Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
File:                     Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json)
Hash identifier:          FTIApv2No+V0JOw88I8SUmeeHY/vEpZi59xMGaTzlKo=
Subject key identifier:   69:58:88:F4:B1:80:D3:B9:C1:34:F3:4D:6A:AD:F2:28:2D:DD:A1:CE
Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
Certificate issuer:       /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Certificate serial:       019CAFEC8B1486C1F47F5807EDBFA2ACCEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
Manifest number:          EE
Signing time:             Mon 02 Mar 2026 19:00:40 +0000
Manifest this update:     Mon 02 Mar 2026 19:00:40 +0000
Manifest next update:     Tue 03 Mar 2026 19:00:40 +0000
Files and hashes:         1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: m85x4s1hCsajYZpzxy7roVErdAzlUxJI3Iqi7UU3gmQ=)
                          2: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (hash: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:8b:14:86:c1:f4:7f:58:07:ed:bf:a2:ac:ce:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
        Validity
            Not Before: Mar  2 19:00:40 2026 GMT
            Not After : Mar  3 19:00:40 2026 GMT
        Subject: CN=695888f4b180d3b9c134f34d6aadf2282ddda1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:4a:b1:92:0a:99:00:f0:cf:ae:aa:72:b3:
                    ef:93:f8:52:fb:b7:97:de:5d:d9:92:37:92:a2:b5:
                    c6:8a:c7:c8:d6:8c:cb:50:36:f1:d6:18:f1:07:4d:
                    07:00:4e:20:14:9d:51:65:e8:02:dd:a4:4b:21:13:
                    9a:6e:b1:57:38:98:b9:b9:c9:e6:d8:2e:49:2c:bf:
                    47:0e:09:b0:45:80:9f:0d:bd:b5:cb:0d:e0:ca:26:
                    58:89:48:48:1f:99:d2:ae:0d:ea:50:40:73:c1:c7:
                    9a:43:7a:82:1f:93:51:3e:05:92:d2:b6:c8:16:52:
                    65:43:ea:38:41:15:d8:e1:a1:9d:78:fe:cc:01:94:
                    f6:13:68:32:7c:bf:aa:d3:0c:6c:b9:d9:6a:38:ab:
                    f6:94:67:63:4d:8d:b9:57:0f:63:35:b6:7b:31:5f:
                    62:4f:fa:c5:fd:76:a1:7e:cd:90:e0:33:78:07:d3:
                    34:91:53:8c:e2:65:e1:2e:54:06:61:a9:d2:02:7b:
                    e1:00:1b:7b:e9:2d:31:10:94:4d:cf:d4:07:62:de:
                    6e:58:e7:02:d2:60:ec:f9:16:eb:a3:79:49:8d:ec:
                    09:5a:38:28:42:74:0c:0f:6b:cd:a5:b4:b1:cd:5b:
                    4d:5e:3e:0e:0d:e2:c7:dc:88:3c:c7:61:5c:a0:9e:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:88:F4:B1:80:D3:B9:C1:34:F3:4D:6A:AD:F2:28:2D:DD:A1:CE
            X509v3 Authority Key Identifier:
                keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:22:23:6a:3e:4b:35:6f:d5:f7:15:84:6b:b4:4d:ef:6b:a9:
         a7:e1:aa:3c:ae:19:7a:a5:28:7a:de:de:0c:e7:2b:0a:0d:06:
         6a:1a:6b:90:41:d3:d3:a7:f6:a7:6e:2c:05:6e:9a:75:56:ce:
         c4:75:a7:fc:59:95:50:b4:b2:a1:5a:26:08:4d:51:69:23:49:
         d4:49:a5:3d:7b:b1:39:5c:e8:a1:38:ed:9c:67:2e:86:13:fb:
         88:8d:3b:4f:0c:27:32:fd:ce:bb:e4:ff:61:e1:9b:d3:67:c7:
         32:39:40:b2:0d:95:e6:9e:61:1f:38:8b:d1:ab:28:a5:ab:03:
         de:3f:a8:b2:cf:4e:0d:2a:19:59:f6:67:64:79:61:08:bc:8d:
         f8:2f:2f:bd:b5:9d:d6:24:0e:11:c3:2d:15:81:64:3a:f9:8e:
         3b:0d:6e:9b:90:3f:63:62:6f:e3:51:4a:ed:9f:b6:71:93:6d:
         02:cf:0a:64:f1:d9:3c:75:ce:18:74:b4:a0:bb:6a:43:34:74:
         4f:df:6a:2b:41:e4:78:0a:4e:d3:4a:5f:ed:d2:d0:bf:ba:91:
         28:48:c1:b7:ef:32:8e:52:55:26:a5:04:c6:b4:02:30:8c:1f:
         37:bb:19:6e:55:77:34:7f:f7:11:0f:e4:f3:64:fe:fa:2e:36:
         33:8e:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:29:00 2026 by rpki-client