Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          oC0+iMsO7t7WRLo+vMDMO1OFZoCPFSprWaCTsWnx4eo=
Subject key identifier:   72:4D:9F:BB:18:FB:2C:FB:FA:68:A1:52:18:81:28:DC:33:3E:B6:71
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       019CC3738AEE259ED4677A3D6FEF746C0F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          07D6
Signing time:             Fri 06 Mar 2026 14:00:55 +0000
Manifest this update:     Fri 06 Mar 2026 14:00:55 +0000
Manifest next update:     Sat 07 Mar 2026 14:00:55 +0000
Files and hashes:         1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
                          2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: n1v/x40m2bG1g/Q0gGtS9THcCwp/lY9KczZ8kI5wkBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c3:73:8a:ee:25:9e:d4:67:7a:3d:6f:ef:74:6c:0f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Mar  6 14:00:55 2026 GMT
            Not After : Mar  7 14:00:55 2026 GMT
        Subject: CN=724d9fbb18fb2cfbfa68a152188128dc333eb671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:01:58:7e:df:2b:e2:46:c7:58:9f:c4:60:
                    b1:fc:68:ca:10:f1:9b:3e:b7:7c:5c:42:c8:5d:b5:
                    17:d0:a3:8f:c0:b8:fa:1a:35:f5:20:8f:50:af:27:
                    bc:65:29:f5:96:a7:36:39:13:b8:90:8b:d3:da:f8:
                    8b:85:19:24:c7:08:ae:52:a1:fd:78:f1:bb:2e:c3:
                    ce:b0:29:f8:ae:15:42:85:ca:cb:d4:1b:df:27:c5:
                    4f:e4:12:c1:fe:04:21:f6:6f:e6:d6:f2:44:62:8f:
                    2e:70:c6:22:0c:37:76:94:54:c5:25:a2:df:8e:7a:
                    9a:8b:28:37:41:85:03:b8:8b:05:8c:f8:5d:0d:70:
                    6d:e2:44:15:ec:b0:5f:49:22:7b:6d:ca:ab:e3:bc:
                    92:37:f6:61:1c:0e:3e:8b:80:07:ba:3a:ad:6f:dd:
                    d8:92:a6:fa:d7:5d:16:10:70:1a:29:13:73:e9:17:
                    b2:2f:28:96:6f:3c:29:c2:05:a9:5b:5e:96:24:98:
                    c5:7c:a3:ff:87:88:77:fd:7f:4a:49:09:62:41:71:
                    21:e5:b0:04:33:5c:dd:37:5b:90:92:9f:9d:d0:a9:
                    63:3c:80:5b:c9:ef:1c:71:f4:7e:10:ec:c5:c6:a7:
                    32:ff:a1:05:df:b7:32:41:e7:ef:1b:0c:92:e4:1a:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4D:9F:BB:18:FB:2C:FB:FA:68:A1:52:18:81:28:DC:33:3E:B6:71
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:19:19:3a:90:da:3c:77:da:48:c5:ef:ed:e8:c0:1a:d3:
         71:7c:11:4a:53:05:32:af:5a:9a:b5:aa:8e:c2:da:ac:9d:39:
         dc:45:d7:63:f0:03:f6:ef:67:4f:52:d2:00:6c:8e:98:f8:8a:
         31:28:cf:9a:86:86:3c:5b:ef:2f:57:a5:cd:c8:69:e0:5e:2f:
         ec:f3:5a:c0:fa:2f:23:f0:c6:12:09:26:5e:04:86:3e:55:4f:
         43:0a:90:84:34:66:fb:1e:f8:46:bc:8c:15:f8:c1:79:a9:4c:
         4a:20:06:9a:e7:cd:71:9b:b1:af:1e:03:4f:5b:55:09:58:b2:
         e4:b9:38:d0:e4:07:09:03:1b:50:55:34:86:ff:61:48:cf:87:
         96:68:f7:02:08:d4:d2:bc:4b:79:3f:43:d8:b9:b6:e6:2e:2f:
         b7:a9:fa:04:29:74:6e:18:64:29:ba:95:f7:aa:3e:06:1e:76:
         22:08:dc:f2:da:8c:30:88:6d:7f:1f:be:1b:17:81:0f:2f:8b:
         81:80:c5:af:8e:ae:70:fd:c3:3c:06:d5:a4:68:76:96:02:63:
         cc:d7:91:11:50:c7:32:43:5d:be:65:94:13:b3:9a:2d:39:9d:
         79:0c:c2:6c:5e:d7:72:68:74:d2:30:b2:48:49:5e:5b:da:8b:
         89:26:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 21:46:52 2026 by rpki-client