Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File:                     0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier:          z6Jfi0nqY7PvQtO8oC4IePOitujCbMF5cALjgvnM0pc=
Subject key identifier:   A9:20:4B:D8:C7:DF:FB:9A:8A:64:68:A8:86:53:FF:F6:D3:69:88:A7
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer:       /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial:       019CAC4681141243901C485841259F31FD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number:          1746
Signing time:             Mon 02 Mar 2026 02:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:27 +0000
Files and hashes:         1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: cRRzhNMkk7Ue84cD9jgDvlZQPCWFmeLCqHxFYo80rIs=)
                          2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:81:14:12:43:90:1c:48:58:41:25:9f:31:fd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
        Validity
            Not Before: Mar  2 02:00:27 2026 GMT
            Not After : Mar  3 02:00:27 2026 GMT
        Subject: CN=a9204bd8c7dffb9a8a6468a88653fff6d36988a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:96:8c:bf:62:0e:46:64:8e:a7:b9:0a:69:
                    81:5c:23:24:fb:a6:78:55:d9:95:ab:e8:c0:21:a4:
                    1d:60:ff:99:3f:bd:29:83:23:41:da:b8:2d:9d:82:
                    62:c8:a5:2b:42:a0:72:6e:83:d2:4d:d7:28:ee:ab:
                    4e:19:c6:b9:26:cf:f8:c8:6d:0f:02:4b:2b:e5:13:
                    b1:bc:42:95:3a:d6:f7:38:2d:7c:4e:3e:3b:05:93:
                    a6:7d:2c:54:33:b5:63:c0:9c:93:51:48:fd:80:aa:
                    64:9a:3b:de:e1:09:31:b1:38:5b:80:81:8c:21:26:
                    80:c1:56:7b:19:36:d5:09:1e:15:c3:5f:45:26:45:
                    fc:e0:73:ee:70:bf:e5:ac:8d:b4:89:ee:a9:07:e1:
                    c8:63:7f:9e:95:66:52:c2:5a:b8:65:a9:dc:cf:d9:
                    64:60:f6:3d:d0:75:43:39:a5:26:5b:01:e1:04:1a:
                    74:7e:17:5b:e5:09:96:0c:c2:1b:d5:e3:ee:c5:57:
                    c1:53:aa:51:fe:5a:d2:ef:1f:a2:f7:93:da:6f:a0:
                    98:53:19:b7:ec:b8:9c:41:52:8c:34:d6:5e:e9:be:
                    0e:3e:34:f4:72:9e:e9:73:75:ec:dc:96:27:98:e1:
                    07:64:39:76:e7:0c:ae:bc:90:db:fc:0f:46:20:81:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:20:4B:D8:C7:DF:FB:9A:8A:64:68:A8:86:53:FF:F6:D3:69:88:A7
            X509v3 Authority Key Identifier:
                keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:e3:4e:11:be:5a:4d:1d:f3:4a:6f:52:20:9d:44:7e:3a:83:
         8b:51:1a:90:e6:4e:d3:ba:c3:42:41:8d:af:cb:60:a4:25:b3:
         2b:7d:51:d1:fc:68:b2:00:6f:0a:4f:8d:59:b0:53:77:0e:ad:
         15:61:18:c3:59:82:64:eb:b3:97:41:c0:95:cf:93:4d:c1:57:
         77:05:69:f7:16:34:06:bd:98:a3:9c:f5:c1:76:7a:b0:19:a5:
         5c:a1:15:87:28:fe:4f:2f:e5:c9:79:cf:e5:a9:5f:2d:75:5e:
         94:0a:d7:96:60:2e:fa:f6:60:ef:d3:31:a7:d3:bc:e4:62:f5:
         8d:a2:9d:d0:5f:c1:20:dd:1f:81:1c:01:8f:e1:84:11:c3:85:
         34:17:a7:8a:d1:82:b2:3d:5b:78:ff:5b:38:8f:b7:f5:49:6a:
         87:23:aa:42:4e:2a:6a:0f:46:99:00:8f:fe:3b:bc:9d:00:c3:
         0b:2e:ea:ba:2f:fd:12:48:69:97:20:2d:25:b1:a6:69:41:db:
         8b:e9:80:33:c0:10:e3:08:62:0c:6a:36:73:32:98:f4:fd:bc:
         28:c8:36:f9:aa:6c:3f:e5:a9:b8:95:e5:ed:3d:c6:1c:99:f0:
         34:f8:b2:e8:a0:a0:c0:1c:ae:43:4a:2c:a8:9d:ef:eb:fd:21:
         86:9e:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:10 2026 by rpki-client