Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File:                     CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier:          Op0kwBQ0LHcbp5MTgshGJALtFQM5ZOoas3h8rzBzbxs=
Subject key identifier:   19:B2:DF:A8:05:F7:8D:4A:63:E2:33:AE:16:C8:01:C5:9D:BC:45:4F
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer:       /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial:       019CACB4E74251F1F4276E3F0259A23E1680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number:          0A72
Signing time:             Mon 02 Mar 2026 04:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:02 +0000
Files and hashes:         1: BJowdLldqJHM3ir588qx25T2i1o.roa (hash: nGJPoQmYXI/63Ysvy1k3U4F/yfSsIELkLPYGxlPw234=)
                          2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: ZqB3F1fAXs8QKwVGLMfHMZo4fFlDJouxwsblgqAulRk=)
                          3: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
                          4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:e7:42:51:f1:f4:27:6e:3f:02:59:a2:3e:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
        Validity
            Not Before: Mar  2 04:01:02 2026 GMT
            Not After : Mar  3 04:01:02 2026 GMT
        Subject: CN=19b2dfa805f78d4a63e233ae16c801c59dbc454f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:01:aa:39:fb:bb:02:ff:24:fa:6c:c3:39:
                    bb:82:e3:00:29:a0:e4:af:a3:c5:75:7f:30:5a:bc:
                    f5:ac:87:67:5b:83:64:87:81:59:36:75:da:38:16:
                    a7:8b:0b:76:b9:ab:81:da:93:72:5b:86:89:eb:43:
                    0c:d1:8d:25:ba:47:b0:1f:c0:ae:6b:7e:dd:e2:cd:
                    e1:32:ee:85:5d:17:68:79:65:a1:8e:3e:ba:b2:a4:
                    0c:e2:d8:c3:1b:8c:39:bb:e1:90:e1:e3:b8:07:91:
                    19:c8:db:ac:67:10:37:d2:8b:6b:7f:69:56:66:53:
                    44:2a:6f:5f:71:0a:61:06:d1:3c:bb:14:dc:47:51:
                    85:26:f7:08:23:6f:90:48:67:7c:45:3e:a4:6c:7d:
                    a9:cb:36:05:89:11:3c:f2:f2:91:df:dd:64:e0:73:
                    22:39:ad:87:6c:6a:9a:19:30:bc:7f:08:f4:32:dd:
                    c4:cc:3b:89:ae:dd:a8:6a:41:59:0d:9b:af:b1:9e:
                    53:b0:0c:cb:a2:19:9d:3b:9c:6b:d6:5e:85:68:01:
                    69:f5:08:1e:fb:2c:ba:93:db:0b:a1:e2:75:1b:59:
                    f0:2c:c7:71:83:f3:f3:b2:9a:c4:52:c3:39:aa:c5:
                    93:58:31:aa:03:f7:cd:9a:0a:ee:e8:45:7e:b7:49:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:DF:A8:05:F7:8D:4A:63:E2:33:AE:16:C8:01:C5:9D:BC:45:4F
            X509v3 Authority Key Identifier:
                keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:31:e2:f7:af:fa:e3:7a:87:50:08:18:4f:bc:ea:b4:e0:
         8a:7e:64:0b:89:9b:13:83:f3:8c:4c:06:5a:40:12:6c:6c:44:
         a1:32:9d:af:b3:12:65:5a:9e:c1:a5:6d:47:31:49:96:a0:ae:
         07:02:eb:17:a8:85:d0:38:99:43:bc:c8:65:c4:8e:ce:88:68:
         d0:c3:fc:9b:b9:33:83:17:74:08:38:93:e9:2d:3d:e7:7f:b4:
         93:08:db:02:b9:71:ff:0f:a3:ab:a4:cc:18:dc:d3:3a:8d:7f:
         30:85:d4:3f:0a:66:13:f9:63:66:d9:37:54:d1:a9:5b:6c:9e:
         52:a1:4f:24:9a:24:2a:ea:70:64:c2:2e:77:d5:d6:fc:5b:f4:
         ad:16:8a:d6:a1:9f:41:a6:38:e6:49:f7:f6:a9:8f:11:61:9a:
         f4:b7:b1:58:16:0c:51:56:a1:47:e0:69:26:c9:f0:d1:cf:0f:
         51:a2:eb:26:f3:70:73:52:2b:c7:77:5d:5b:0b:be:9a:f5:31:
         77:bf:5e:80:2b:49:bb:c2:eb:14:a7:6e:b5:75:12:19:0b:bf:
         6b:87:9f:e5:a4:0d:3b:cf:4d:04:78:22:a2:a3:b3:36:d7:ea:
         14:84:d9:e4:11:21:95:e5:32:2d:ca:62:7a:e3:4c:b9:d4:a3:
         23:5d:91:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:31 2026 by rpki-client