Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
File:                     mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft (raw, json)
Hash identifier:          +VHOafvj4IGHclMcHUtadgrWlgVy3mduoGgL+m25f9A=
Subject key identifier:   D1:81:D7:07:58:68:C1:1B:C7:9A:EA:92:D4:7E:EC:5A:BA:40:5F:C0
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Certificate issuer:       /CN=9915558c6897fea224855cf60381857354708411
Certificate serial:       019CAC7E2E9CAD432916EF8EF648594B26F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
Manifest number:          0EB2
Signing time:             Mon 02 Mar 2026 03:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:16 +0000
Files and hashes:         1: 1-pyWFmZtXqYf6Z4BxMdOvDY24kA.roa (hash: nfnTx06SNYwE/jmNPthPHW9t1uvbHZ9a2d4wty6Jey0=)
                          2: mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl (hash: 8pq/ERGeg4EwLzUeJw7GP+8oBKLmyYyLvcfcjEMEkDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:2e:9c:ad:43:29:16:ef:8e:f6:48:59:4b:26:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9915558c6897fea224855cf60381857354708411
        Validity
            Not Before: Mar  2 03:01:16 2026 GMT
            Not After : Mar  3 03:01:16 2026 GMT
        Subject: CN=d181d7075868c11bc79aea92d47eec5aba405fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:a7:f2:43:66:31:b2:68:93:70:04:15:e7:
                    6a:cc:8d:b3:63:6a:14:bd:98:45:4a:f5:9c:57:03:
                    8a:37:c0:e3:62:6a:ea:c1:af:53:f6:55:61:2d:c8:
                    fb:9c:4c:dd:4e:35:b2:16:65:c4:20:30:bc:de:7a:
                    2c:d5:80:d8:1a:59:d8:e8:1a:bc:9f:b2:0c:29:b3:
                    c9:2e:b5:a4:f8:07:3e:42:7c:2a:f1:83:6f:f8:6e:
                    be:a1:5a:55:f1:8f:5e:f4:e7:23:c8:15:64:6b:f0:
                    83:13:22:75:97:44:ac:80:f7:74:76:7a:a2:f2:5e:
                    12:d8:89:64:09:09:9d:52:73:2a:b2:0e:a7:c8:d9:
                    b1:51:77:d8:41:52:41:d7:b6:98:fd:9b:4d:00:ab:
                    66:59:03:39:9f:27:8d:1b:2e:57:35:2f:ca:c0:15:
                    cb:c8:a6:e0:bc:4a:61:d4:47:0c:93:f2:30:1b:3e:
                    7d:56:c7:09:84:ac:cb:02:c5:e9:8b:30:96:f8:70:
                    dc:b2:14:e0:0c:1c:7c:42:ef:95:ed:bc:22:bd:a9:
                    e2:e7:97:90:25:43:13:c1:1e:e5:7a:69:02:95:dc:
                    51:12:f7:39:85:b9:34:f6:2e:fd:0d:6b:a3:59:97:
                    e4:eb:fa:84:52:d2:e8:75:3e:cc:35:5e:db:4f:5f:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:D7:07:58:68:C1:1B:C7:9A:EA:92:D4:7E:EC:5A:BA:40:5F:C0
            X509v3 Authority Key Identifier:
                keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:82:7d:6b:3b:e5:81:8a:e9:dd:42:66:35:31:d3:cf:f3:
         02:79:89:f9:d5:9a:c1:e9:a9:d5:d5:c0:b2:43:50:00:40:ad:
         d6:ce:41:0b:fc:9a:0c:1f:81:fe:38:8d:81:92:ad:d4:fe:75:
         e5:07:b9:f8:c8:98:7f:c8:3a:bc:a0:63:81:70:7b:31:f0:a2:
         d1:e9:5b:95:3b:3c:6d:2d:25:92:b2:12:f1:f7:06:47:af:24:
         bc:b4:1c:de:82:34:4f:46:b0:54:ff:d4:f2:68:04:d8:a3:7a:
         1e:37:96:ab:cf:25:4d:7d:75:dd:c8:3f:fd:93:09:41:96:ef:
         56:76:a4:1d:42:1a:ff:b6:3b:47:0e:75:be:35:ae:a9:8d:46:
         2f:18:cb:fb:a1:5e:c0:59:69:94:1f:8e:48:7a:d8:d3:4a:23:
         c8:89:f3:00:fa:af:64:33:1f:8e:47:8c:56:9f:c5:b5:3e:3a:
         22:df:b1:68:ea:46:59:98:4f:ec:db:54:90:20:2b:92:6c:7b:
         86:5d:af:39:25:67:c3:80:66:3d:85:62:05:67:02:b9:fc:46:
         63:1b:c9:e9:31:e3:c2:45:8a:d1:94:df:2b:3a:15:46:5c:06:
         cd:da:d1:45:a7:f8:dc:8a:77:bc:d7:5c:d2:b0:84:14:a8:e3:
         aa:5c:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:05 2026 by rpki-client