Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          Q66o1xp0nTbWNFYgh+F6pGV1miwh/0SRGl6YvaMzqTE=
Subject key identifier:   25:FC:D9:CE:66:B4:E4:BF:3E:86:9A:D7:54:08:EB:4E:F1:4B:25:48
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019CADC7891864F883E91B7070EFDD5082D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0E0D
Signing time:             Mon 02 Mar 2026 09:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:00 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: +izMR6ws6ETD58bp6U8AX27ks/9v4ttxS3HIMnTm94Q=)
                          2: 3fB2Cb_YDCoTxRPopF6ntUsOYvM.roa (hash: Yh+GwDYWTXqILjrQtSW4WDz1SsYDHWVx42txs/Q/i+I=)
                          3: TTwK20SxDSqzIyzV0QGO0SmjawA.roa (hash: x2Tzuet+mqmVtk1cFs2lJv6NLw6VZlQyasN9WGmhONs=)
                          4: XnoeLIkYNpYQWVse-yX5iRjTc1s.roa (hash: ptKlPyES08hICN66dmlPtZNxNra0j4is1IcwHdPzbr4=)
                          5: xu7t96CgIHN3hwNmggXTcfk-UpA.roa (hash: iRBThFuWjKJSamtnuVG+6/kq+wDEj0e0hvd45FkbUb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:89:18:64:f8:83:e9:1b:70:70:ef:dd:50:82:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Mar  2 09:01:00 2026 GMT
            Not After : Mar  3 09:01:00 2026 GMT
        Subject: CN=25fcd9ce66b4e4bf3e869ad75408eb4ef14b2548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:e8:5d:9a:ec:f8:94:f6:01:32:a8:e5:c3:
                    da:9e:d6:62:78:bb:37:b5:b9:f1:80:e7:c5:0a:82:
                    bb:08:52:9e:d2:e8:16:7b:e2:d2:3a:01:a9:6a:aa:
                    a6:f4:37:31:ac:4d:0b:0b:b9:ed:d9:25:9c:d7:97:
                    95:40:80:27:66:0b:66:38:e6:59:9d:82:11:02:dd:
                    62:58:25:43:26:1e:db:c0:b4:30:01:b0:29:ff:2c:
                    eb:e7:bb:21:c3:93:28:bb:47:31:c2:61:ca:f5:86:
                    27:7a:6f:1c:da:c9:0f:f0:89:31:8a:8c:12:c2:2c:
                    c9:4e:45:26:e5:67:a2:b6:c1:de:b4:1a:4a:f8:14:
                    9e:01:1e:3c:a8:eb:3c:09:a1:51:66:eb:a1:cd:fe:
                    83:72:63:43:25:50:18:ac:4c:dc:2a:69:f2:6a:11:
                    e0:59:10:e0:ec:b0:36:22:b5:91:ae:76:7c:fd:a0:
                    17:75:f9:4d:4c:f8:cb:f5:3b:b6:61:29:7d:3f:b9:
                    b2:af:22:20:96:fb:2a:a1:3a:be:58:20:28:a2:7d:
                    63:b6:a4:1c:f4:9f:b2:fe:13:aa:ce:3f:6a:e0:27:
                    08:75:86:2d:6a:1d:fa:15:21:93:2a:30:61:20:6e:
                    a5:2b:c9:a6:08:d9:87:61:fb:44:22:47:58:5e:80:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:D9:CE:66:B4:E4:BF:3E:86:9A:D7:54:08:EB:4E:F1:4B:25:48
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:16:5e:b1:81:36:74:88:3b:56:51:45:4c:08:d5:c8:45:91:
         94:d9:f3:22:39:eb:b8:f9:cc:f1:c0:e9:08:f4:12:73:7a:ed:
         5c:fe:c7:cd:7c:78:3a:89:65:5c:1c:2e:63:e7:a4:67:0a:bf:
         c3:f2:15:3e:60:01:fd:48:ae:80:88:6d:62:a7:f5:22:ed:ea:
         47:c6:e6:ed:d8:72:86:29:78:fa:9a:0a:96:f8:b6:1d:de:c2:
         ac:c1:3a:b0:07:22:99:6e:1a:0d:12:4a:5f:64:ca:72:1e:83:
         ae:b7:16:a5:e5:6a:7f:1b:6c:66:bc:c1:8e:dd:75:12:bd:25:
         e3:65:37:61:94:ce:8e:0a:47:c8:91:4a:bd:e1:29:d9:6c:0a:
         29:c6:73:cb:ee:63:f6:cf:8a:07:c6:13:4c:1e:7f:c3:19:9a:
         0d:9f:b1:a8:84:ef:2b:e6:f0:f0:f7:c0:1d:3c:c9:7b:b6:c2:
         1e:ca:98:da:61:7b:ba:cf:cb:1b:2f:db:91:38:72:d4:c3:49:
         fd:87:5a:42:62:2c:17:e4:29:50:21:56:ab:f9:1c:1d:a3:be:
         9f:c3:16:39:32:40:1c:48:a1:c8:6c:02:6b:0e:6a:3f:d1:d0:
         7f:71:a8:fd:d0:9a:14:0f:59:bb:92:27:27:54:ac:0b:b0:53:
         2a:6a:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:23 2026 by rpki-client