Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File:                     DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier:          jc1Iw7PYCV8KO5ZvvN4x/WEXujwrZu2Iqp/bXLokW8o=
Subject key identifier:   10:1C:0C:95:FB:B0:46:1C:1E:E7:A3:4D:BD:E6:7B:AA:7F:4A:23:DD
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer:       /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial:       019CE4B5BAEC50B23182F84C1189D04F9F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number:          03B1
Signing time:             Fri 13 Mar 2026 01:00:40 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:40 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:40 +0000
Files and hashes:         1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: 0zWKDkE4YqW51NessHWgKCoEbhj6wUufeeXqARc9puo=)
                          2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:ba:ec:50:b2:31:82:f8:4c:11:89:d0:4f:9f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
        Validity
            Not Before: Mar 13 01:00:40 2026 GMT
            Not After : Mar 14 01:00:40 2026 GMT
        Subject: CN=101c0c95fbb0461c1ee7a34dbde67baa7f4a23dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:35:7d:c6:c7:a6:2f:fa:38:8b:b6:e8:9e:56:
                    f9:69:ab:57:fc:b0:34:af:0c:0c:2f:af:be:94:0b:
                    c7:b2:9b:42:bf:b2:3e:88:b7:c4:33:08:c5:df:a2:
                    87:c0:2d:8e:08:93:6a:c2:b3:7e:13:d3:3d:db:13:
                    60:48:41:2e:96:e3:14:05:9d:03:0e:ed:f0:c9:b1:
                    bd:a4:79:a8:b7:a6:03:11:31:ad:2d:ed:34:1e:34:
                    09:e9:80:53:b4:10:c1:1f:54:d7:27:25:d8:06:d0:
                    78:e8:40:db:69:84:3a:5e:c9:69:21:da:49:49:c2:
                    64:25:5d:d3:5e:84:66:20:33:07:57:75:d7:70:88:
                    e8:48:a8:29:34:9d:0d:86:08:b8:25:f8:81:5f:f9:
                    12:0a:9e:d2:2e:dd:b2:db:da:29:85:1d:a9:37:56:
                    d6:dc:f7:ef:3e:81:e5:b3:7b:27:53:ca:d5:de:bb:
                    8e:54:3f:1b:13:9e:23:9d:01:32:1b:6b:7d:59:77:
                    07:ec:74:ab:5e:23:26:2e:2a:db:3a:a0:6a:98:e2:
                    58:5c:49:12:d8:21:dd:98:00:16:9c:2b:4e:61:0e:
                    27:41:98:4b:6c:32:3b:8b:ef:0b:98:2e:16:16:e1:
                    63:cb:8a:d1:a1:23:20:54:51:c4:0b:2a:e2:35:e2:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:0C:95:FB:B0:46:1C:1E:E7:A3:4D:BD:E6:7B:AA:7F:4A:23:DD
            X509v3 Authority Key Identifier:
                keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:6c:d9:eb:80:46:4d:3f:7e:b7:ce:94:f3:42:c6:4c:6e:
         09:b0:74:9e:96:ab:d0:71:c8:08:7a:ee:14:70:ee:7d:2c:23:
         be:23:ae:f7:08:5e:c2:06:69:d9:e9:61:ec:42:97:d9:2e:df:
         92:5e:59:50:1e:fd:cc:7e:2e:63:f7:2c:36:f3:1e:96:cb:2a:
         66:f4:4a:1a:c3:3c:94:27:a0:71:26:07:25:c1:db:e5:93:ef:
         6c:53:ea:1b:70:e0:fc:c8:ff:56:39:b1:c5:97:0b:e3:81:78:
         0d:f5:3f:c7:41:b3:28:b3:21:8a:2f:39:87:57:60:00:bc:8d:
         29:12:e2:80:85:bb:87:cc:24:ff:c9:9b:9f:ab:eb:f0:f6:0d:
         da:46:21:6e:c0:f7:99:ab:9d:a4:ba:20:3c:af:62:30:de:f0:
         97:28:3c:d8:9e:f6:2d:82:c3:10:29:33:8c:5f:10:c9:ea:f4:
         1a:56:19:dc:76:d9:74:88:86:21:9b:f0:09:8f:4f:16:6e:55:
         a9:37:b1:4e:cf:05:1e:3c:8d:a9:62:0b:93:25:3f:c5:ea:83:
         8b:60:da:ce:6a:4d:30:91:99:21:c8:5a:a5:41:c7:18:6b:a9:
         c6:fe:54:cb:85:87:c6:4b:02:b2:38:6a:38:12:e3:14:ab:61:
         ee:42:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:04:06 2026 by rpki-client