Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File:                     _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier:          R9jkSBqB+G0g48YdRqUvPMGrDOj7k/zL6y3wFmEMYQY=
Subject key identifier:   35:AA:84:99:53:01:BC:EE:46:57:48:EA:AC:C5:E2:A9:A6:A7:09:A7
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer:       /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial:       019CAF7E88D88E187285988933ACCA278125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number:          0F1E
Signing time:             Mon 02 Mar 2026 17:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 17:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 17:00:31 +0000
Files and hashes:         1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
                          2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: 1u50RA72bjISXV/XgYGEYQs0acHQ3Bwv1czYRrM0VKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:7e:88:d8:8e:18:72:85:98:89:33:ac:ca:27:81:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
        Validity
            Not Before: Mar  2 17:00:31 2026 GMT
            Not After : Mar  3 17:00:31 2026 GMT
        Subject: CN=35aa84995301bcee465748eaacc5e2a9a6a709a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:2b:a2:ae:28:4c:de:99:08:40:7e:23:a0:
                    7e:9c:57:5d:8b:ae:6d:bd:a5:12:6f:d4:78:b7:78:
                    b7:2b:cb:10:3c:da:93:9c:cb:fa:47:7e:d2:6d:74:
                    f2:c2:c8:b3:37:ce:5f:85:da:e8:0e:5c:12:af:d2:
                    74:fc:23:8b:53:6b:27:42:88:11:c0:f3:b5:41:57:
                    0a:2d:be:6e:41:98:36:29:2d:a7:a1:f7:3d:51:29:
                    fc:cd:e8:20:f4:9a:11:b6:75:97:ac:37:27:36:e1:
                    ab:32:88:3c:b5:01:f0:b9:51:50:2e:10:c9:e2:4b:
                    be:a2:e9:71:5d:e5:11:44:43:00:3a:8f:7d:d5:d4:
                    3d:59:ee:a2:aa:95:09:b1:23:ca:eb:7a:0b:54:2f:
                    be:0f:d2:35:9d:72:54:3a:96:cb:93:18:98:ca:24:
                    66:36:9a:b0:5b:44:4a:92:f1:af:b5:93:33:10:98:
                    89:b5:66:ec:3b:59:da:17:0f:b2:77:a3:f9:44:5a:
                    b6:29:9b:e3:9f:79:c7:fd:ca:e3:bb:eb:c3:d0:5d:
                    3d:99:e9:03:fe:c5:35:0a:33:3e:c5:94:e6:4d:c4:
                    79:37:bb:22:56:70:32:49:c2:43:d0:e9:d6:0e:e9:
                    10:60:dc:ba:b7:a1:96:b6:b5:9c:d0:31:c1:30:47:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:84:99:53:01:BC:EE:46:57:48:EA:AC:C5:E2:A9:A6:A7:09:A7
            X509v3 Authority Key Identifier:
                keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:96:60:8b:24:de:93:86:9a:4f:b8:0c:c0:59:c2:19:f6:
         b5:a3:af:ca:26:d8:6a:da:72:46:86:84:91:e7:f4:be:e3:e4:
         d2:be:0b:db:5b:a8:7e:6f:bc:13:09:25:d0:32:f7:ec:c5:ac:
         8b:6f:e5:00:72:30:3f:5a:13:8b:2c:1b:26:99:88:ec:9f:2a:
         ab:dc:fd:bf:9a:b6:b8:b5:a4:aa:d3:93:ee:1b:bf:da:5d:7d:
         0a:a0:30:4d:72:70:75:04:31:48:e4:2d:7e:8e:24:f4:d0:16:
         1c:1c:73:16:e0:19:e3:12:f4:59:97:7c:35:d7:3a:1c:55:98:
         9d:5c:3c:7c:b1:82:5e:2b:a2:8c:80:08:83:70:2f:93:a6:9d:
         b1:d4:4c:a1:66:5d:77:57:62:dc:e5:86:a2:9e:38:8a:b7:0b:
         c9:29:f7:4e:c9:c4:7e:24:c9:9f:4a:3d:eb:78:50:f5:6a:30:
         21:7f:63:2e:4f:f9:a1:c4:04:5d:2f:f6:c3:0a:97:63:67:83:
         b3:39:81:8f:9b:5d:3d:32:78:82:3b:e0:f9:43:cb:c8:ec:0f:
         f4:57:dd:c7:2a:62:b8:90:7f:a5:a4:52:65:2e:34:e4:cb:9f:
         ca:fd:17:c6:c0:f6:02:fe:28:b4:95:65:1d:9e:5a:7d:91:2a:
         49:b4:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:51 2026 by rpki-client