Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File:                     Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier:          AVmiY9pMzzGTSMVMq7IT6mXC4WN09qG0WC2Qmvy/7YY=
Subject key identifier:   04:FE:75:25:D1:BD:92:30:17:9D:0E:8E:AA:AB:11:A3:6B:46:6A:40
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer:       /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial:       019CB5EE7EAD60C004A0B781701B2C415AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number:          C3
Signing time:             Tue 03 Mar 2026 23:00:31 +0000
Manifest this update:     Tue 03 Mar 2026 23:00:31 +0000
Manifest next update:     Wed 04 Mar 2026 23:00:31 +0000
Files and hashes:         1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: xpmPJ1oQsLqHdEL7hshfbZ6peiHwPAs/cUWwgMmVRvQ=)
                          2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
                          3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b5:ee:7e:ad:60:c0:04:a0:b7:81:70:1b:2c:41:5a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
        Validity
            Not Before: Mar  3 23:00:31 2026 GMT
            Not After : Mar  4 23:00:31 2026 GMT
        Subject: CN=04fe7525d1bd9230179d0e8eaaab11a36b466a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:de:a3:5a:ad:bc:68:68:42:45:a8:db:35:
                    66:bf:43:cf:e5:7a:fd:9a:f2:42:03:8b:85:6b:1a:
                    d2:75:e4:57:76:cd:9b:62:de:62:84:69:43:d5:f8:
                    34:ed:e1:c0:6c:71:22:27:62:76:8a:bf:d5:c1:fb:
                    b9:69:5a:d1:15:59:d9:1d:7e:f4:6b:e4:4d:fb:a3:
                    63:87:df:9f:71:60:ab:cc:36:28:32:ef:6b:76:e9:
                    49:7a:e1:0b:71:85:52:eb:2c:cf:0f:58:f6:ab:71:
                    b6:ea:5b:6d:bf:14:33:ab:c0:88:56:33:e4:db:29:
                    39:2e:16:31:c7:a6:23:7a:e2:ff:ab:29:71:cd:40:
                    43:66:19:e1:09:e9:cc:5d:72:e0:18:aa:fe:fe:e7:
                    be:a3:be:ec:8d:a9:31:9a:15:f0:e9:32:ac:7f:c4:
                    b4:24:6c:03:4f:6c:5b:99:d0:7e:f2:3d:52:fc:da:
                    31:d8:d1:e5:e2:d9:f4:19:c4:4b:0c:a0:1f:47:fe:
                    54:48:49:c9:06:1e:ce:56:f9:1b:d5:80:99:d4:af:
                    3f:34:5e:29:91:d7:49:42:8d:37:a6:b6:f8:3e:c3:
                    91:17:57:41:68:90:15:b9:ed:c2:45:8a:14:58:d9:
                    6a:bf:97:54:7d:16:a1:7a:51:ba:24:34:ab:2d:0c:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:75:25:D1:BD:92:30:17:9D:0E:8E:AA:AB:11:A3:6B:46:6A:40
            X509v3 Authority Key Identifier:
                keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:76:4d:4f:c4:b8:cb:73:07:40:7a:d5:2d:02:58:d1:20:
         2c:b2:37:ae:5d:08:cc:e3:09:48:db:24:64:3b:b1:cf:60:c2:
         3d:cf:a8:27:1a:2c:c2:f8:c0:6b:9c:e4:40:79:76:c9:ae:a9:
         68:70:96:9a:c8:da:f1:e4:e1:fe:1a:db:18:80:a3:1d:83:44:
         cc:6d:2d:02:3c:aa:cb:2d:35:0e:fe:cf:61:99:1e:33:8a:d1:
         62:55:7c:74:36:ba:ce:fc:c6:0b:f1:e6:7c:ea:74:b7:1e:cd:
         e5:d6:18:95:08:ff:2d:35:64:43:02:04:0a:22:3b:60:85:27:
         38:ff:47:fa:85:a9:f3:13:1d:d7:d0:12:82:82:c0:20:31:48:
         bd:3e:7d:46:e5:ec:72:f5:37:04:f6:ee:db:ca:71:55:ff:a8:
         02:10:38:ed:ae:7e:73:16:3f:ec:64:84:90:4f:57:cc:04:05:
         04:4e:2e:e5:83:20:1e:cd:b6:88:72:82:14:b9:96:93:e6:fb:
         cb:f0:b7:cc:4c:35:27:08:f1:cf:1d:fa:55:87:e3:1a:28:31:
         02:a7:4f:0b:57:67:30:1f:d9:b4:d4:a2:aa:29:31:2b:11:8f:
         8b:80:34:3c:cc:ba:9b:50:0a:e8:b4:c6:04:47:68:89:f8:8b:
         f6:68:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:50:13 2026 by rpki-client