Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          kY8yjd65qJ47nI5Y0e1TS3Eqn9zp6FV/xfdSMBqhhMw=
Subject key identifier:   F4:C6:F4:80:34:17:64:84:0A:3F:8B:C0:B0:09:EE:38:28:F4:31:88
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       019CACB569D4891F6B5857119956FA111EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          0978
Signing time:             Mon 02 Mar 2026 04:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:36 +0000
Files and hashes:         1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=)
                          2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=)
                          3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=)
                          4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=)
                          5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=)
                          6: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=)
                          7: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=)
                          8: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=)
                          9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: 9VMXYuhSevg8AdYIGEH9WkbDXukxFIJ7zkGla4djqZ8=)
                          10: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=)
                          11: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=)
                          12: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=)
                          13: dUjFQLESWsl_QXSBInmxoIlDaEw.roa (hash: pbE9s/6VGIS0LorujhO3ihuwl0L3NPmLHXN9zAPkenI=)
                          14: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=)
                          15: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=)
                          16: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=)
                          17: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:69:d4:89:1f:6b:58:57:11:99:56:fa:11:1e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Mar  2 04:01:36 2026 GMT
            Not After : Mar  3 04:01:36 2026 GMT
        Subject: CN=f4c6f480341764840a3f8bc0b009ee3828f43188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:5a:82:ca:68:b8:1a:1d:61:8c:a3:85:df:
                    01:53:71:35:c7:c5:d0:c8:2a:63:2f:bf:04:11:9a:
                    c7:6f:96:2c:a4:3d:c9:49:48:d5:cb:76:f1:e2:bf:
                    9f:08:07:ac:b9:4f:37:a8:3b:05:8e:4a:51:e8:2e:
                    c5:43:07:31:54:9f:96:de:a8:14:45:4b:0f:ac:6d:
                    28:fa:d1:f3:f1:90:41:7a:2e:f8:9b:59:4a:64:86:
                    51:eb:b7:22:e0:17:db:39:56:df:77:f1:ed:a6:09:
                    6e:be:54:cd:f8:b8:ce:c3:23:d1:87:69:6f:86:70:
                    1a:47:a4:0b:5d:45:07:0b:ab:17:74:98:6f:03:4d:
                    d8:b7:ee:18:9f:11:56:28:01:97:59:67:d8:f3:f6:
                    c8:95:1d:8a:b5:f2:f1:84:70:1e:30:2f:d2:2e:7a:
                    5f:e2:03:f2:fa:22:08:09:38:0c:74:0d:db:b6:22:
                    c2:60:1d:29:53:06:61:0a:8b:00:b8:87:41:61:6f:
                    3a:65:4b:a5:ff:b4:89:80:50:fa:8a:99:4e:de:5c:
                    f0:3f:b8:e0:c2:62:32:cd:5d:03:f9:10:55:73:f4:
                    cf:e5:c0:6f:c6:22:f9:06:81:66:0a:5f:73:b0:0f:
                    76:41:0b:15:ad:81:33:ca:2c:a8:66:a7:27:e5:04:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:F4:80:34:17:64:84:0A:3F:8B:C0:B0:09:EE:38:28:F4:31:88
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:4c:f6:8f:bd:c0:86:13:71:bf:16:dd:b4:ce:29:3d:6a:
         cb:22:0c:cd:03:73:7b:18:7c:f0:7d:ff:23:a9:9a:82:d3:64:
         be:c2:15:a8:a2:6f:00:dd:79:d5:b7:9c:24:96:e0:f7:f4:01:
         f8:b0:88:d3:f6:00:5e:dc:28:b4:19:52:0d:2c:8a:e8:73:08:
         7c:a6:46:ac:3d:b1:8f:ea:37:a5:bd:23:59:27:c6:75:68:b5:
         f0:5d:f5:97:2b:b3:4e:16:90:29:00:21:bb:1b:23:47:cf:41:
         b7:22:31:ff:11:01:87:c7:92:e9:bc:8a:fa:74:07:c6:9d:76:
         0b:6a:e1:ca:f1:a0:33:92:ae:81:e6:09:c4:cb:76:3e:4e:79:
         ae:c7:3e:55:4d:d7:36:d8:32:14:ec:1d:dc:e5:16:f2:e5:df:
         df:11:9c:3c:2b:d9:e0:b6:5f:c4:ef:f0:6e:25:d1:00:b3:9a:
         fc:f8:af:aa:05:ae:9a:d3:42:c0:68:08:43:63:a2:e1:1c:69:
         31:26:48:3f:e1:79:83:76:ab:9e:b8:4e:26:03:1d:d2:c2:58:
         66:b3:ab:31:95:0e:23:3a:e2:31:75:c3:a6:ff:31:a1:ae:1b:
         f9:09:a6:e4:19:bd:fe:c0:be:b0:87:f7:70:45:79:38:58:e0:
         73:ef:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:49:50 2026 by rpki-client