Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          qoNd5ewKkr9m8LdKTBkWt8XmoUohBRG0sbkHLYIGntk=
Subject key identifier:   CA:99:27:DE:B3:3E:B9:FF:CA:9F:BB:2E:37:84:08:40:E4:FA:FD:0D
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       019CAC106CA87441847730F3FEC1D70B2F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          0509
Signing time:             Mon 02 Mar 2026 01:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:23 +0000
Files and hashes:         1: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          2: TRd3PwWjN2N6i0kSV548d4vlbt0.roa (hash: ZKnbwzmBAX2zhMCQGg8pdlTxO8b68gKUxXEWzkBH4eI=)
                          3: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: 6avYXlNuycktilmNI1Lw6aB4TkuA0Y7D65r+NfmP2yU=)
                          4: o04EKVPaSCdYlCxT4efK6vx9Qwk.roa (hash: tNYBjaANlJOuYZAK5FkLTFbNd6zPpcROskpJuIE9NLA=)
                          5: vdROiyfg7Rk7po_ehrTKDQNqa0c.roa (hash: f6MWESTdiTGixS85Uw99j5VOmLsdp4I0nn/xhtbypIY=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:6c:a8:74:41:84:77:30:f3:fe:c1:d7:0b:2f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Mar  2 01:01:23 2026 GMT
            Not After : Mar  3 01:01:23 2026 GMT
        Subject: CN=ca9927deb33eb9ffca9fbb2e37840840e4fafd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:62:8d:88:70:dc:6e:02:a7:b0:18:2b:2a:
                    13:2c:40:9f:3f:45:e8:91:a9:1b:d8:ba:4d:11:9d:
                    48:7b:e8:70:0c:68:4c:b7:a3:54:3e:16:27:cb:d6:
                    2c:28:89:b0:b1:b1:dd:f8:14:10:b1:d5:bb:c5:ab:
                    af:f6:39:a6:b2:72:8f:3e:ef:5f:25:a8:77:03:15:
                    0e:8d:1d:84:92:3e:eb:73:71:e1:8e:55:32:f5:3a:
                    59:f6:e4:03:26:65:93:3c:7b:54:ab:a9:40:d7:67:
                    07:7c:30:ac:25:fc:1b:b6:78:54:3a:d6:57:56:be:
                    18:8b:36:e4:6b:8b:f1:aa:13:61:7e:0c:42:c0:d4:
                    62:33:11:df:3a:fc:3e:cf:f9:2c:06:3e:09:bd:f3:
                    48:00:23:48:30:09:5f:f5:12:6d:e0:97:28:92:17:
                    bf:db:58:47:e4:cc:34:8d:2c:96:38:0b:0d:82:98:
                    54:8c:4a:a9:04:2a:f2:c8:6e:45:d1:4b:2e:1c:0d:
                    6f:5a:65:02:4b:70:25:37:78:59:7e:58:22:ac:36:
                    01:f8:0e:20:ef:3a:84:27:42:12:c8:6b:2a:d6:29:
                    1b:ec:56:0d:24:97:fa:68:51:02:73:af:d7:67:5a:
                    69:70:ce:93:27:70:23:05:04:be:ea:fb:30:f8:14:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:27:DE:B3:3E:B9:FF:CA:9F:BB:2E:37:84:08:40:E4:FA:FD:0D
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:0f:d7:28:66:47:e8:46:1b:30:2e:d4:92:4e:24:3e:fb:
         f5:70:8a:0e:65:18:e9:7a:c7:46:c6:ca:b4:0d:b8:63:28:35:
         be:23:50:e7:8f:ea:3c:f2:a2:61:ae:e4:8f:12:40:de:5a:9f:
         b3:a5:b7:fb:42:e7:cb:5e:f2:26:66:69:f4:a3:ce:c6:09:70:
         70:aa:b6:c6:24:ca:3a:1a:bd:05:b8:c3:ed:ab:3d:81:30:fc:
         bf:4f:1f:02:ea:bf:7c:98:4e:34:77:dc:b1:28:ba:57:a6:80:
         5e:42:6a:7b:84:0c:52:2f:90:af:cc:cb:8d:d8:22:cd:78:16:
         a8:aa:0d:9f:21:85:dc:e8:e1:00:d2:ab:36:7b:92:31:cb:61:
         6e:f4:ca:c2:fd:f3:9a:9d:6c:3f:fd:42:24:e5:43:1a:b6:21:
         60:89:f0:bf:a1:9e:41:c6:70:26:6b:22:f0:d8:a6:a9:3d:bf:
         c7:62:80:da:85:e6:cc:af:ab:5f:09:63:45:04:5f:f9:ea:15:
         93:35:18:e6:38:d3:c2:7e:68:35:3a:a5:a8:56:6a:69:19:20:
         bc:19:37:f9:af:9a:ab:07:6d:d2:03:14:3b:0c:0f:7e:ce:2a:
         53:1b:2f:6f:95:bd:a8:2d:5a:1e:4b:fc:31:d2:9f:8e:63:68:
         50:94:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:00 2026 by rpki-client