Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          2BUB4BoynIfGVtxHcnxNZ5UYkTFvrZMqTWz6UMeDstI=
Subject key identifier:   0B:A8:69:2C:AE:6F:87:1F:29:E9:D0:86:32:D5:65:03:28:99:5E:9F
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019CC93E7B3BA0937A105EB7110B00E8B03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          164A
Signing time:             Sat 07 Mar 2026 17:00:40 +0000
Manifest this update:     Sat 07 Mar 2026 17:00:40 +0000
Manifest next update:     Sun 08 Mar 2026 17:00:40 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: /CPUILjERYa37dWNKmL5fKCWmTGGafhFGK3ddWTrqqo=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:3e:7b:3b:a0:93:7a:10:5e:b7:11:0b:00:e8:b0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Mar  7 17:00:40 2026 GMT
            Not After : Mar  8 17:00:40 2026 GMT
        Subject: CN=0ba8692cae6f871f29e9d08632d5650328995e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:a9:e8:50:8e:45:70:fe:d1:bf:1b:01:42:
                    3a:2f:d0:28:7a:19:af:a6:08:da:a3:cd:44:94:81:
                    c9:f9:8f:22:c9:f5:8b:b9:be:85:be:87:53:76:57:
                    63:4f:3e:d0:6f:1e:04:a5:25:c9:94:18:5e:8d:37:
                    99:3d:b7:86:88:e1:dc:3a:67:42:be:c7:44:6f:34:
                    98:a1:19:98:a6:31:7a:40:73:8d:2b:77:2e:28:3f:
                    66:1c:f9:64:6d:63:04:71:3f:76:77:f7:b6:f5:a2:
                    c7:10:0f:b5:5a:be:45:f5:81:6a:77:85:7c:e3:66:
                    a0:6d:90:fd:96:ce:17:f8:81:b3:d7:ff:3c:34:09:
                    8c:4a:56:13:65:4c:d9:f6:73:fd:3f:d0:f0:aa:29:
                    4a:8d:9f:ce:0b:dc:24:b9:32:58:05:d2:60:88:85:
                    07:0e:86:0f:0e:f1:94:32:c3:cf:ec:b0:56:79:39:
                    b6:ac:df:9b:31:d1:ca:23:df:42:ff:5c:a2:fa:f4:
                    db:f6:01:f7:8e:32:4d:ad:88:bb:e2:cc:8c:40:4f:
                    0d:72:30:e0:94:7a:6c:cd:56:cd:cb:72:e5:4a:98:
                    21:8a:f6:ef:04:54:24:ad:58:43:d6:c4:74:47:37:
                    78:2f:57:6c:75:4a:e1:d2:be:f9:bc:b5:62:9c:7a:
                    bd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:69:2C:AE:6F:87:1F:29:E9:D0:86:32:D5:65:03:28:99:5E:9F
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:22:3c:7d:ce:73:81:c1:35:02:28:b5:f4:61:2d:dc:06:
         70:fb:d5:4b:4b:09:35:81:66:af:79:eb:1f:af:77:99:0b:47:
         8e:94:00:8e:a1:f1:b7:b0:b6:82:4a:6c:c3:06:fb:29:cf:bf:
         8b:26:2e:eb:ad:1b:97:66:57:19:07:91:d6:98:d2:2e:98:ab:
         59:66:e6:3c:60:13:f6:1f:5e:18:03:61:63:bb:42:0f:ab:81:
         63:51:e0:fb:03:89:f1:b0:ec:01:f5:f6:8a:71:01:a9:49:e6:
         2f:da:dc:af:b8:9e:69:33:98:96:13:ae:7a:a2:dc:dd:61:8b:
         07:3c:5e:d1:4a:4c:60:58:99:7d:77:ff:90:eb:81:ad:8d:c0:
         23:2a:3d:99:16:19:cc:99:b2:b9:57:8e:19:50:46:43:c5:99:
         18:d8:7b:32:0a:72:64:e1:f3:60:47:91:e4:ac:b9:5f:39:e2:
         5a:2c:2f:a0:07:e5:37:fe:73:8b:35:e0:97:01:83:57:a8:3d:
         0d:61:24:c3:10:c1:9a:ce:90:c3:56:ed:8d:4e:92:63:0e:8c:
         46:f7:48:86:41:21:10:fa:0e:32:38:1f:e1:1c:e6:80:3c:07:
         3c:0e:86:10:b5:e2:ef:ec:3a:da:6b:15:8f:8d:72:be:f7:71:
         05:8c:af:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:53 2026 by rpki-client