Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File:                     mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier:          oNjVIDBRpg4feGhI1oxOdZrpKFOmHzUuEgdjlgwEipI=
Subject key identifier:   5E:DA:39:82:59:BC:19:D2:96:D7:AC:33:10:B6:41:54:A8:D7:E3:10
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer:       /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial:       019CB95DBC04FF92145A69419688DCB52CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number:          122F
Signing time:             Wed 04 Mar 2026 15:00:53 +0000
Manifest this update:     Wed 04 Mar 2026 15:00:53 +0000
Manifest next update:     Thu 05 Mar 2026 15:00:53 +0000
Files and hashes:         1: KNVzSibwcIeJsoSsffQEDCnxWf0.asa (hash: y8bkznZSy/A3ZDayRMz8nCgtieLCBzH6L8q9ZF7Ujzk=)
                          2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: QVo+AiUIUTV081+1136uYRxe5sl+SOBV+KCTdy6MM7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b9:5d:bc:04:ff:92:14:5a:69:41:96:88:dc:b5:2c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
        Validity
            Not Before: Mar  4 15:00:53 2026 GMT
            Not After : Mar  5 15:00:53 2026 GMT
        Subject: CN=5eda398259bc19d296d7ac3310b64154a8d7e310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:a9:0f:30:ab:2c:36:53:ab:c8:c9:d1:20:
                    70:6b:d7:32:1e:06:85:42:ff:8a:32:76:2d:9f:70:
                    dd:51:5c:32:96:fa:4e:7b:4c:fc:88:6b:34:f7:f0:
                    ed:1a:ac:0a:35:3b:b7:d9:59:93:28:d9:73:46:f0:
                    aa:87:0c:bd:a8:b6:0d:6d:86:65:37:ed:51:d4:cf:
                    4e:8e:e9:74:4f:5d:41:e6:14:02:e3:58:81:86:e9:
                    2b:7e:ed:43:90:6a:17:2e:7c:43:44:06:c9:7f:2f:
                    0a:68:a1:4f:74:4a:5a:ff:68:bd:ae:c5:a0:c5:e0:
                    93:78:5a:fd:28:5c:cb:fd:0d:20:c7:24:c2:00:69:
                    0c:87:e2:af:f1:f9:98:0c:68:f9:44:e5:86:32:7e:
                    07:e9:95:61:ce:07:3e:e9:79:a9:ff:ab:ba:e2:3f:
                    0d:5a:f6:64:91:a1:ca:c1:ce:5a:12:93:7a:e7:8e:
                    c2:75:0e:79:92:b4:02:af:a2:bc:04:90:99:a3:2f:
                    c5:18:0b:a2:77:63:2e:bd:b5:60:ae:de:78:5a:61:
                    57:99:8c:19:09:23:63:24:2d:1a:d0:c1:4c:e8:40:
                    ab:46:3c:72:06:cc:e9:c2:ca:8b:88:71:a0:58:8e:
                    da:89:a7:05:e1:e5:b9:d9:50:b4:ed:d7:fc:5b:35:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:39:82:59:BC:19:D2:96:D7:AC:33:10:B6:41:54:A8:D7:E3:10
            X509v3 Authority Key Identifier:
                keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:f3:28:72:a2:f7:0d:8d:ac:64:5f:b6:22:4e:37:4f:c3:
         fa:89:25:af:7c:90:d1:09:0c:5c:4c:6d:16:a4:7f:de:b5:5c:
         7d:87:39:11:5e:f3:31:cb:dc:03:4e:e4:f8:27:5f:97:e3:62:
         0c:46:cb:46:75:98:c6:0b:1a:27:af:de:a8:64:09:30:a2:8c:
         90:b2:74:98:38:3e:dc:5e:3b:54:dd:e9:c7:18:14:ae:0d:54:
         7f:b8:60:19:f2:7e:9b:60:79:df:81:c2:20:c1:ce:b0:a4:d1:
         f7:fc:c6:b9:68:62:09:64:a5:35:ae:d8:fa:b9:53:08:89:3f:
         71:bd:11:fa:78:9d:83:32:03:96:5b:d6:e2:bc:3b:dc:12:d9:
         ec:46:29:30:06:fa:fb:79:70:8f:a3:df:b6:36:3d:96:fb:d9:
         fc:4e:ff:39:77:2d:e6:e1:1d:fa:04:c7:97:d4:b0:b8:43:16:
         4a:c4:a0:5c:4c:1c:e5:c3:70:63:b8:1d:03:67:c3:3f:4c:93:
         8e:51:43:a4:09:4b:2d:bf:04:4b:e7:d2:c0:93:de:ff:75:25:
         16:88:28:57:82:de:ed:cd:21:1d:79:ae:13:c4:fe:18:b1:d8:
         55:f7:d0:38:68:7c:c1:ab:5b:31:c0:63:0b:07:44:fb:61:f5:
         45:e3:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:41:48 2026 by rpki-client