Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          6h/HnkyU7mBmmPs8WJGCAwNZQl1Tj/oQJr1jZmSPQ0w=
Subject key identifier:   2E:ED:55:7A:77:2D:46:37:BB:49:88:36:02:B1:78:B6:11:DD:57:4E
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       019CAAC6B58C3E6B31403B1DB0123211C537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          1302
Signing time:             Sun 01 Mar 2026 19:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:15 +0000
Files and hashes:         1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
                          3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
                          4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
                          6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: EK5AFOnvQEDoTYR6ZY+RU8OySZH6EbYv+giU4T/YGBg=)
                          7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
                          8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:b5:8c:3e:6b:31:40:3b:1d:b0:12:32:11:c5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Mar  1 19:01:15 2026 GMT
            Not After : Mar  2 19:01:15 2026 GMT
        Subject: CN=2eed557a772d4637bb49883602b178b611dd574e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:33:e3:4b:17:d4:70:df:77:26:e5:24:31:
                    4e:d2:af:e1:f3:d8:71:d5:a1:f6:53:d7:0f:2b:21:
                    3a:58:4d:47:9b:99:a7:c7:84:93:0a:ed:3a:05:28:
                    32:ee:be:39:82:c5:81:a2:a6:d9:a0:fd:27:3c:ab:
                    33:ed:70:12:04:38:91:e0:e8:a5:3e:dc:91:a5:0f:
                    8a:b4:ba:fa:a2:87:18:08:ab:c9:21:14:03:52:8e:
                    af:59:97:d6:fa:8c:a1:5c:27:2b:22:69:d0:84:51:
                    4a:92:de:62:03:76:c1:b5:b8:ea:3e:52:ec:53:5d:
                    dd:c8:4e:34:03:44:3b:aa:9b:9a:04:bf:c7:5e:7f:
                    e8:5d:48:2a:ff:5a:bf:8f:74:48:c9:f0:fb:8c:25:
                    98:8d:4d:65:2c:2d:20:59:67:88:51:ed:74:30:76:
                    5c:bd:27:28:4c:f4:0a:e4:aa:01:bd:b3:f1:f9:d7:
                    12:34:ba:79:a8:34:1b:eb:1c:db:b4:2f:07:09:6b:
                    28:8d:39:12:3f:ed:e2:98:a7:68:c2:36:cf:1f:e5:
                    e2:15:18:12:fc:61:28:0e:65:c0:d2:30:bd:67:e8:
                    03:39:96:1f:71:94:e8:5c:ec:b2:07:57:ad:b1:39:
                    fd:aa:8e:a2:55:c3:45:0c:33:c0:40:57:51:10:76:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:55:7A:77:2D:46:37:BB:49:88:36:02:B1:78:B6:11:DD:57:4E
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:36:8c:48:91:ac:8e:4e:ed:71:92:4a:59:1c:39:d4:d5:
         0f:52:09:4b:ac:fe:1e:7a:70:9b:4d:cd:eb:17:55:f3:cd:88:
         39:3a:f1:42:b6:57:c5:4d:b5:5f:31:40:9e:1a:ae:47:d5:fb:
         be:f3:68:0e:90:30:a0:ed:b2:57:45:89:65:30:6b:bb:04:c9:
         f1:de:35:b4:56:95:8f:ad:4b:31:39:a7:41:b2:88:08:85:4c:
         ec:bc:b9:e0:51:61:9c:19:71:ca:64:08:99:4a:56:e3:74:68:
         2b:15:17:a9:18:2f:c5:8d:15:ed:3d:ef:36:c1:b8:ca:88:f9:
         c2:1e:47:fc:79:33:18:aa:2c:9b:bd:75:8d:78:08:49:86:84:
         f4:1c:ca:41:8f:b6:cc:9e:e6:3f:f9:9d:37:38:10:18:b5:fb:
         27:8f:48:91:fe:ea:65:36:6a:a9:cb:25:c1:db:5b:ee:5a:1f:
         e2:5b:0e:12:9c:60:1c:ff:7b:f7:02:65:0f:0e:01:4a:76:01:
         d5:f4:47:95:9a:d9:8a:68:50:7d:7a:cd:f3:39:17:79:da:bb:
         ab:cf:69:75:4c:a9:d5:e3:a1:ac:52:78:ad:ae:83:3a:77:53:
         50:0c:36:d8:41:8a:cf:14:51:97:f3:a2:9f:ef:91:c0:67:69:
         6c:23:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:03 2026 by rpki-client