Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File:                     PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier:          FLXp5X2h6Im0rR6l2SEwu0CiQeIfNs1IXf+mG8I0Cpo=
Subject key identifier:   97:8C:02:A6:D9:B9:BE:B4:63:C0:54:81:E4:58:32:10:70:22:9E:03
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer:       /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial:       019CA9B4059F43FF1968E546CCBC526CE318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number:          04A0
Signing time:             Sun 01 Mar 2026 14:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 14:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 14:01:13 +0000
Files and hashes:         1: 0YvRiJaJZjqiY4U-xsumT6SoggI.roa (hash: YTiMe+1zJLvdrTTLNgEUB7xot3ds3X6F9h1I4Xe21t4=)
                          2: B3iq0ONo7KLOXNajJEU9_fT8nMA.roa (hash: siU5btEhE4XbyXfdsJsLAjTiTcogO6P0/rPXIN7WNVQ=)
                          3: IwL0FMLGOg5VqlW52QhR55d_wK8.roa (hash: Aq8zdRXcEkkg8WYuPHmD2/Gn6hy/jyUt5aM4M2GLRVo=)
                          4: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: OjsLCtGsyKTlIt/bjK9QRwPvlkoM5LlfHIUtB30wrO4=)
                          5: WOoCoLlmgXWyjK9qc9u-G0Pct24.roa (hash: lAKUdMYHZA1+80qntfhhpebRSlcoxO0/6Bne+KUexMI=)
                          6: gAidUOyTKtWsqogbz8Z7j-XZYdU.roa (hash: lrMZ/6KYodQFNtZQsABnSoAbHRdnZBb25oeXCjN3StI=)
                          7: uYBeqEVIhrx2gm5XzZWN3p3D4AU.roa (hash: K8Zss15V+Clx8kaH4kgNih0FONp94O63mbG65PyxQS0=)
                          8: wQa-_QrhebKsuNtc3pbAHGeGKYE.roa (hash: mXyLCczbJEb1sWHa1tj9M1BYnDbJgfQv+z61kz4D2so=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b4:05:9f:43:ff:19:68:e5:46:cc:bc:52:6c:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
        Validity
            Not Before: Mar  1 14:01:13 2026 GMT
            Not After : Mar  2 14:01:13 2026 GMT
        Subject: CN=978c02a6d9b9beb463c05481e458321070229e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:12:3f:cf:a8:2f:e6:66:19:a2:6c:8f:06:
                    dc:1c:44:84:39:66:7e:17:91:7c:13:b7:12:96:8a:
                    8d:5d:4c:ca:f0:96:27:bf:1e:6e:13:22:f7:73:fe:
                    a2:ec:74:7d:42:05:73:bd:75:a2:d3:a0:34:77:48:
                    81:cb:ff:fc:e5:b7:7a:5e:73:87:88:9b:df:f4:b9:
                    b8:9c:ac:5e:8f:39:7a:a8:d5:66:f9:a1:c4:cc:cd:
                    50:c4:c8:eb:5c:44:d6:d2:95:a5:ad:ef:5b:9a:a6:
                    8e:7a:5a:ef:ce:07:c7:e3:db:e1:7d:a7:a2:e8:85:
                    aa:9a:34:32:cf:e4:7a:a0:58:d5:c0:cb:9b:29:cb:
                    4c:36:dc:0f:1c:d1:0a:88:f2:8e:a3:a8:70:56:8c:
                    0a:a0:6e:db:3f:8a:51:1b:8a:b8:ae:fa:cd:cf:3f:
                    bd:bd:83:3a:d4:a1:e3:be:3d:f0:c6:94:9a:32:9e:
                    36:62:a7:70:53:f2:f3:2d:cb:82:d0:d4:f6:56:52:
                    37:ec:e5:d2:d9:81:63:17:48:39:0a:53:3e:22:e9:
                    bf:d9:28:a4:38:78:60:1f:6d:67:16:e5:98:b8:ea:
                    35:c0:8a:b5:98:32:d0:5f:d1:7c:12:70:fc:75:c1:
                    c9:61:6f:78:70:1c:44:c0:0e:d1:55:00:83:bf:b6:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:02:A6:D9:B9:BE:B4:63:C0:54:81:E4:58:32:10:70:22:9E:03
            X509v3 Authority Key Identifier:
                keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:53:6f:de:24:a3:94:ff:9b:62:fc:ae:98:6c:f7:ff:26:
         dc:4c:ba:bb:90:f9:6a:e6:23:ea:37:17:5c:6a:96:56:18:0b:
         c2:53:8c:0a:61:86:8d:73:f9:b2:a2:f4:a6:92:80:1f:7b:7e:
         10:8d:d1:3f:d7:60:02:28:ed:df:71:c8:ec:8a:c5:0b:0f:ff:
         bb:58:5f:51:e9:4c:fc:53:1b:b5:36:5c:f3:a4:e6:b8:aa:ca:
         4a:50:44:2e:b0:90:37:23:10:56:1a:00:75:cb:6e:6e:a4:ac:
         67:33:2b:4d:99:b2:04:d2:1f:7f:f9:2e:71:3c:09:73:a5:b3:
         ee:1c:dd:8e:09:87:0b:62:81:de:7e:b5:b1:05:1b:ba:34:db:
         ae:bc:7a:7a:61:d9:26:19:2f:e7:c0:34:d4:1b:cd:2c:bb:37:
         ce:67:aa:9a:e2:69:6e:ee:7a:b5:13:c3:1e:56:d2:82:ce:c4:
         59:c0:d6:3d:49:5d:55:6e:d0:12:94:ad:5c:07:96:61:7b:bd:
         3a:66:ab:19:58:5d:79:0a:a5:03:05:31:ee:c4:e1:17:52:0a:
         16:af:29:16:10:28:bf:b3:6d:d2:13:95:26:a7:9a:2b:72:1c:
         30:e7:52:82:1a:2d:a7:60:2b:a2:b3:67:24:b6:05:f0:db:49:
         92:63:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:01 2026 by rpki-client