Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          ihc7Ispnw2Lm8ohK8IQqFiaHgjX7h4R4yyzF1SHtTL0=
Subject key identifier:   0C:6F:EB:CA:C7:29:36:DD:E7:51:A4:D8:9F:58:D8:29:B6:C7:44:98
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       019D39777F686069D453DD32C64956F01857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          092F
Signing time:             Sun 29 Mar 2026 12:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:25 +0000
Files and hashes:         1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: vTpSPpRMWObMcRllNb8dqZ66giZepTr56rI4eZ4s6AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:7f:68:60:69:d4:53:dd:32:c6:49:56:f0:18:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: Mar 29 12:00:25 2026 GMT
            Not After : Mar 30 12:00:25 2026 GMT
        Subject: CN=0c6febcac72936dde751a4d89f58d829b6c74498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:0a:37:4b:71:ea:b4:b5:c4:75:b6:d9:ec:
                    9b:c0:93:41:1a:61:73:4c:9c:ba:00:9a:af:0b:03:
                    ff:ad:3b:06:34:63:b8:28:f8:08:76:19:96:4b:6b:
                    d7:b4:25:67:bc:aa:3f:41:80:4f:c8:62:7e:e6:b6:
                    6d:b5:5d:07:cf:22:b6:3b:51:79:30:e9:6c:1f:7b:
                    a7:a3:e5:b9:90:3d:86:f6:22:84:da:8f:8e:df:5f:
                    ee:5b:e8:8c:50:46:39:2e:18:7a:a0:33:05:8b:6c:
                    df:99:86:05:1c:fe:09:a7:43:e9:f0:1f:77:68:6b:
                    c9:92:29:89:97:62:20:19:0d:01:b7:05:0a:a8:1a:
                    39:72:6c:9a:82:a8:00:52:f4:b5:79:85:1b:08:f2:
                    16:b5:92:1d:48:7c:76:24:77:aa:6f:0c:9a:f3:e5:
                    59:ad:b8:7c:18:ec:37:1c:54:b9:a4:4b:b9:b8:30:
                    89:ef:7f:0e:81:6e:b9:c8:8b:07:2d:4b:59:0d:e1:
                    c3:a1:73:63:3e:98:e7:c3:e1:50:e7:e7:3e:e7:55:
                    9f:ff:5e:ec:1d:23:a4:3f:84:9e:02:48:8e:12:cb:
                    1d:e6:61:ad:25:f8:4a:31:87:b7:7b:03:bf:b7:95:
                    3f:37:f7:47:53:99:62:70:ae:0d:75:e3:ee:11:1e:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6F:EB:CA:C7:29:36:DD:E7:51:A4:D8:9F:58:D8:29:B6:C7:44:98
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:98:e8:40:e3:8a:27:c1:5f:14:b2:a3:35:e8:99:88:b4:
         79:14:25:34:aa:70:cf:d7:78:ac:ab:14:ea:10:e7:aa:aa:48:
         ba:3a:01:5c:bc:29:22:ee:32:30:e2:6a:96:94:ea:0d:03:6d:
         a0:10:e6:2b:bd:0e:ec:13:85:ca:8b:6d:c0:37:01:9e:cb:36:
         59:85:d6:52:55:8d:a5:90:2d:c0:d1:fa:3e:81:75:cd:6d:f7:
         9c:e8:0e:4f:0d:5d:b2:c5:9f:83:84:45:f6:bf:2e:4e:bb:70:
         b4:d2:d0:9b:e6:b3:08:d7:26:f9:f7:5b:c7:97:6d:51:4e:a5:
         8f:83:0d:76:b9:0c:22:5c:94:c2:a0:85:28:7f:0c:56:3e:03:
         13:57:82:12:76:b6:e9:65:89:e6:df:70:f7:52:53:52:60:df:
         88:a4:fd:4a:d5:f6:b5:b1:f2:dc:db:b3:62:28:6a:ae:ac:f9:
         c0:33:86:4b:4e:67:be:e2:63:d4:43:b2:69:4b:32:ef:ff:ff:
         6b:46:c7:8f:4d:3e:ae:ae:1e:fb:cd:63:96:29:3d:ce:55:a4:
         af:d7:f1:60:80:4d:44:7a:37:17:8d:24:90:c2:ba:b2:f3:d2:
         19:f1:00:f8:b7:d9:2c:63:bc:9a:18:ea:29:b5:f8:3e:09:50:
         74:99:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:21 2026 by rpki-client