Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          vaky/o83p8VFrmAADq6HgBHKSeA1T5RsUia28GbZvjc=
Subject key identifier:   0B:AF:67:29:EE:39:DC:45:B8:D9:67:A4:5E:F4:4F:39:8C:2F:CD:EB
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       019CABD9FF5F5018A9C174D407442BC28740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 00:01:56 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:56 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:56 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: sSSLnJlCDaFYHtjpWHdyXe/IiVnO5loeDYJ1IdaPoQQ=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:ff:5f:50:18:a9:c1:74:d4:07:44:2b:c2:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: Mar  2 00:01:56 2026 GMT
            Not After : Mar  3 00:01:56 2026 GMT
        Subject: CN=0baf6729ee39dc45b8d967a45ef44f398c2fcdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:d8:3c:94:2f:45:3e:a0:fe:66:1b:cb:d8:
                    01:d6:b7:3e:f8:29:91:42:58:a7:8c:72:d8:92:6a:
                    75:e2:b3:ab:a0:bb:cd:be:15:ac:bc:71:a9:be:0f:
                    c4:10:1d:59:3c:bf:d7:91:c5:63:6c:e9:8c:d9:95:
                    9a:bb:4e:b7:43:29:29:9c:83:f1:70:39:05:f4:d5:
                    f9:b3:fb:91:92:ba:85:a2:bc:03:47:36:3d:1a:97:
                    95:68:79:dd:d6:cb:79:79:d4:cb:cf:1c:b0:c6:01:
                    ea:95:bb:6f:c1:d5:15:fd:e1:87:31:60:3a:74:19:
                    75:01:d4:e0:7b:41:82:93:7e:a5:2e:b5:37:96:a5:
                    90:59:83:59:5b:1f:ee:e5:e8:b8:89:d1:a2:3e:09:
                    78:d6:a6:96:a2:10:c6:b2:cd:df:9c:ae:15:0a:63:
                    26:6a:89:dd:9c:b5:de:8d:ec:3d:7e:a9:b4:fd:80:
                    67:47:92:f6:80:fc:57:ef:95:bc:25:21:b3:bd:ac:
                    6a:f6:b3:6c:f0:ec:d5:b8:f4:4d:e4:5c:eb:cc:c4:
                    39:02:cd:53:11:2b:1b:12:b8:d4:2f:2e:02:14:54:
                    3c:f5:63:a7:f5:f0:be:fa:de:6d:a1:a9:57:8e:af:
                    56:5f:a6:4e:92:42:b5:b8:33:25:38:d4:9f:dc:9e:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AF:67:29:EE:39:DC:45:B8:D9:67:A4:5E:F4:4F:39:8C:2F:CD:EB
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:b5:02:0d:d8:9e:56:47:6a:62:55:f3:17:5e:7e:85:31:
         4b:43:3b:1e:a3:4a:82:32:f8:a1:a8:7d:4e:bf:41:20:0b:4d:
         1e:de:3a:fa:3b:af:e9:53:59:7d:7f:05:b6:32:5e:7c:ef:71:
         ea:1f:e8:69:1d:2f:e2:b3:11:64:64:62:57:1b:69:b0:d4:86:
         48:74:12:e5:80:c8:58:af:98:0c:df:77:e2:eb:21:f2:6a:93:
         5e:52:b2:ae:a5:e5:31:dc:d8:25:6c:5c:87:89:eb:0c:33:85:
         0e:89:1c:dd:cf:22:a1:fb:67:69:df:ca:aa:8c:d8:c3:22:66:
         1f:44:5b:a7:10:d4:9b:3f:69:37:2c:a0:10:52:3f:ea:e4:21:
         ee:49:f2:d2:86:bc:89:0d:b0:13:7d:e2:65:40:d2:a4:a1:ee:
         87:5c:4d:f5:f7:ba:68:d2:09:80:dc:61:76:fc:41:69:a4:79:
         27:74:4a:12:0f:2b:4d:64:96:c5:c7:0a:a5:b9:ef:f5:a6:63:
         1d:3d:30:df:f0:eb:ab:b4:8d:21:ee:86:8b:a4:3e:2c:45:7d:
         34:3e:ca:58:5e:f8:86:ef:b0:3a:89:f7:8e:41:aa:58:cb:53:
         df:79:93:2f:14:2a:0a:d5:0d:69:b1:98:8d:af:e1:4d:ef:4a:
         8e:cf:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:31 2026 by rpki-client