Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File:                     9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier:          EIAQFCHn9Eh8TgupLYJoBl0C63N0Atzd4+G28Oyk1PY=
Subject key identifier:   A2:F7:ED:AF:29:72:09:F2:F7:DE:E2:C9:4B:BA:8A:D7:71:E8:F2:4F
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer:       /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial:       019CAD22466C15C28C315805692CAF04CEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number:          16F7
Signing time:             Mon 02 Mar 2026 06:00:30 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:30 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:30 +0000
Files and hashes:         1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: SWMWJevPnIwBiqkSBaTWssK/vTgSn96eeyCqPsq+UcY=)
                          2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
                          3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
                          4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:46:6c:15:c2:8c:31:58:05:69:2c:af:04:ce:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
        Validity
            Not Before: Mar  2 06:00:30 2026 GMT
            Not After : Mar  3 06:00:30 2026 GMT
        Subject: CN=a2f7edaf297209f2f7dee2c94bba8ad771e8f24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:98:d5:9b:06:c2:5d:04:a4:7e:ea:f1:a9:3f:
                    15:e1:4e:8e:06:7a:97:9a:67:02:6e:9c:88:47:81:
                    0e:f0:5a:7f:96:8f:0c:e9:11:38:48:49:d1:f6:4f:
                    e5:c0:e2:71:ca:23:47:f8:b3:4f:ab:3d:88:d1:17:
                    b3:d9:a2:d4:ee:c2:b9:fc:7d:42:5a:5a:ed:72:f1:
                    a9:9d:5b:aa:2d:c8:7d:a0:4d:18:82:c8:f4:a4:2e:
                    b2:c9:47:16:da:0b:da:19:d6:77:1b:7d:23:e3:4a:
                    2f:86:bd:7c:1f:8f:86:a9:80:ed:b0:72:9f:7d:15:
                    f3:1e:e8:e0:58:71:34:bd:b8:0b:7e:36:9e:9d:21:
                    e4:11:1f:98:75:53:9f:d9:67:b3:de:7b:ae:74:1c:
                    80:ec:42:23:2e:e3:da:96:50:14:f0:f7:cf:95:62:
                    70:c8:9c:a0:02:79:f9:ef:cc:6f:b5:c5:cf:77:b1:
                    14:64:f1:2e:3b:5d:45:6a:31:8f:fa:c4:35:d6:89:
                    4b:a4:c7:61:eb:b0:07:36:bf:56:41:32:fe:3e:4d:
                    09:51:20:8d:72:bc:6a:7b:6c:6b:35:64:eb:39:ae:
                    30:ff:46:2e:9b:69:08:d7:d6:db:6e:2e:1e:45:f8:
                    25:21:92:2e:27:72:01:df:4b:50:ae:50:7a:e8:17:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:ED:AF:29:72:09:F2:F7:DE:E2:C9:4B:BA:8A:D7:71:E8:F2:4F
            X509v3 Authority Key Identifier:
                keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e5:f6:d4:69:12:07:70:70:91:65:94:88:2f:77:2d:01:4b:
         ec:f3:5c:d1:ef:ea:34:51:19:96:09:7e:07:ff:c4:71:c6:b4:
         09:d8:2e:8e:22:3f:66:5c:12:49:27:81:ef:cf:ce:3e:4d:9f:
         4a:54:0f:9c:e6:5e:a5:ff:87:1f:e5:d7:1e:31:4d:91:90:99:
         35:11:f1:a9:52:01:a8:c8:be:48:62:71:33:44:96:55:74:8f:
         07:24:6c:37:b8:3f:b8:8d:67:87:aa:f3:dd:71:26:9a:95:34:
         7d:54:e2:5b:50:0b:ef:ad:ce:90:55:b1:62:03:e6:6c:93:1d:
         f4:c4:39:df:28:1c:81:09:8c:e6:63:88:85:74:62:9e:57:f2:
         20:51:47:fd:d8:c3:42:a5:46:b5:7f:79:51:42:22:1c:1b:4a:
         ca:38:c2:73:a7:d2:65:37:29:ec:dd:df:5b:89:77:35:92:de:
         f8:74:34:16:80:4a:f0:90:33:eb:05:88:ff:7c:37:4c:55:8f:
         94:8f:f2:0b:d8:ae:c5:92:8c:22:51:d2:47:dd:81:d1:ec:0b:
         3a:19:64:f8:92:ba:28:1c:c0:a6:09:d4:0c:eb:58:81:1f:cf:
         48:07:70:00:d7:92:c5:0e:a2:53:05:01:13:2e:8f:fa:df:13:
         5c:0f:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:35 2026 by rpki-client