Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File:                     2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier:          WA3/i9Yi6H5n/gWIHn001fxTr1kDmG1ICOCFouYtakE=
Subject key identifier:   1C:B2:B0:F8:7F:6D:07:24:33:A7:D3:4A:6A:C2:13:80:AB:3C:93:55
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer:       /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial:       019CABD969FC1D2E2BF403423F5EF6801FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number:          14F4
Signing time:             Mon 02 Mar 2026 00:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:18 +0000
Files and hashes:         1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
                          2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: 0rL4KcIWDWxgVp2p471QysyYlqZz1bhYIWcnXr/LpaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:69:fc:1d:2e:2b:f4:03:42:3f:5e:f6:80:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
        Validity
            Not Before: Mar  2 00:01:18 2026 GMT
            Not After : Mar  3 00:01:18 2026 GMT
        Subject: CN=1cb2b0f87f6d072433a7d34a6ac21380ab3c9355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:c9:cb:cb:bd:c0:d2:8e:c6:fe:11:50:21:
                    c8:81:0c:cc:93:30:f6:df:95:26:89:47:93:e1:c2:
                    47:22:de:0e:9b:54:d7:f8:d2:a9:c0:a5:ee:a6:76:
                    e8:16:27:04:98:b8:f1:b4:04:5e:07:61:ac:20:14:
                    90:83:27:76:6c:2e:1d:9b:09:7f:8a:0a:50:73:66:
                    45:28:96:dc:91:12:3f:82:34:86:85:97:9b:0a:42:
                    12:40:e5:e9:b0:2c:08:92:8c:35:7d:0e:f1:69:9c:
                    59:19:ae:19:b4:6e:12:a7:1e:b8:54:64:9a:3a:c2:
                    fb:a1:d9:04:7b:00:04:ba:e5:f3:cf:bd:c5:f9:ec:
                    b6:75:87:11:5a:08:ae:46:de:cd:e1:fc:31:3a:2a:
                    83:59:c9:8e:f6:71:88:ff:4f:80:46:4f:80:54:5e:
                    3c:96:e4:b2:15:3b:1b:bd:2e:56:01:c3:5c:f4:41:
                    41:c8:4e:a1:80:26:33:23:3d:60:47:43:5a:1d:89:
                    cd:3f:cd:95:a1:f8:2a:5a:a7:ab:ba:41:75:10:d3:
                    ce:19:02:c9:d0:f2:99:28:20:83:3d:95:a8:ff:06:
                    cd:b2:58:c8:57:1d:de:ee:7a:ad:77:7e:c5:53:32:
                    4d:79:ef:67:6a:b7:0f:00:6c:4e:3f:80:ed:3e:5c:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:B0:F8:7F:6D:07:24:33:A7:D3:4A:6A:C2:13:80:AB:3C:93:55
            X509v3 Authority Key Identifier:
                keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:00:e7:58:ec:eb:ba:c5:c7:04:bd:c8:9b:e2:ad:5f:81:
         10:46:6c:fc:ca:13:5e:95:66:a0:ea:ad:92:06:1e:e4:f6:71:
         73:0f:33:e8:5d:a5:35:01:53:be:d7:d0:d8:02:79:44:b0:b1:
         b3:81:99:84:fa:41:e2:07:dd:99:35:eb:b2:e9:f2:e2:23:17:
         57:1c:fa:26:77:8d:f7:16:15:f5:cf:2d:d3:cb:9c:1a:0d:54:
         79:1c:52:bf:e2:ea:f9:e1:56:fa:d7:3a:00:ad:c1:6a:44:c2:
         c4:7e:8d:41:be:6a:34:2e:6a:c2:d6:3d:96:a7:2a:a2:af:6c:
         fd:1f:31:d6:56:af:de:ee:16:c0:4e:54:af:cb:16:28:91:16:
         88:ed:b6:98:d4:16:75:be:61:4c:6c:6e:aa:ca:a0:88:4f:c2:
         03:67:d9:5d:42:7e:94:d6:5d:1c:89:c5:24:d1:a2:6c:7e:bf:
         8a:cf:91:76:d3:be:fa:6f:6c:7d:eb:6d:dd:53:0b:6d:0d:1c:
         cb:e8:75:82:3b:15:d4:2e:7f:16:ba:89:a1:7c:73:36:5b:f5:
         d3:fc:f5:93:cf:89:68:b1:78:ac:b8:ad:19:9d:e7:79:a4:72:
         5a:dd:5d:90:7d:69:8c:9e:1b:3d:fd:0c:a6:57:fa:5d:f5:fd:
         60:78:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:33 2026 by rpki-client