Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          slcCmbfUi2i/W38/oNX/pv3Xl8UOuYlVZmVtmwsoUac=
Subject key identifier:   08:8C:9D:71:4F:E4:3B:EA:0B:A9:A5:A6:16:CB:6F:CE:C6:3C:C0:B0
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019CAD59959B6591AC59141D014A212D90D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          13BD
Signing time:             Mon 02 Mar 2026 07:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:55 +0000
Files and hashes:         1: HXYHaazK-agsXQtrAp4TdIiFPCw.roa (hash: 8c6r2+HmrNIxR72NP8l7eeROpR6oXO6CEMfBkvZx7+M=)
                          2: IDDMpCjqYwAGI-peC47tdVFpVME.roa (hash: Wn6wDDm3PxHp8jcuiJeMcmVpL1iWQEDeRHHD8I7chpQ=)
                          3: Ic-s3BxEKNsh-PbVJpc1Xz23AYs.roa (hash: oUF2uyrZqrkZx39wCYRgq/1hjdMckUA4FiG0GID4cJw=)
                          4: hnzz_PU7efQx6H153s8gnlp79IY.roa (hash: n+Gty9V7GKTlH1GHsjEfP3vQhmL0KYOhTaCWQIcvZc8=)
                          5: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: 85cSjzyS4Tr++CDnIKu7vh9yTolSsE+jOPqyNGOCjow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:95:9b:65:91:ac:59:14:1d:01:4a:21:2d:90:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Mar  2 07:00:55 2026 GMT
            Not After : Mar  3 07:00:55 2026 GMT
        Subject: CN=088c9d714fe43bea0ba9a5a616cb6fcec63cc0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:0c:08:52:75:80:42:12:c7:dc:35:7e:ba:
                    c6:8c:15:2b:f6:97:bd:38:29:f5:2a:85:ca:21:48:
                    45:d2:3d:d9:d8:e4:76:6d:de:54:88:85:65:f3:de:
                    89:85:08:af:00:99:1e:c0:f7:b3:21:d4:cb:bb:ff:
                    7b:1c:6c:f3:c1:57:12:e3:29:1d:81:ce:8f:47:cc:
                    ea:0c:de:76:4c:b5:4a:f6:b7:3a:a5:ec:65:3b:37:
                    dc:2b:92:b8:55:cc:75:c3:de:1d:05:0e:df:81:95:
                    c8:d8:6e:63:ab:9b:31:4c:e9:24:35:88:ea:2d:96:
                    1f:4b:00:27:7d:71:7e:04:03:a3:f5:f9:02:05:e6:
                    aa:78:59:82:3a:1b:9d:67:fc:d3:4f:7b:fa:bd:1b:
                    bd:00:f5:cd:bf:10:89:53:3b:a8:e6:72:1c:5b:ef:
                    47:a2:95:9d:46:81:12:09:4f:43:57:ec:5e:99:ad:
                    11:b0:0b:9f:3b:75:c7:04:cd:23:20:1a:78:b4:40:
                    78:a6:7d:43:62:12:50:ba:38:2a:3a:f7:63:dd:68:
                    fb:26:3c:b1:18:ad:88:e8:ca:0a:4a:df:63:ef:6b:
                    62:2b:b6:6f:5e:a2:77:95:22:51:e2:76:bb:1f:3f:
                    3d:ed:09:86:10:77:fe:ec:7d:35:a0:44:8c:34:08:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:9D:71:4F:E4:3B:EA:0B:A9:A5:A6:16:CB:6F:CE:C6:3C:C0:B0
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:79:4f:ec:a9:3a:48:7f:ae:b1:c7:3b:7c:5b:6a:d3:99:15:
         3c:93:88:6d:35:b9:a1:76:b0:09:20:c9:b6:85:09:f2:d1:67:
         e9:26:10:06:2f:bc:05:f1:5d:34:84:97:fa:c7:9b:8d:5e:cc:
         fd:57:fb:f1:e1:b4:11:ff:1e:b5:08:76:70:0f:0a:1b:01:e4:
         75:83:7b:71:6a:b0:91:db:88:ae:36:66:91:97:c9:d5:f5:44:
         af:ca:b9:57:8e:2f:53:ce:d0:7a:f6:0a:8c:d2:fc:f9:34:24:
         d9:0b:18:80:dc:31:69:d9:61:33:b9:c5:00:22:53:75:27:d4:
         39:15:31:dd:3f:bb:44:6f:3d:e9:6d:fc:e5:d4:8d:1d:68:58:
         5c:ca:f6:7b:a9:92:15:76:16:87:5f:44:fb:65:ec:4a:01:d1:
         60:46:97:ec:aa:fa:d7:62:50:34:8a:47:cf:51:bf:7f:15:2f:
         bf:3e:72:0a:d1:73:ed:b0:d8:0c:09:8e:b9:45:7e:e4:ed:61:
         e8:c1:b7:83:04:4c:d9:a1:0c:f7:6c:60:a1:d2:e6:8d:0f:b6:
         3e:59:56:fd:d6:84:06:b2:f3:d1:93:7a:8c:66:e2:1c:7c:43:
         d7:84:72:3f:6a:13:6b:75:01:11:66:df:7e:5e:89:45:7c:b2:
         01:f6:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:13 2026 by rpki-client