Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          bk8S1m/CW7TIxJ2rgNRRjdxNTNOyh9tj1Sca+uXMuIw=
Subject key identifier:   6E:20:1A:36:FF:E5:7E:B8:72:09:0E:31:9A:C7:F4:E4:E5:21:14:35
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       019CE523A841CFA14E781F8C644663C909CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          0FFA
Signing time:             Fri 13 Mar 2026 03:00:45 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:45 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:45 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: WXk4wQQyto4Kn1FiM9JAq1vX0t8HCzU23rVQfKcCZYQ=)
                          2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:a8:41:cf:a1:4e:78:1f:8c:64:46:63:c9:09:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Mar 13 03:00:45 2026 GMT
            Not After : Mar 14 03:00:45 2026 GMT
        Subject: CN=6e201a36ffe57eb872090e319ac7f4e4e5211435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:40:dd:3d:f4:75:e7:0b:b4:3e:b8:fe:a2:
                    7b:21:9c:14:99:61:7b:e5:97:5f:71:c1:f5:0a:d3:
                    09:32:49:95:28:03:7b:be:79:d1:d0:eb:24:1e:cf:
                    7d:53:5e:7b:7d:03:49:93:80:dc:0c:39:b0:0a:88:
                    4d:ca:e8:7c:46:62:84:38:40:5f:a4:b1:6e:d8:89:
                    dc:7c:04:9e:5e:a3:ba:ee:60:78:cf:bb:0c:42:0d:
                    ad:77:3a:d4:5c:46:d1:b6:22:7d:cf:d5:25:9b:14:
                    37:44:2c:f6:4a:85:b0:c5:54:54:67:99:da:cb:39:
                    3f:0e:e1:f5:fb:d4:84:20:c7:ec:2c:6f:44:b8:44:
                    ac:0e:65:10:32:ac:ad:23:0d:fa:69:91:36:e3:96:
                    de:85:b1:fe:66:b5:40:30:8a:17:65:07:96:9e:b3:
                    f1:2b:de:b5:c5:db:10:57:3f:97:1e:c1:b5:9b:a8:
                    7f:93:70:f6:32:4a:cb:5c:ff:81:05:df:82:0e:6f:
                    e4:31:06:b9:9f:dc:77:82:2b:15:1c:65:7f:cb:1c:
                    21:67:4f:8b:2c:ed:dd:90:84:9c:e7:6a:65:c9:c0:
                    eb:53:20:8d:52:72:13:e4:5c:51:a1:c5:85:e7:d9:
                    1d:bc:f8:03:dc:c3:5f:8d:c6:cd:c7:d3:59:71:67:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:20:1A:36:FF:E5:7E:B8:72:09:0E:31:9A:C7:F4:E4:E5:21:14:35
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:21:00:7d:46:2c:4b:1a:55:62:4a:56:45:ae:ac:f6:a1:
         6d:43:32:aa:7b:00:0e:64:dc:04:c6:52:f9:43:34:7d:fe:c3:
         32:c7:d8:28:d3:f3:46:88:a7:a2:ca:76:24:4b:c0:ae:aa:f3:
         3f:a7:a2:76:ee:56:ea:b1:43:4a:08:42:b6:98:40:c7:d6:8a:
         e5:01:5f:31:02:61:3e:b9:7c:24:dd:15:e8:bf:75:a6:b6:7b:
         f9:15:4f:84:54:23:fa:ac:15:44:71:73:46:64:fc:0b:33:af:
         f4:4d:37:db:13:d4:d1:c3:5e:52:46:c1:62:4e:e4:f3:5f:7b:
         cd:30:ae:51:31:be:8e:0f:5f:98:49:8d:81:da:23:dd:ed:90:
         2c:f7:22:dc:fe:56:14:8e:a5:49:f1:3e:d1:2d:fd:80:8a:d3:
         52:09:62:7e:a9:26:5d:3e:cc:87:ff:e8:ed:f5:e9:ac:e2:4c:
         f5:c9:10:30:63:e1:54:51:76:a1:d7:91:b4:05:53:74:4a:98:
         63:02:81:c6:e6:62:04:04:7a:31:6d:2d:30:f5:f1:b1:9e:ab:
         c0:76:23:3a:23:85:6b:f2:75:0b:46:b8:03:d2:89:09:f4:f1:
         51:58:42:cb:66:7d:ee:43:fd:5b:8b:dc:bf:19:ee:d9:e2:c7:
         69:1e:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:17:50 2026 by rpki-client