Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          p8fBHYhNgN1iTcX5OdCKAVE8xbzMcAb/CL3mJcBm0qc=
Subject key identifier:   0F:FD:0B:31:32:60:76:10:C9:DB:F6:53:2C:47:B1:07:76:CE:47:E5
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       019CE17E080187867B4D7F9E79590CCC4019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          16A9
Signing time:             Thu 12 Mar 2026 10:00:58 +0000
Manifest this update:     Thu 12 Mar 2026 10:00:58 +0000
Manifest next update:     Fri 13 Mar 2026 10:00:58 +0000
Files and hashes:         1: 8huTzHW57A5cCLn4DJengqWUHbU.roa (hash: QbaePOyAbanHl8XCDKIaOAWESWKmtviz49Mi0ZJ8gU8=)
                          2: _6DXV1WE0v-oybUplKLLF-qO42Q.roa (hash: Iu/YSu6oOqTfa7ZyhKaNhQqb474GLyUXE1gWIy1f6g4=)
                          3: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: 6jgGr7+0OIm0Voh1NRcEuCIQGORQCqVYlbNZalZcvRo=)
                          4: cnRs0nFBKnPSwQ1F-1xOIce5la0.roa (hash: OKJospeoF5ncHQtQYt7c9nFDBBSFOmh/9wk/WbCnrEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:7e:08:01:87:86:7b:4d:7f:9e:79:59:0c:cc:40:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Mar 12 10:00:58 2026 GMT
            Not After : Mar 13 10:00:58 2026 GMT
        Subject: CN=0ffd0b3132607610c9dbf6532c47b10776ce47e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:ab:19:80:ba:42:ce:30:6d:85:2e:6d:4a:
                    90:15:e4:8a:46:5a:0f:48:86:f8:49:1d:b2:12:90:
                    1c:19:d2:b9:61:2d:b4:85:84:ef:49:43:bc:b1:f8:
                    4f:5a:6c:84:e2:a1:ea:c4:4a:39:a6:00:8c:94:e9:
                    27:63:fe:bf:6a:57:3c:08:a5:d8:c2:d6:c3:0d:1a:
                    c1:a0:2c:5f:2c:0a:1a:d9:f5:6d:43:70:f1:16:39:
                    06:8d:e3:ad:80:09:e8:55:e8:7d:05:ff:d9:61:4d:
                    60:cc:28:da:03:91:f3:21:38:2e:a0:4e:4b:e7:2b:
                    70:16:84:2b:8a:c4:7c:da:24:e2:02:00:86:69:b8:
                    c5:2d:f8:15:98:00:83:50:b2:99:66:22:68:e5:60:
                    fe:f2:72:59:9e:9d:15:78:1f:ad:28:88:f6:92:9f:
                    67:27:0f:cc:71:1d:9f:ec:e2:4c:01:64:75:82:22:
                    0d:94:86:b4:64:db:71:65:d0:e7:95:3d:64:2d:69:
                    3b:b0:7f:30:ae:f4:23:ae:88:65:94:a0:49:26:f2:
                    95:c3:9d:79:5b:65:92:10:b2:bd:a5:bf:24:51:96:
                    28:21:72:50:ef:dd:11:8c:a7:ca:68:53:7a:d5:75:
                    99:a7:ae:3e:80:a6:b5:1e:28:a5:4d:a3:39:92:78:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FD:0B:31:32:60:76:10:C9:DB:F6:53:2C:47:B1:07:76:CE:47:E5
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:66:ad:bf:f1:00:7f:19:37:d9:97:27:0c:03:6a:a1:b4:
         c6:16:66:77:fb:58:30:6b:ff:e8:8d:0b:d6:1f:80:b9:b7:f9:
         c3:09:03:6c:82:30:73:5b:22:7f:f4:89:a2:96:59:6a:aa:49:
         ae:19:a2:7b:c3:f4:18:72:30:54:b1:9d:f6:21:5c:c0:f6:78:
         2a:13:4c:b4:ed:fe:b9:9a:e0:ea:bf:53:98:42:2e:db:d5:4d:
         72:03:f2:a6:8e:7a:9d:e8:67:9c:cd:2e:f0:ab:c5:32:31:6d:
         47:1f:d4:b1:87:75:e6:6e:1d:7f:d2:14:ab:43:ef:2c:87:29:
         39:d8:97:f2:1b:d4:0f:b9:90:8f:1a:21:af:68:bb:08:b3:b6:
         a5:b5:35:7a:48:1c:06:3f:8e:87:de:96:95:45:59:c1:df:7d:
         7e:5c:86:b5:64:83:14:c5:d3:38:e6:3c:fb:38:68:08:19:c4:
         39:da:f8:86:2d:ff:b6:d1:44:f8:e8:75:26:b3:d8:7c:e3:10:
         db:fc:6c:34:fd:20:0a:2c:23:57:ce:97:f2:6d:72:ab:15:95:
         a7:32:3c:f7:3f:f2:dd:fe:60:18:6c:31:aa:48:e4:6a:31:b3:
         19:cc:28:21:32:93:9e:fb:e3:66:02:56:50:7c:41:bc:9b:c5:
         35:2c:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:18:12 2026 by rpki-client