Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          bBwxBWfsaGXq7mSX/WdGhXv4fpldxNL2WMv9LueMhIQ=
Subject key identifier:   0D:19:5D:49:AC:5E:F5:F0:86:69:D9:6A:3E:C5:0A:31:57:E7:3C:FA
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       019CAB3477AA979A0D2306AA269053CA0C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          155D
Signing time:             Sun 01 Mar 2026 21:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:08 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: +4VZD0UqDBL+8YCBDAq0ysyRVyVRpvPaULPUknBguCY=)
                          2: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (hash: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o=)
                          3: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (hash: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0=)
                          4: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (hash: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:77:aa:97:9a:0d:23:06:aa:26:90:53:ca:0c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Mar  1 21:01:08 2026 GMT
            Not After : Mar  2 21:01:08 2026 GMT
        Subject: CN=0d195d49ac5ef5f08669d96a3ec50a3157e73cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2e:ff:e0:f0:08:96:ee:43:71:a7:19:2a:90:
                    09:0e:28:c4:5f:57:0e:90:4e:68:1b:2b:e1:76:36:
                    00:54:f8:7f:ff:79:e1:79:d4:7c:6d:2b:92:8e:1e:
                    93:b4:b9:6e:97:bc:eb:0e:14:65:96:db:ce:8c:51:
                    9c:7a:6d:66:66:36:b0:07:d5:a6:59:cd:91:06:4c:
                    b8:94:33:66:4a:29:ed:6f:6c:df:b1:64:79:da:1d:
                    bf:0b:18:b4:ba:ee:63:5e:b1:b2:3a:72:61:cc:44:
                    69:df:f6:c0:2b:d8:92:bf:09:b3:4f:9e:58:55:a1:
                    2e:ff:76:39:8d:22:78:00:32:3b:61:39:a4:46:96:
                    35:75:b5:85:97:d8:25:b2:46:35:c0:85:23:a3:ba:
                    56:94:78:28:1f:b0:1c:14:73:48:49:e8:48:9c:5c:
                    39:9b:93:67:2e:72:15:d7:35:36:c1:a3:f0:fc:07:
                    3c:ea:54:3a:36:21:7c:1b:fe:53:88:fc:00:73:a6:
                    c9:30:85:72:3c:6e:89:84:39:b4:36:03:1d:c7:11:
                    2b:17:c5:85:7e:03:9d:4f:8f:89:76:d2:1e:53:f2:
                    5c:cd:cd:67:2d:67:1e:4a:aa:3f:73:84:66:9c:8e:
                    3a:0e:2f:f7:43:6c:09:ad:3a:f2:89:59:05:f4:54:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:5D:49:AC:5E:F5:F0:86:69:D9:6A:3E:C5:0A:31:57:E7:3C:FA
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5e:d0:0e:0e:71:0a:2c:35:1d:80:52:9f:3e:c6:b1:f9:e0:
         4b:6c:57:b2:6b:08:c9:2d:1f:7d:ac:02:79:d5:d7:7c:80:0f:
         5a:b0:dc:73:04:80:63:b7:90:91:21:bc:9b:ab:3f:64:c6:37:
         02:76:45:4c:e0:b1:1c:fb:7e:4e:e1:28:b3:e0:62:e5:90:5f:
         54:84:21:0d:30:b6:a5:5f:8a:ab:d2:97:45:51:8f:e6:ff:63:
         20:c8:87:48:6e:64:12:dd:c8:8c:4e:3e:3c:8c:52:b0:d1:db:
         ad:52:45:8c:c5:a0:62:00:7f:e9:ab:ad:14:6b:e1:34:62:fe:
         b8:63:e7:c1:9f:ae:93:e6:33:56:1d:92:82:50:83:fc:e1:97:
         22:16:5b:34:95:b3:ee:d9:81:16:80:31:52:4c:1d:cc:8e:ef:
         03:2d:ec:36:5c:fb:4e:9e:7c:a1:1f:c1:19:91:e4:76:26:10:
         8e:33:d5:6c:c7:43:a1:69:d7:a0:bd:50:ca:d2:74:cb:b3:c3:
         78:f8:4e:98:9f:03:f0:12:d8:74:06:41:99:38:0b:a7:ca:de:
         ea:84:79:fd:62:be:db:84:cc:ba:ca:f3:7d:a1:9b:cf:0d:e3:
         4a:1d:fd:14:6a:17:9a:2b:a6:d0:18:4e:46:5e:c8:69:18:1e:
         a1:f6:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:34 2026 by rpki-client