Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File:                     1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier:          Do6TMFplvQ+WDuSWscEq87Vd1bVUAvlYo6lGKQZ2qM8=
Subject key identifier:   03:3D:57:22:72:ED:CE:B8:60:5F:16:00:4B:8C:D7:EE:E9:C4:DA:2F
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer:       /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial:       019CA1C42F9182702212B0D4CF954A31995B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number:          14EC
Signing time:             Sat 28 Feb 2026 01:01:54 +0000
Manifest this update:     Sat 28 Feb 2026 01:01:54 +0000
Manifest next update:     Sun 01 Mar 2026 01:01:54 +0000
Files and hashes:         1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: 6oCRKtTIp265jQu0ReppvAbkUxKFLTqMGeBr4o6+7rI=)
                          2: pTKY06gWgEXaIu_OYznOKa1SCYQ.roa (hash: DO+JIn1Z+CZdkSG19VC8thtAj3bTLW7VrZO6RWhGcRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Feb 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a1:c4:2f:91:82:70:22:12:b0:d4:cf:95:4a:31:99:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
        Validity
            Not Before: Feb 28 01:01:54 2026 GMT
            Not After : Mar  1 01:01:54 2026 GMT
        Subject: CN=033d572272edceb8605f16004b8cd7eee9c4da2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:07:4c:b3:20:bd:c2:7c:dd:42:d7:6b:28:
                    02:08:a6:7b:21:1c:f0:1f:16:09:69:d2:48:61:b8:
                    af:9f:9b:98:d9:6b:b0:1e:53:0d:53:ec:7b:bc:c7:
                    66:08:9e:02:60:13:24:44:6b:7e:9f:b8:e5:73:26:
                    a4:11:40:e1:c4:48:07:ac:0a:1f:ed:81:66:44:aa:
                    e7:d1:f5:ee:0a:4a:14:2d:29:08:cd:85:66:28:ce:
                    38:d1:0b:c1:d7:8c:69:25:e9:a4:b1:3a:79:6e:87:
                    68:14:12:c0:53:fe:75:9b:f2:df:04:ab:8a:c2:ad:
                    11:c3:06:68:ea:80:32:eb:f5:37:01:73:71:66:8a:
                    25:7d:a6:6f:57:c7:14:65:d0:8d:83:b8:3a:e4:09:
                    22:18:c1:f2:fc:e0:5a:3c:3c:27:c4:9b:3a:10:96:
                    11:3c:f2:f5:52:75:31:9b:54:19:10:65:df:ce:49:
                    14:2e:1a:38:19:d7:9d:ef:2b:0b:b3:83:5c:a9:e3:
                    67:64:97:98:ab:42:a9:b1:9e:a3:cd:5d:9d:a6:8f:
                    b1:06:9f:fa:fa:79:fd:8b:d7:6a:9a:e7:6b:7a:f2:
                    f3:eb:ff:17:e5:c8:31:5c:77:e7:03:d1:a2:9b:e0:
                    1a:1f:9f:c9:09:1e:42:07:1b:07:87:41:c0:54:3e:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3D:57:22:72:ED:CE:B8:60:5F:16:00:4B:8C:D7:EE:E9:C4:DA:2F
            X509v3 Authority Key Identifier:
                keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4d:10:83:1b:46:74:12:63:f1:af:a5:8f:97:03:a3:4c:81:
         7a:7b:da:4d:3c:92:df:78:3a:ee:c3:07:a7:77:32:9b:7a:11:
         4c:8d:eb:ce:57:6d:03:1c:50:7b:95:bb:9b:6d:60:32:2d:e7:
         08:b3:f4:41:e4:18:8d:ba:f7:21:64:b1:bc:4e:64:6a:d2:0f:
         5a:56:f2:11:b8:c2:1d:37:2e:56:3d:3f:f8:da:80:57:1b:20:
         ad:a9:4c:56:30:73:cf:5b:69:c6:61:74:a7:95:21:9f:9c:49:
         8c:47:0f:96:a1:67:30:df:31:d1:3a:51:b3:7d:54:40:ff:61:
         e9:92:4c:92:8a:71:cd:f8:9e:29:83:c8:4c:64:d3:11:f1:12:
         47:9b:23:d7:37:4c:6a:90:7a:47:b4:6d:cc:a8:31:9b:e0:21:
         04:aa:5e:98:d1:11:89:64:1a:4f:1a:d6:bd:d9:1a:e0:79:fe:
         09:c6:a8:d2:39:75:2b:71:55:bd:e8:ff:91:fe:2d:ad:60:02:
         2d:46:80:d7:dc:6f:01:d9:27:74:30:86:bd:8f:15:71:66:9c:
         d7:82:3f:af:2c:1d:cc:03:14:ed:c1:5d:3b:5d:23:5c:06:62:
         36:8a:ca:9e:01:e0:20:70:5b:57:09:be:39:d9:09:3b:36:9e:
         3f:ed:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 04:09:35 2026 by rpki-client