Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File:                     Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier:          ayClHd6oCQ4qxHEnd/vb+ZUR9v3049exahxqZFoUd4A=
Subject key identifier:   9F:75:47:5D:20:F5:20:B9:82:74:E7:56:52:F7:B5:BA:7A:E4:D7:21
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer:       /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial:       019CE6368A593672EA80D1381C4659E4CC3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number:          05DD
Signing time:             Fri 13 Mar 2026 08:00:59 +0000
Manifest this update:     Fri 13 Mar 2026 08:00:59 +0000
Manifest next update:     Sat 14 Mar 2026 08:00:59 +0000
Files and hashes:         1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: L5riSP/B3TerKU+ZHtXs3SCQZNuQBZnQ7ObYrGngqcw=)
                          2: hOzUFEchirVSZu4kGiThKl20Lag.roa (hash: H5zzg9d1gpHKYOjHoQCkEIEH4mlnH12RrDwh03hHnuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:8a:59:36:72:ea:80:d1:38:1c:46:59:e4:cc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
        Validity
            Not Before: Mar 13 08:00:59 2026 GMT
            Not After : Mar 14 08:00:59 2026 GMT
        Subject: CN=9f75475d20f520b98274e75652f7b5ba7ae4d721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cb:3d:8f:f6:50:6f:ee:e7:70:40:d5:02:de:
                    cf:95:1a:a2:d3:02:e8:bf:d9:70:eb:0d:a3:a0:b3:
                    01:d1:96:9e:75:8a:9a:98:0f:3a:b4:ec:27:c7:75:
                    1b:7c:1e:e5:fa:58:a7:bc:b3:9c:49:c8:a6:ba:69:
                    de:03:8e:0f:02:5c:ce:dc:97:26:23:40:63:24:11:
                    59:1e:ac:be:2d:37:5d:b4:82:7b:69:20:14:36:56:
                    2a:70:70:4c:52:f6:85:a6:8f:7e:11:31:80:92:d2:
                    93:67:29:a1:b0:6d:ac:f9:eb:64:30:b6:84:13:05:
                    13:6d:02:e6:9e:f8:6f:86:ba:10:0a:03:25:b9:c9:
                    f3:bb:63:49:ff:db:a2:69:0d:73:51:b5:1b:88:2e:
                    ad:8a:e4:63:2e:15:73:c6:f0:cd:d4:ff:51:99:bb:
                    47:e3:17:90:dc:33:e3:5d:dd:09:8e:03:8b:1a:e1:
                    31:5e:b7:62:ae:89:1b:13:be:4c:9d:f4:6a:b6:89:
                    b8:be:c6:cc:86:25:4a:ab:a3:3c:08:ed:91:70:26:
                    a5:a8:4a:9d:e7:4c:84:b9:2b:42:9e:ca:3b:d7:41:
                    23:62:76:6f:08:01:45:a0:cb:44:54:ca:98:08:3c:
                    41:99:0c:25:8f:f6:f2:a2:82:c5:58:c0:79:6b:d8:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:75:47:5D:20:F5:20:B9:82:74:E7:56:52:F7:B5:BA:7A:E4:D7:21
            X509v3 Authority Key Identifier:
                keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:fe:14:22:e1:d7:46:96:56:a8:d5:ee:0f:b4:8d:8c:cc:f9:
         06:32:a7:89:85:1d:8c:ab:0f:9b:33:24:39:13:42:7e:65:91:
         05:cc:9e:e6:04:2e:bf:ea:3b:4a:15:c0:15:34:60:7b:b3:2f:
         56:ac:d2:0b:a3:0c:9b:b5:24:15:cd:22:4c:35:a9:47:e0:fa:
         f3:ba:89:37:e5:7b:cf:02:a8:23:1c:c8:4a:fd:03:a5:56:cb:
         0d:78:ca:5c:e4:ce:6e:25:1a:35:7a:17:d3:50:1f:a4:65:f8:
         31:71:f6:78:44:50:8a:98:ca:af:44:9e:95:e2:58:45:40:68:
         7a:99:b7:84:ea:8e:17:61:ec:3f:b1:96:03:d7:5d:1e:70:db:
         b5:2c:11:c4:23:63:a6:1a:55:f6:4f:c5:f7:05:18:00:10:c9:
         4b:0b:a4:2d:97:73:bd:fb:ea:dc:99:9b:46:26:6b:f8:c5:cc:
         c5:5d:80:56:83:85:3e:ab:43:b8:45:a7:df:10:5a:a8:e0:7d:
         d0:e4:b6:02:13:69:4f:4c:6c:e8:1e:5c:1c:41:19:e8:37:0d:
         7a:45:dd:29:60:3f:8a:08:9e:78:bb:57:3b:78:9d:c6:9b:7d:
         cc:2b:fe:34:23:94:5c:83:26:b4:d9:52:43:e0:c9:1f:57:cc:
         11:69:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:10:19 2026 by rpki-client