Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File:                     rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier:          yAJ5vPiFOeBDLotUmkpMM3BJ3YljO24vwtsrURvKfFA=
Subject key identifier:   F9:5B:7A:5D:53:51:54:9C:0C:16:EA:39:85:D3:BC:9C:60:FE:21:02
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer:       /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial:       019CAA586CB118CD5CA11D3616DF85BF4092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number:          0711
Signing time:             Sun 01 Mar 2026 17:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:47 +0000
Files and hashes:         1: hKL5QitdPai5IwAtGM4Ywcw5ujM.roa (hash: EwiyCLBBZHnOEl+iUCVn9fJpMBkap4IApaR4l/qmt84=)
                          2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: HNtVNRSeg/COnDwxqSI4MqKU7hanNKCHhlXTvYu/Mp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:6c:b1:18:cd:5c:a1:1d:36:16:df:85:bf:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
        Validity
            Not Before: Mar  1 17:00:47 2026 GMT
            Not After : Mar  2 17:00:47 2026 GMT
        Subject: CN=f95b7a5d5351549c0c16ea3985d3bc9c60fe2102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:36:22:fe:87:8a:53:a3:c4:3e:be:fd:cf:
                    86:a9:cc:78:05:4d:d9:9e:43:3f:b3:cd:9c:b3:2d:
                    2d:47:51:1a:92:0f:3a:4a:c6:3b:26:9f:56:f0:9d:
                    43:6a:04:ff:70:ba:77:d0:6e:b6:f5:2d:db:94:36:
                    96:3e:60:6f:c9:d2:cf:21:50:da:30:02:4c:d0:ae:
                    97:86:dd:97:8c:aa:6a:19:2c:25:34:19:fa:6f:29:
                    34:79:90:9b:ff:0b:1b:05:aa:b4:01:3d:3f:47:4f:
                    d5:3f:eb:9c:82:a0:5e:e8:af:7c:70:10:dc:48:c7:
                    2b:76:76:d2:ed:fd:9f:5e:81:18:f5:f9:0a:8c:a5:
                    12:d0:b0:37:52:05:8e:f8:9b:92:07:5d:c2:3f:0c:
                    de:c9:e9:40:55:d6:bf:8f:13:55:2d:a6:ea:1c:3a:
                    ec:9b:9f:82:a4:3e:12:05:47:db:a8:4f:8e:7d:ab:
                    02:ec:e9:82:9b:81:31:03:89:65:56:e8:99:dd:7d:
                    65:ec:08:fe:8b:29:21:61:9d:ed:1a:0a:b4:06:aa:
                    53:b9:a9:be:df:0c:a5:bb:78:25:c3:b2:65:ed:aa:
                    fd:20:1f:4b:42:bf:37:25:8a:54:a0:e4:2d:45:54:
                    c3:6a:92:ca:c4:fa:11:99:dc:59:62:c7:fa:a2:44:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5B:7A:5D:53:51:54:9C:0C:16:EA:39:85:D3:BC:9C:60:FE:21:02
            X509v3 Authority Key Identifier:
                keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:20:ed:97:31:c8:32:02:d4:16:ce:36:f4:4b:ec:d0:1f:75:
         1a:c1:9a:f1:1c:02:21:27:d7:24:22:1c:6b:69:1d:d3:51:ad:
         4a:ab:ea:e6:ad:84:dd:32:bd:d8:f6:1c:4f:67:0f:52:44:7a:
         5d:ae:5c:13:cd:70:b7:32:1f:79:3f:c7:a5:45:2f:d3:2e:4c:
         43:4b:f0:8d:ec:95:62:ca:9e:e8:02:20:6d:8f:2a:d1:8e:cd:
         90:a6:65:2b:68:5b:64:84:9d:42:ab:db:6c:50:ab:fe:eb:12:
         a3:62:ff:9a:3f:84:13:d7:27:ba:5b:6e:5a:0c:9f:77:e9:e0:
         57:bd:b5:5c:fc:fd:5f:21:ff:80:a1:0c:63:b7:00:a7:33:34:
         29:2a:a2:10:97:7f:ed:d0:2a:55:eb:1b:e0:b6:68:1d:aa:06:
         b7:3c:a6:20:31:ab:ed:42:2a:1e:ca:0b:84:05:b2:12:45:93:
         ca:a5:dd:1b:a1:48:92:e1:b6:a0:d7:ca:88:34:d4:db:93:0e:
         a2:c5:b3:ac:70:98:0f:9a:18:cd:ad:c2:0a:c5:2f:80:fa:10:
         89:57:b3:ba:4b:73:8e:ff:a5:48:91:50:e3:62:89:a0:7a:1a:
         ff:fd:a1:76:bc:7c:09:61:a9:28:52:fb:31:3f:25:a8:1c:55:
         68:61:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:34 2026 by rpki-client