Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File:                     5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier:          wSFEZcKBFACAVWyBkvMluTucJYrdgcRR0LKW1Jb8rYE=
Subject key identifier:   C6:69:40:A3:53:AE:5E:A1:A1:AD:D4:B3:FC:E9:EE:D1:0E:7F:02:B6
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer:       /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial:       019CABD9E8772A4028BDC85C92D11E3A9EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number:          0AFC
Signing time:             Mon 02 Mar 2026 00:01:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:50 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:50 +0000
Files and hashes:         1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: SnT0i97uJ4ZPzvRHHK21JhFXf6v4/K3MNjfq8/ce8Ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:e8:77:2a:40:28:bd:c8:5c:92:d1:1e:3a:9e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
        Validity
            Not Before: Mar  2 00:01:50 2026 GMT
            Not After : Mar  3 00:01:50 2026 GMT
        Subject: CN=c66940a353ae5ea1a1add4b3fce9eed10e7f02b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:45:ff:e9:2c:63:d3:e3:1c:45:35:85:23:
                    46:92:7f:ee:d0:b7:e9:40:82:43:8e:5b:40:9c:26:
                    22:20:c8:c1:22:ab:05:fa:02:6a:3e:8c:e4:f8:e7:
                    75:7e:a5:cc:a9:bb:2e:d9:d3:fd:c3:55:c1:e5:8c:
                    64:db:f6:e1:13:47:c3:34:72:e4:db:25:74:a0:a5:
                    90:d7:1a:d8:35:0f:96:15:6c:91:5c:e0:9f:9d:f8:
                    b2:25:9f:4d:84:13:06:b5:7d:36:a2:0a:2a:6b:f2:
                    9e:a7:96:5c:42:53:10:5b:2e:14:a2:c3:9e:f3:ad:
                    22:47:4c:47:70:25:c0:e3:5c:64:92:8b:3d:f1:02:
                    a1:21:8e:88:2f:6a:a9:d2:80:4a:74:9f:cb:7e:b4:
                    2f:b3:4d:4b:14:a6:f6:79:ab:a6:d1:8d:1a:15:a5:
                    07:67:3a:e4:4e:ba:bb:6e:0d:e7:6c:68:46:b5:36:
                    91:2c:6e:8d:91:9e:9d:41:19:c5:33:5c:e4:e6:1d:
                    04:7e:d8:d3:27:a3:30:7a:4b:cf:62:b7:d0:37:37:
                    60:b9:c2:c0:0b:15:55:0b:d0:21:e8:4f:29:1f:21:
                    da:21:c7:f1:13:f8:f1:f1:30:3b:31:73:fa:8e:37:
                    79:9a:72:96:2b:72:03:d6:25:7f:01:3b:18:25:c0:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:40:A3:53:AE:5E:A1:A1:AD:D4:B3:FC:E9:EE:D1:0E:7F:02:B6
            X509v3 Authority Key Identifier:
                keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:58:78:14:19:a9:0b:d8:5e:c6:ba:d6:c8:ef:1b:1a:0d:
         37:eb:cd:57:6d:c8:cd:69:cd:e3:70:c2:41:1a:ab:af:d8:7c:
         f3:7c:77:43:cc:79:ef:79:28:3c:d6:84:74:01:19:71:e3:86:
         9b:ac:0a:28:d7:ec:13:55:95:fb:4c:52:3f:16:62:77:9b:0d:
         18:6f:a1:27:d2:c4:59:c7:4e:a8:cf:24:c0:72:1c:19:fb:32:
         7f:44:c3:a7:e7:b1:4c:77:a9:c3:8b:74:ce:5d:00:04:ba:f2:
         e4:f3:23:a7:f6:50:a2:d6:8c:c2:f8:c9:4b:c4:61:92:d1:6b:
         ef:bd:c0:cf:42:23:9a:af:dc:5a:77:37:4e:9b:ba:07:a1:16:
         74:33:42:2c:8b:2f:67:92:ec:39:83:09:84:e7:3d:a1:bd:e5:
         31:4f:d8:3d:5f:e2:8d:2d:70:9b:dc:65:a4:ec:21:33:5e:51:
         73:24:0e:34:96:23:26:6d:d4:16:48:d9:26:18:47:1f:e3:d8:
         27:5e:0d:3b:60:86:54:6e:95:ff:8d:09:4f:ee:9e:76:51:3f:
         b5:e6:0a:27:27:2a:6b:cd:64:4b:38:fc:40:98:b9:d1:24:97:
         57:2e:9a:8f:9e:08:00:56:a0:b1:cf:09:b6:29:4a:7e:bf:57:
         a0:70:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:29 2026 by rpki-client