Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File:                     r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier:          U2aYJObK90xYyp8ApPY+iktLvwtpMHa4UrOoZRNYwck=
Subject key identifier:   31:7C:64:D7:B4:E6:32:31:D8:19:8E:95:FA:75:AA:45:62:CD:AD:E6
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer:       /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial:       019CE2FDE5360B74D0882A4D165403FAD2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number:          088D
Signing time:             Thu 12 Mar 2026 17:00:15 +0000
Manifest this update:     Thu 12 Mar 2026 17:00:15 +0000
Manifest next update:     Fri 13 Mar 2026 17:00:15 +0000
Files and hashes:         1: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (hash: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ=)
                          2: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (hash: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c=)
                          3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: UtxjAhqJUlhvqTZkqwfXbC4/bNOV74W6iKIMPb3qwbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 17:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:fd:e5:36:0b:74:d0:88:2a:4d:16:54:03:fa:d2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
        Validity
            Not Before: Mar 12 17:00:15 2026 GMT
            Not After : Mar 13 17:00:15 2026 GMT
        Subject: CN=317c64d7b4e63231d8198e95fa75aa4562cdade6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:f5:bf:8a:3a:25:4d:c0:40:8e:19:a4:48:
                    27:ed:96:9d:1b:e9:a3:00:96:55:52:cc:ff:61:c0:
                    bc:98:03:28:55:db:af:e0:bb:8f:37:2a:48:0c:ef:
                    ad:26:c6:e9:5c:73:c2:2a:ec:47:7e:2d:07:c0:ed:
                    02:2d:58:38:96:ee:e5:ff:5e:8f:43:20:b9:b1:19:
                    7d:a1:c2:0c:39:e1:68:7d:92:fc:3a:cf:fd:6d:d8:
                    0d:c5:8d:23:e0:8d:7c:ee:3c:a2:c0:26:d4:35:f4:
                    89:e9:8f:2e:9d:0d:84:a0:68:c0:2b:1c:03:57:02:
                    88:6f:a3:6f:ff:79:48:2c:9c:f4:fe:e4:da:e7:90:
                    82:c9:7f:95:43:5f:b1:03:e0:24:ed:6a:c0:ee:bb:
                    13:f4:a8:2c:f0:97:88:fe:e6:b1:96:6f:e4:69:db:
                    b6:ca:61:67:89:5c:05:ed:0f:8a:3b:81:ed:a6:1f:
                    f0:d6:54:cc:7a:87:d0:aa:42:1d:e2:ce:32:c6:ba:
                    48:89:41:9d:a7:4f:0a:08:2d:8a:1d:86:8f:80:f7:
                    d2:46:df:7c:9d:dd:49:35:ec:76:45:c6:e1:29:f9:
                    46:a5:d8:4b:6a:97:28:61:8d:cd:ba:fe:52:e8:b3:
                    a8:47:09:b2:f0:91:f5:8f:82:9c:0d:82:ce:37:42:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7C:64:D7:B4:E6:32:31:D8:19:8E:95:FA:75:AA:45:62:CD:AD:E6
            X509v3 Authority Key Identifier:
                keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:00:49:f1:54:de:9c:21:3d:6c:02:82:7e:4b:d7:01:0d:
         a3:81:b3:9c:f0:d9:93:21:d3:1b:b0:b7:3e:4c:0f:6f:d4:90:
         5a:78:51:6e:30:f1:10:2b:f6:7f:bf:3d:16:20:6a:64:57:da:
         ab:7b:0a:c2:09:a2:4f:cd:fd:be:9c:59:6b:ea:ff:61:3b:5c:
         73:2f:f9:c1:5c:c8:ce:50:3b:f7:09:70:30:ec:1f:87:45:ad:
         3a:e0:63:c6:fb:d0:ad:e8:f6:24:64:3c:2d:de:86:e7:be:af:
         35:d0:bf:a5:49:49:f8:28:27:88:ae:77:d6:6f:ce:84:07:0f:
         ad:ba:d6:6d:10:f7:34:5c:6c:9a:23:0d:0c:ee:32:33:3c:5c:
         2d:da:c5:84:55:27:6f:c4:52:12:2c:4f:19:7c:74:2e:62:6c:
         aa:02:5f:bf:82:85:c3:63:cc:5d:82:e6:b0:15:98:79:fa:e4:
         79:1c:32:f5:9c:63:ce:c7:de:a2:3b:1f:d5:9a:29:92:32:78:
         ef:f5:ed:04:5b:2e:99:f8:db:ea:c6:68:90:34:22:7f:5f:c4:
         b5:85:91:26:54:82:ba:2f:2f:ca:20:7d:d0:bd:76:18:d7:b9:
         62:a0:ac:18:ba:42:b5:76:49:f3:1f:d6:d4:0a:70:16:08:78:
         fd:b3:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:06:25 2026 by rpki-client