Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          BOA3EqgwFMlFIRdQ1BsqrNKyd9Uf5ejARXZWX9KqfQY=
Subject key identifier:   7E:1F:06:9E:94:E0:EA:5B:3B:86:75:EE:D2:AC:BE:90:F0:3F:49:1C
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       019CAC477C0659C7B2D9EB72B8E12D1B69E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          10D8
Signing time:             Mon 02 Mar 2026 02:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:31 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: PtUozfn5zSaQyQSNU3CsNM4ohRkCHm+MNOO2nbusRKE=)
                          2: SKcH6GqAnwSkb7fUKCyzsH2pE4c.roa (hash: FlzY0BJvsluyy6RMybQuGpqHaLrEW1okMJt3+ASEjLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:7c:06:59:c7:b2:d9:eb:72:b8:e1:2d:1b:69:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: Mar  2 02:01:31 2026 GMT
            Not After : Mar  3 02:01:31 2026 GMT
        Subject: CN=7e1f069e94e0ea5b3b8675eed2acbe90f03f491c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:4a:c6:0b:d8:54:10:d3:d6:21:bb:b2:9e:
                    dd:c6:b2:88:c5:57:a7:15:52:38:2c:6d:89:08:a5:
                    86:f9:b5:4c:a4:5e:f8:d1:10:a8:0f:8e:7a:ae:68:
                    b0:eb:c4:27:cc:5f:d0:13:15:f2:7f:e6:61:40:5e:
                    6c:bd:a1:4a:dc:6f:e0:80:c1:8e:9d:7e:bb:cd:56:
                    58:bd:0f:d8:51:0e:af:03:b4:b9:2d:6d:0e:5f:d1:
                    d0:a6:e8:f7:ba:ed:8e:2a:df:65:a7:24:61:f1:f0:
                    af:9d:3d:90:fa:69:07:f2:44:b4:b2:b4:6f:52:02:
                    4a:97:cd:50:be:a9:5e:f1:69:25:06:96:39:39:53:
                    49:b2:bc:26:8d:99:c9:37:dc:74:b6:60:1f:cc:4f:
                    97:95:ef:39:8a:a1:ba:4c:1b:b8:eb:6f:96:9e:0b:
                    01:90:ad:85:01:27:dd:d7:ff:49:0e:8d:5f:7c:63:
                    11:c1:cf:72:22:bf:06:43:3e:85:62:d4:0a:15:26:
                    d8:45:1a:1c:3a:ad:1e:72:be:b3:ba:79:90:0d:43:
                    5e:9e:e0:03:f6:68:d8:9d:c0:ca:e8:3e:1f:fa:bc:
                    00:5b:7f:a9:e6:49:33:85:5d:49:ba:c0:32:a2:1b:
                    8b:92:21:ea:00:cf:84:d3:f2:72:36:6d:05:4a:4c:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:06:9E:94:E0:EA:5B:3B:86:75:EE:D2:AC:BE:90:F0:3F:49:1C
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:ec:6d:42:16:29:1a:5e:76:4c:79:f8:9a:95:9e:73:b6:
         25:27:b2:d7:33:b1:7a:21:72:3e:05:91:0a:d8:25:e3:69:90:
         87:25:3f:cc:ec:23:16:27:3a:f1:91:3b:3c:7d:9a:f8:2b:54:
         1e:13:b6:27:d3:6f:c7:35:b8:d0:58:4b:db:dd:67:15:9c:da:
         ba:98:98:40:0d:5c:0c:d3:5a:d5:65:b2:75:38:09:c9:5a:28:
         46:27:22:f3:56:31:97:e0:e5:18:ec:65:07:b0:ed:e8:42:2a:
         0a:b0:00:fc:ab:d6:3a:aa:7c:e8:b8:0f:4a:5e:53:be:e2:0b:
         f5:15:99:eb:be:a1:6b:65:c8:be:30:5f:d9:d7:dd:1b:79:7e:
         ba:16:1e:46:54:ae:51:14:6e:af:6d:69:15:51:3c:39:b0:5e:
         3f:ca:f0:57:1d:96:f2:f8:53:94:76:61:ee:a6:32:63:9d:8d:
         8f:d9:e0:2b:21:1c:33:a1:04:84:bd:11:3a:17:b9:32:0e:73:
         64:c0:e1:0f:4e:e9:ab:d8:6d:71:c1:e7:06:40:f1:91:c8:2e:
         6f:9a:fd:35:f4:91:6a:e5:a8:e3:53:af:12:59:e8:fd:95:4d:
         19:5f:c8:47:c5:54:a0:b0:1b:81:21:51:57:7f:3f:71:39:22:
         3e:35:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:39 2026 by rpki-client