Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
File:                     RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json)
Hash identifier:          RndrOLniDTTQMA9cqRwx358Ane37AzOKmuUCncuo9YU=
Subject key identifier:   C5:72:25:5D:3E:FE:13:0C:BD:5E:85:F3:49:B9:64:C2:89:05:B1:54
Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
Certificate issuer:       /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Certificate serial:       019CBDDFA5367390B82552E5693C0F0D76D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
Manifest number:          0273
Signing time:             Thu 05 Mar 2026 12:01:16 +0000
Manifest this update:     Thu 05 Mar 2026 12:01:16 +0000
Manifest next update:     Fri 06 Mar 2026 12:01:16 +0000
Files and hashes:         1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: B+ijjnmdAjG2WcsMArxZop2WrWTFbyzRwj2EpUF41vM=)
                          2: TGnGTCkP1dTeSG5Z0jeGksx2_TM.roa (hash: 4RJjvyKtkRooo1Te20TythHJtDrbG5VCS6d6MKrm0hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bd:df:a5:36:73:90:b8:25:52:e5:69:3c:0f:0d:76:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
        Validity
            Not Before: Mar  5 12:01:16 2026 GMT
            Not After : Mar  6 12:01:16 2026 GMT
        Subject: CN=c572255d3efe130cbd5e85f349b964c28905b154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:f5:a2:2e:4b:e4:ba:6c:55:4f:d0:45:09:
                    a9:4b:78:bb:dd:dc:96:c3:62:2e:5c:f8:96:db:3f:
                    79:06:46:2d:fd:f3:42:e7:86:12:95:1e:8e:f1:3c:
                    e6:02:37:d5:27:89:31:5a:98:1f:b4:af:e1:35:5f:
                    1a:ed:bc:c3:84:69:0a:74:0f:55:41:78:55:00:a7:
                    bf:3a:4b:03:fd:28:4c:c5:d5:4c:ea:f1:bf:ee:05:
                    4a:66:f0:a4:aa:f6:15:af:9d:ed:d1:7e:37:e6:cb:
                    92:e1:13:53:5d:78:d8:36:00:6e:c9:e1:50:d9:d8:
                    79:03:79:28:1e:8a:40:79:f8:e7:44:53:8a:b1:be:
                    4c:cf:04:e6:44:3c:41:bd:cb:a9:73:2e:18:70:30:
                    fb:ab:d6:b7:ff:f3:a5:e6:62:4b:4c:3f:11:5f:5d:
                    fc:9e:87:d0:09:c5:48:4f:18:b1:45:d6:5b:80:5c:
                    65:d3:7f:fe:26:31:85:db:b8:db:1c:d1:f5:92:b1:
                    f2:c1:36:d0:a7:60:8f:c2:5b:3b:2c:71:19:e6:f8:
                    27:28:49:b1:fb:aa:dd:88:ba:ff:72:39:8f:d4:b9:
                    ed:4f:d3:1d:6a:b5:3f:83:90:a8:55:1a:c3:41:5a:
                    8e:c5:ae:2e:c9:27:46:a6:bc:5f:64:4f:51:00:8c:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:72:25:5D:3E:FE:13:0C:BD:5E:85:F3:49:B9:64:C2:89:05:B1:54
            X509v3 Authority Key Identifier:
                keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:db:7a:ff:4b:e5:3f:e4:65:01:f2:7d:0d:43:4c:70:90:00:
         6d:72:26:12:0c:de:a9:7e:1f:35:14:14:08:65:a8:28:34:43:
         17:03:f0:38:36:8a:0d:bf:c4:be:4d:12:04:c4:cc:34:34:0f:
         31:4a:df:43:89:dc:84:6a:d3:9e:60:c7:a5:9c:c1:d1:97:15:
         b1:0f:69:43:b1:4d:f1:34:3e:14:ce:73:ec:f6:57:e0:54:25:
         a5:de:5b:9a:9a:2e:09:0b:37:5a:c3:de:59:ab:59:22:49:25:
         c1:6b:b1:aa:9c:ac:46:86:5b:29:d5:2e:b2:88:6a:62:46:f8:
         89:00:07:cd:15:2c:1f:af:39:2f:9f:b8:71:9d:00:af:97:63:
         5d:33:37:93:27:09:7b:c5:1c:11:15:40:3d:d1:e3:ec:13:8a:
         1d:7a:ea:8f:62:bc:2d:a5:cc:e1:5f:cf:77:df:46:55:fc:e4:
         d7:46:e4:c4:43:2d:9c:8a:66:00:ff:12:3c:34:31:b0:53:7e:
         04:85:ac:13:cc:02:dc:93:8c:36:7d:ee:a5:1f:ca:12:ff:56:
         da:31:53:f6:15:ab:8e:53:48:f1:c3:19:00:1f:84:f0:66:1b:
         12:d2:a7:f2:d0:6c:4b:08:4e:59:c8:bf:e1:16:07:62:5b:07:
         92:95:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:18:25 2026 by rpki-client