m2lCi5YZFyYiWwsOmFWmVHV9o1GWl08kqKulJoU=
Subject key identifier:   22:1D:64:C3:13:4A:FE:BD:E8:D4:74:28:77:B6:A5:27:FE:6B:40:5B
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       019CACEBE662917DD1E7F36B148CBEAF2815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0E35
Signing time:             Mon 02 Mar 2026 05:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:06 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: iGKV9inrTuAmF52cElW8QU3MthwwBJD74M3/8RfNKJw=)
                          2: qyHL6II4esJ4dc5VWl8lMms3EA0.roa (hash: XUNHvMm3tr618bDepCNFHXOwOdAqjvCOtPPWHwwDwkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:e6:62:91:7d:d1:e7:f3:6b:14:8c:be:af:28:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Mar  2 05:01:06 2026 GMT
            Not After : Mar  3 05:01:06 2026 GMT
        Subject: CN=221d64c3134afebde8d4742877b6a527fe6b405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:0c:5b:f2:d3:3a:e3:d0:22:fe:7a:30:a5:
                    97:1f:c3:6b:1d:f0:6a:db:25:00:e7:ac:c8:e7:8e:
                    38:73:d7:7f:00:56:fe:57:c1:ab:2a:98:82:59:42:
                    0a:2e:a0:f9:0d:1a:ae:66:69:0e:c4:70:2e:fd:1a:
                    da:4f:f7:60:09:f5:e3:d0:1e:07:de:fc:83:22:ad:
                    8d:48:e3:0b:21:f5:27:33:b7:ea:bb:3e:d3:97:14:
                    9d:6b:5e:21:2c:af:48:c2:12:2b:fd:73:3b:ca:34:
                    63:9b:b5:47:ca:02:eb:5d:00:94:48:a0:aa:4c:f9:
                    3d:09:ac:04:b3:89:e4:64:4e:41:d8:e7:69:57:f8:
                    7c:cf:9a:8a:0e:ec:70:76:ac:d7:78:79:f9:37:94:
                    9c:dd:11:91:82:70:48:4b:83:ac:d0:94:e7:f5:9a:
                    33:50:53:96:ad:81:a8:6f:92:c1:87:ef:8c:39:d8:
                    42:60:38:4f:20:9a:ab:13:ad:c3:66:89:07:de:d7:
                    e9:4c:6c:33:0f:27:4c:0c:fd:de:7f:e1:a9:6d:76:
                    47:a2:6f:c8:ba:d7:69:7a:3a:00:b8:d1:8f:f5:6d:
                    89:80:f2:7b:6d:20:3c:1e:32:e2:38:87:d7:0c:f8:
                    b7:a0:67:2f:a1:13:a3:bc:90:1d:19:94:40:a2:e1:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1D:64:C3:13:4A:FE:BD:E8:D4:74:28:77:B6:A5:27:FE:6B:40:5B
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:54:20:10:88:7c:63:13:f0:c5:0a:b0:d4:af:f4:96:c9:56:
         e1:fa:80:bd:ef:1e:b0:e5:64:b2:69:53:f0:09:76:73:26:bd:
         2e:ee:df:b5:01:12:f9:80:73:92:b3:55:4a:90:eb:2a:1e:3e:
         99:91:bd:b6:30:1d:d0:bb:12:7f:d8:a6:77:49:81:d8:9e:a2:
         da:cc:ca:61:ef:12:57:42:b1:ab:67:bf:d4:7d:58:08:7f:4e:
         5a:0d:95:45:e9:23:89:4d:ab:20:2e:35:b0:65:af:07:0f:7d:
         e4:19:cf:ea:7c:8c:12:1f:dd:bc:fd:a0:d0:2c:95:18:5d:f3:
         22:2a:1c:35:9d:37:f4:8a:96:28:e1:3f:f4:65:ad:40:33:57:
         90:18:b2:1d:54:b3:6c:78:e8:d7:4b:15:62:3c:2c:89:4d:4f:
         52:c0:9f:65:4f:ef:a5:25:57:06:95:6f:bf:9d:ea:57:19:73:
         4b:75:21:29:46:5a:5d:bd:8c:a5:fd:08:c4:9d:bd:1f:51:e3:
         53:8e:1c:b7:e1:7b:c9:a0:17:46:a3:2a:65:71:7a:40:d4:07:
         69:76:29:69:63:b5:98:5e:84:13:29:25:9a:ce:a9:c5:e1:7d:
         0b:44:69:c9:04:b2:54:97:86:2b:df:6f:78:93:92:db:4d:3e:
         84:91:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:30 2026 by rpki-client