Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          Z2geftNFfraEJIKTY9lJ4P1xbOf+QYEyT/9rY7FnRuY=
Subject key identifier:   A7:67:EF:31:09:8F:3F:D3:20:FD:7C:94:10:8B:6C:E3:83:E6:10:E0
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       019CC184D454B67457C3929507413CD34326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          141A
Signing time:             Fri 06 Mar 2026 05:00:33 +0000
Manifest this update:     Fri 06 Mar 2026 05:00:33 +0000
Manifest next update:     Sat 07 Mar 2026 05:00:33 +0000
Files and hashes:         1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: tnV3uFc8FWQReGJidPTVrFnDXfSAtTwy2TGUvGVrigY=)
                          2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=)
                          3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=)
                          4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=)
                          5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=)
                          6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=)
                          7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c1:84:d4:54:b6:74:57:c3:92:95:07:41:3c:d3:43:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Mar  6 05:00:33 2026 GMT
            Not After : Mar  7 05:00:33 2026 GMT
        Subject: CN=a767ef31098f3fd320fd7c94108b6ce383e610e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:f7:06:92:23:33:60:b2:db:c6:57:b9:99:
                    d2:b6:0d:b0:ab:67:4c:85:0e:ec:17:de:c0:66:62:
                    94:4c:cc:4b:91:9a:93:d8:9a:1b:41:e2:1c:cd:1a:
                    76:d4:70:54:5e:5d:64:57:64:95:3e:aa:6d:b2:b8:
                    a2:63:b4:f6:df:63:ff:e7:fd:15:bf:a4:30:7b:2c:
                    f5:3f:94:d8:61:e0:44:95:43:8c:87:67:73:35:bc:
                    40:6b:ea:54:dd:17:35:ca:c7:9f:de:8c:66:bb:0d:
                    2a:03:a7:b7:f2:a6:a3:54:16:12:92:0f:69:4e:92:
                    20:9c:10:00:fc:73:73:a3:7d:db:b8:b8:43:17:f3:
                    ad:ba:ca:ce:56:df:1e:fa:3a:c1:26:0e:dc:fc:90:
                    95:53:96:a4:bd:e5:72:34:e9:a9:24:90:e0:bf:1e:
                    f9:ff:00:f1:30:5a:55:0e:89:a3:a8:8b:8f:7d:3b:
                    31:88:66:21:92:fc:00:37:7d:43:c9:12:77:ae:48:
                    21:df:e6:e7:01:92:c3:c8:70:a0:3f:5b:bb:25:fc:
                    89:4b:53:96:06:c4:19:76:65:fc:d9:52:6c:87:83:
                    c1:28:1c:75:a7:eb:c8:3c:57:4e:84:5f:6f:07:70:
                    85:72:64:f0:80:22:5d:df:45:7f:8f:64:c7:e1:5a:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:67:EF:31:09:8F:3F:D3:20:FD:7C:94:10:8B:6C:E3:83:E6:10:E0
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:65:54:67:94:49:72:12:ca:65:af:57:06:ba:bc:1c:ad:
         45:64:9e:c6:7a:89:99:2d:b1:27:55:36:3b:79:4b:99:e1:ed:
         9f:ea:9e:65:63:01:cf:f8:9a:f8:0f:f5:e5:1c:5b:46:f6:63:
         aa:f6:e4:3f:80:aa:bf:b1:59:91:99:71:dc:2b:68:d3:7a:f1:
         a1:ec:57:e2:3f:bf:c0:d3:66:aa:c2:c1:b7:5e:d1:04:8e:e4:
         10:52:db:db:9a:f7:74:f5:3b:4c:35:df:42:c8:d5:80:c9:5a:
         f5:3b:60:9a:5c:ae:53:11:6d:00:40:94:1f:7d:f6:16:a5:b2:
         03:8d:22:b3:5a:fd:38:95:75:3d:3b:00:da:42:6e:17:b9:af:
         a0:0f:99:91:6d:b2:9f:22:e5:21:2f:80:a4:6e:95:67:8b:b2:
         67:b1:b2:08:5a:5e:82:0b:06:9f:52:b3:3b:26:69:9b:10:9b:
         af:19:7c:17:1a:99:79:b3:a8:43:29:0c:13:a8:ba:db:f1:46:
         93:08:79:d8:44:da:b5:a9:2d:f4:d5:8b:61:64:a7:87:19:34:
         b3:9c:90:1e:7b:64:7a:39:f2:94:1b:7a:04:bf:91:89:f5:6f:
         29:44:30:88:86:41:d9:f9:eb:46:8b:1c:2e:51:81:a6:ac:84:
         b5:88:8f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 13:21:08 2026 by rpki-client