Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File:                     humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier:          BcghOJBbAX6h7/5jkAv55H4D2kgjqhZFliWcgPFjJms=
Subject key identifier:   73:90:5A:8B:B7:E4:AB:6F:D1:A8:D9:D9:14:67:A1:DD:E9:65:F1:9D
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer:       /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial:       019CAF10DE8C53E879F147137F8B0401660E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number:          06CC
Signing time:             Mon 02 Mar 2026 15:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 15:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 15:00:43 +0000
Files and hashes:         1: 8YW4uCegbiOXKfdM50rIePBZe5k.roa (hash: daS7MSZX4yQZhE3JNsrTDfEdlUzwTcG/vXeE0dV4qcs=)
                          2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: z5sQBmoGcUD2Q5zqVxiTuDm+mZD2aYEvzfo7sVKWvFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:10:de:8c:53:e8:79:f1:47:13:7f:8b:04:01:66:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
        Validity
            Not Before: Mar  2 15:00:43 2026 GMT
            Not After : Mar  3 15:00:43 2026 GMT
        Subject: CN=73905a8bb7e4ab6fd1a8d9d91467a1dde965f19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:c7:af:9a:4f:29:27:50:62:e5:e4:0d:fb:
                    23:01:48:3e:80:43:4b:29:64:8b:5f:ab:99:d2:58:
                    31:88:f3:c2:ea:e4:59:01:72:69:5d:6b:e8:6b:6f:
                    0a:82:9a:f3:79:4e:99:86:f9:cc:0b:fe:b2:0a:ca:
                    2c:f9:d4:63:a6:bf:49:f9:25:7b:ec:50:a8:ee:38:
                    00:e5:b0:31:e1:10:22:d0:30:61:d6:83:d7:d8:3f:
                    b6:d8:ab:09:25:06:98:6e:3b:15:aa:96:fd:b8:34:
                    79:74:e2:2a:ba:8b:84:91:b8:c2:96:f4:05:6c:57:
                    8a:d8:fe:bc:3c:4a:36:b4:cc:80:89:67:91:b8:21:
                    eb:0b:ec:bd:d5:6e:ce:da:03:8a:84:56:7d:e6:d2:
                    a2:92:69:94:76:b6:12:bd:11:a0:36:9c:71:29:71:
                    cd:fa:4c:91:50:74:03:94:40:6e:79:e9:37:99:a3:
                    cc:87:1d:ba:98:24:14:e7:01:98:29:00:48:d1:43:
                    d3:62:56:39:9c:f2:96:bd:c2:b2:60:39:bc:1e:d7:
                    c2:13:f2:13:7c:35:98:8a:c2:a0:f0:4a:9e:1a:37:
                    6e:46:d9:d0:6c:4c:3e:f1:bb:22:ae:8c:29:80:ab:
                    e3:d3:3c:ec:86:87:09:e0:18:94:dc:dc:3b:30:0f:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:90:5A:8B:B7:E4:AB:6F:D1:A8:D9:D9:14:67:A1:DD:E9:65:F1:9D
            X509v3 Authority Key Identifier:
                keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:02:60:56:19:95:02:9c:a2:2a:f8:01:dc:0d:8e:13:5c:20:
         d9:e0:a4:c8:13:f9:6c:6c:94:d4:3c:30:68:99:90:12:d2:10:
         d8:1b:16:d1:15:9b:af:19:29:ee:d5:9f:13:2f:5b:f9:75:31:
         59:9b:f7:97:3a:a8:38:8f:7f:dc:cb:29:f3:c3:78:2a:5c:12:
         b1:a5:b2:d3:a4:1b:d6:d5:ca:59:d4:34:55:d4:c7:ba:5a:35:
         0a:94:b4:20:82:a0:a1:65:41:14:32:7b:07:0f:61:26:96:21:
         d7:98:8f:8e:8b:d1:7f:ac:78:a6:53:a6:15:e9:b6:cd:87:25:
         eb:ee:48:15:9c:3d:7e:64:2f:fc:69:b7:42:3e:5d:66:df:71:
         93:2c:7e:17:ed:6b:ea:00:e8:d5:93:63:bc:8b:ea:31:d4:48:
         7a:47:85:52:a1:a7:69:e2:cd:bb:b0:94:8b:af:e3:00:e0:1c:
         5e:f1:1a:a7:ef:d6:f2:ed:46:2e:64:6f:83:6b:3b:8e:95:69:
         0b:57:f9:dd:d3:a5:fc:0d:86:fa:b3:08:dc:23:bb:9a:c2:9e:
         55:51:0c:16:15:ec:c9:d5:32:c0:ff:fb:56:d6:41:a7:9c:e7:
         fc:28:87:1c:da:3d:7d:a5:01:c2:68:ce:5c:51:f9:20:92:38:
         99:9a:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:20 2026 by rpki-client