Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          M/CMeTXraMBaMDa8/8KFqe7iAsw85zI0N+qroxsb27k=
Subject key identifier:   44:BC:D1:FB:65:2A:5C:68:6D:F8:B1:64:F1:37:BD:6F:B0:79:74:E5
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       019CC297F8F6F2343A0AC8E60FAABCC70443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          0C82
Signing time:             Fri 06 Mar 2026 10:01:05 +0000
Manifest this update:     Fri 06 Mar 2026 10:01:05 +0000
Manifest next update:     Sat 07 Mar 2026 10:01:05 +0000
Files and hashes:         1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: f/u5NPSaE8pj8T1UO4WH2vG9F6Z1ukkvTnWB2diZHNY=)
                          2: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
                          3: W6MSMu0PWrKmQGBTGpo_U-BFG7Y.roa (hash: 94h/7+Oe/yFCuA9M0l2IxuWJF4e6SbCGvwaysJCvYSE=)
                          4: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
                          5: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c2:97:f8:f6:f2:34:3a:0a:c8:e6:0f:aa:bc:c7:04:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: Mar  6 10:01:05 2026 GMT
            Not After : Mar  7 10:01:05 2026 GMT
        Subject: CN=44bcd1fb652a5c686df8b164f137bd6fb07974e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:92:55:d6:e7:77:66:b8:b4:f9:6d:fa:86:
                    83:68:7a:98:e4:66:ca:f3:5e:da:35:68:07:65:7d:
                    0a:8f:dd:47:9c:80:e4:35:f1:35:22:d3:3d:11:52:
                    2b:a1:61:3c:f1:2a:26:c2:ca:22:46:f2:a1:b8:ec:
                    6d:31:72:67:21:da:54:86:15:a5:d4:33:94:b0:2a:
                    55:b4:3c:93:de:9b:0e:d3:ef:7a:bd:d7:8e:08:91:
                    8f:5f:c0:43:90:5f:24:d2:c3:de:d9:9c:31:9f:6f:
                    46:9a:6c:84:bb:50:80:89:dd:3f:45:7d:42:95:ca:
                    6c:90:ea:32:a4:12:d2:29:18:6c:7e:2b:1a:46:d2:
                    82:6d:80:51:2e:29:95:6d:52:5c:f1:30:fc:f8:e4:
                    98:88:15:6e:79:f4:b4:37:60:f9:99:ad:07:16:7a:
                    8c:04:31:5d:37:8b:b9:64:5a:3f:21:e6:5f:3b:02:
                    c3:e6:5b:01:ad:87:8d:2e:20:b3:fa:59:28:e4:f6:
                    2a:d7:d5:f0:bf:dd:88:98:9b:b3:fe:b8:34:b0:e1:
                    b2:12:69:55:de:a2:ab:63:3b:e2:09:f9:1b:78:e8:
                    b4:2e:7a:dc:d5:b5:cd:d2:f9:24:9a:4c:65:15:d9:
                    fc:f7:06:84:61:43:56:a5:84:61:db:ec:0c:06:4a:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BC:D1:FB:65:2A:5C:68:6D:F8:B1:64:F1:37:BD:6F:B0:79:74:E5
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2b:28:9a:80:1c:06:19:19:3b:29:4a:06:2f:63:3c:e0:b3:
         56:37:e1:6f:a1:07:52:e4:80:28:a3:72:87:e7:aa:d1:d7:ad:
         cf:88:c2:99:dc:85:f2:c2:de:11:54:db:a8:26:28:40:80:eb:
         c1:64:28:1e:b6:68:4e:c7:27:7c:ac:d1:74:29:95:d6:2b:22:
         a1:3c:b3:7a:a0:99:95:be:b9:da:20:8d:b5:78:08:36:c1:4d:
         d7:ad:90:c0:2a:0d:eb:3f:72:b4:7f:9c:88:8c:a7:e7:da:ff:
         90:84:40:bc:a2:45:70:d9:c6:a7:8e:a2:38:7f:a6:2e:a9:60:
         e8:44:01:8b:af:8e:60:ed:46:bd:91:7b:49:e4:af:94:b7:28:
         22:1c:96:0f:7e:bd:9a:79:9b:fc:0a:bb:36:07:bc:eb:ed:b9:
         66:1a:e7:9b:6f:56:97:58:e1:19:d0:11:15:cd:8d:ff:35:3e:
         44:08:c2:e5:f2:d7:5b:53:29:d4:52:3f:a2:16:6d:b4:e3:05:
         5e:a4:bb:86:51:d1:4d:a1:83:ac:50:2d:03:84:85:bd:1a:7f:
         c7:3a:63:ae:09:7c:d3:af:8c:67:fc:aa:ec:0d:29:56:fd:1c:
         8b:5e:36:2d:91:8d:94:a6:d2:eb:68:d8:c7:86:4c:82:ec:a1:
         c9:5f:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:19:32 2026 by rpki-client