Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File:                     Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier:          WJXiKGpXCO0HvrgyWfRXh9wVwAfbUgln2Nm0r9wNSCk=
Subject key identifier:   99:AB:04:F5:9C:65:97:32:E9:AF:FB:E0:BC:C2:B4:17:B3:53:59:B1
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer:       /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial:       019CAF7ECB7A1B70DBD54FAE9E0DA42786C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number:          051D
Signing time:             Mon 02 Mar 2026 17:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 17:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 17:00:48 +0000
Files and hashes:         1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
                          2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: borZ2WvODIC5uZ6txx1wfKXsRmgXAvVJQlQZ+z6ofX8=)
                          3: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (hash: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA=)
                          4: odsSUTtPJPY75I9Zu_ls8a1wvOc.roa (hash: 8zQ2Vdy6wu34NWAET+jUEJ6+Fe7oiwnmUhMA5ElAuFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:7e:cb:7a:1b:70:db:d5:4f:ae:9e:0d:a4:27:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
        Validity
            Not Before: Mar  2 17:00:48 2026 GMT
            Not After : Mar  3 17:00:48 2026 GMT
        Subject: CN=99ab04f59c659732e9affbe0bcc2b417b35359b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:f0:ff:5d:e8:f5:2b:72:45:aa:13:f6:1d:
                    1e:e2:d0:57:5b:b6:82:cd:6e:51:28:24:76:f5:e3:
                    4b:1c:e3:ba:86:56:9b:0c:14:8b:57:5b:91:6a:f5:
                    7c:57:a2:24:e8:f0:cb:39:e6:c5:8c:ef:c8:91:03:
                    61:2a:fa:08:cf:7d:d7:5e:b1:e8:59:34:c3:73:9b:
                    c7:2b:d2:22:f2:87:e9:48:9c:44:8b:73:aa:d8:aa:
                    e2:58:0e:aa:08:ca:ab:bb:5a:0c:b6:de:93:d4:42:
                    db:2b:38:62:a7:ea:43:e6:07:f4:a2:10:5b:d7:72:
                    26:26:72:c7:da:3e:38:cb:f2:4c:8a:06:1e:0a:14:
                    4c:ef:6c:2f:cf:18:7b:20:78:6b:4e:c9:89:11:d5:
                    24:70:6c:ca:50:3d:40:aa:af:a2:3d:7b:2e:ca:ce:
                    e2:1d:d3:b0:bc:d1:f8:28:63:2e:2e:b3:ee:c2:b2:
                    be:a5:1a:95:8c:a4:9f:22:58:f0:ca:1a:10:40:9c:
                    8e:1e:56:d4:f3:14:08:a6:e8:a2:1e:be:0f:2f:8a:
                    82:5a:9d:d5:4c:17:c2:3f:22:1b:6e:dc:b3:19:f4:
                    62:dc:ba:66:60:64:6c:2f:1c:c5:bd:ac:ce:c7:32:
                    b6:7c:c8:d0:13:bb:86:2b:b6:9a:32:40:61:0c:08:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AB:04:F5:9C:65:97:32:E9:AF:FB:E0:BC:C2:B4:17:B3:53:59:B1
            X509v3 Authority Key Identifier:
                keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:9d:26:6e:07:c3:b6:0b:55:f7:a8:db:2e:3d:32:9e:fb:
         1a:0c:3e:bc:9a:fa:cd:33:d4:1d:54:59:85:42:d3:15:cb:af:
         17:c9:b1:ca:b4:0b:f0:97:45:4a:1e:ae:af:ac:8d:15:66:df:
         63:8a:b7:b3:69:03:14:f4:e8:44:0f:c0:f9:e6:c7:dc:9c:fd:
         6f:99:87:fa:39:76:dc:8d:cd:37:e9:06:0b:23:cb:70:63:64:
         e0:2f:a1:42:e8:25:15:59:8a:a7:e3:37:71:56:91:6e:49:69:
         44:80:ed:3f:1b:91:cf:16:40:65:19:27:f8:cb:97:30:c7:69:
         29:6c:c2:01:b9:26:82:3a:05:7d:d3:c6:ff:a1:3d:2f:ef:3c:
         5d:df:4e:bd:52:56:ec:04:0b:bc:eb:56:99:7a:43:d7:af:b9:
         65:3b:b2:9d:72:4e:5a:2c:99:bc:40:5d:4c:91:73:1b:37:40:
         fd:cb:97:5b:8f:e2:b1:f5:e5:71:98:6a:da:15:fa:c7:7c:9c:
         9f:a6:a3:fe:db:09:51:64:da:76:c8:19:98:f9:ce:29:1d:48:
         24:2c:47:1e:6d:da:2d:cd:97:45:b6:41:55:a7:68:64:88:b3:
         5f:3d:4c:93:18:30:37:5b:c0:dd:17:f7:98:de:52:6d:5d:18:
         63:64:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:32 2026 by rpki-client