Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          s2LLYQIape+vPpHr2RhSuEeX3kKeFefbchrWJWqaP7Q=
Subject key identifier:   98:69:51:C0:63:12:F3:3C:8C:7D:38:6B:4D:33:E2:CC:D5:13:58:96
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       019CAB341541F9E7D7271D89FA2DC4390C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          14B6
Signing time:             Sun 01 Mar 2026 21:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:42 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: fJY4Qnem4XOcT4gxFnWbCq7mIqvlaag0x1p98poLbKU=)
                          2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
                          3: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
                          4: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
                          5: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
                          6: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:15:41:f9:e7:d7:27:1d:89:fa:2d:c4:39:0c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Mar  1 21:00:42 2026 GMT
            Not After : Mar  2 21:00:42 2026 GMT
        Subject: CN=986951c06312f33c8c7d386b4d33e2ccd5135896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:30:20:ea:3d:6d:5b:0b:34:16:34:e7:7b:
                    ad:d3:5f:2c:95:bc:b6:5b:35:e3:3f:e0:5e:ee:d6:
                    68:1c:d2:ec:24:d6:ea:7b:bd:73:39:ad:4b:03:28:
                    ce:71:18:e0:dd:b2:93:7f:04:c5:f2:92:f7:fd:9d:
                    39:c0:41:d7:be:60:f4:0a:46:b9:7d:32:25:8d:c8:
                    a3:e8:84:d3:85:e4:20:e1:c2:13:e0:20:91:06:e6:
                    2a:19:15:f7:d7:28:52:da:8a:a3:ad:36:75:50:f4:
                    ee:67:aa:b9:ea:a9:37:94:94:ee:e2:05:ba:ec:cb:
                    bc:20:56:7f:b3:cf:d3:33:73:42:34:da:86:53:5b:
                    1f:e4:43:9d:a4:2f:1a:40:ab:28:39:26:4e:ba:e6:
                    7a:f6:70:26:41:ea:40:3e:32:55:2d:01:7f:d1:ee:
                    1a:c2:75:1a:2e:20:05:16:0a:15:48:d0:df:51:84:
                    33:b8:e8:d7:cd:23:98:dd:d0:23:c9:fc:de:3e:2d:
                    79:ee:95:91:3b:26:4b:63:aa:25:1c:fb:32:fe:82:
                    2f:a1:74:cd:ba:93:d5:28:8d:69:1b:36:e7:f3:4d:
                    71:47:3b:06:51:19:43:bb:b0:81:68:bc:4c:18:1c:
                    ae:72:3b:aa:54:4b:d7:84:f0:3c:5d:cb:fd:d8:27:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:69:51:C0:63:12:F3:3C:8C:7D:38:6B:4D:33:E2:CC:D5:13:58:96
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:31:bd:ff:9f:aa:96:ee:a8:01:f5:27:56:9e:33:55:19:
         ff:61:f6:41:86:0a:54:3e:13:9c:bd:59:da:eb:1b:ad:db:46:
         4d:2e:d1:d6:f4:30:c4:af:88:b9:85:b9:b5:45:0d:a3:4b:d4:
         d9:0c:27:de:e8:51:6b:9f:85:19:d2:fa:e6:f2:1b:44:d9:00:
         e4:fb:c4:99:5f:16:a1:f9:f0:68:66:91:cc:be:25:13:f9:e6:
         48:1c:42:fe:7a:22:1c:69:8d:93:c6:4e:9a:7e:99:17:6e:9f:
         50:98:89:d2:9b:6a:1c:d4:07:22:c1:a8:65:2e:e9:25:ed:8d:
         28:ed:a2:81:3c:c8:ed:59:44:44:d8:98:ee:5e:da:5b:2d:b7:
         d0:56:d1:ed:a4:17:39:d1:22:f5:0c:02:39:ea:47:3e:19:ac:
         bb:0c:a1:8c:36:52:6e:66:8e:90:5f:01:69:04:f5:1f:05:f3:
         69:68:57:99:53:59:d3:08:5e:03:04:d4:75:12:c8:3a:13:2c:
         c7:33:17:2e:84:3e:72:67:a5:eb:2c:7b:4f:d7:99:de:a1:dc:
         7e:e6:9f:f3:a9:cf:dc:06:9c:73:3a:61:dc:91:26:a8:6d:21:
         bd:f1:f9:73:9f:b6:3b:27:a6:62:6c:8e:34:d5:6a:e6:64:2c:
         f8:1b:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:08 2026 by rpki-client