Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File:                     C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier:          6tMvDvFi3ycuFN0PX3IkAqv/5ptMNFYBaNjjS7Ht85I=
Subject key identifier:   98:B0:84:0D:BC:66:5E:53:31:76:4F:AD:D8:84:BF:E4:2F:96:0F:00
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       41230AF5D10DD932BE61945AF4E56ABC0AA42490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number:          044F
Signing time:             Fri 06 Mar 2026 14:31:00 +0000
Manifest this update:     Fri 06 Mar 2026 14:26:00 +0000
Manifest next update:     Sat 07 Mar 2026 16:04:00 +0000
Files and hashes:         1: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=)
                          2: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
                          3: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=)
                          4: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
                          5: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: E0WUssil+OYjF07dzXb9FqfU3BGTzOE+ItSYvTJhNHs=)
                          6: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
                          rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 16:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:23:0a:f5:d1:0d:d9:32:be:61:94:5a:f4:e5:6a:bc:0a:a4:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Mar  6 14:26:00 2026 GMT
            Not After : Mar  7 16:04:00 2026 GMT
        Subject: CN=98B0840DBC665E5331764FADD884BFE42F960F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:04:0a:c5:dc:82:8b:27:1f:ca:cc:ff:55:
                    76:43:c1:42:34:59:51:82:da:8f:af:ec:25:01:c5:
                    c3:42:15:54:5a:0b:fc:d0:b0:27:0b:d1:5f:ff:96:
                    0a:1d:60:38:1c:27:5a:b8:3b:2c:50:c8:1a:f5:aa:
                    2f:99:e3:5a:23:d7:c8:c9:f6:f6:90:ec:29:15:ed:
                    6e:eb:fe:93:ad:e4:70:ac:c1:ea:96:35:d2:7f:be:
                    54:af:39:a6:36:9f:28:a6:4e:dc:5d:30:15:72:3e:
                    59:1c:c0:11:04:a4:cb:dc:57:7a:9e:c4:ba:b9:96:
                    d8:6d:dc:c5:7d:a8:96:fa:14:9b:68:69:46:3f:e4:
                    0b:54:c6:42:b4:7a:2b:5e:5e:49:bc:e4:c1:76:f0:
                    e1:93:69:d9:52:6b:f3:04:ce:5e:33:b5:42:e4:c2:
                    dd:85:46:c9:ca:42:60:88:50:96:a1:d0:98:19:8d:
                    17:91:b5:39:84:cc:11:bb:4a:9e:b8:31:46:67:3f:
                    12:14:c0:cd:b5:2f:a5:4b:b5:29:18:af:f6:e2:18:
                    5a:17:00:cb:56:cf:40:82:69:3e:00:60:0e:14:32:
                    e8:42:54:d7:67:46:d0:31:9d:30:57:ef:b9:02:0f:
                    70:22:de:22:1b:08:ff:93:1d:90:60:c0:cd:5c:d0:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:84:0D:BC:66:5E:53:31:76:4F:AD:D8:84:BF:E4:2F:96:0F:00
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:00:1b:6d:06:39:93:28:f5:07:b9:28:9d:ab:4c:22:3a:
         cb:f7:07:62:f5:d8:7b:b8:b6:da:26:30:82:c8:6e:eb:37:a3:
         18:56:b2:d0:5a:1f:70:9a:05:5b:b7:53:1f:2d:1c:19:aa:77:
         d6:cb:e3:12:39:a8:31:22:15:c2:24:4a:bc:4d:48:1c:03:63:
         f0:6e:fb:7f:6e:59:de:41:af:38:45:c4:72:c1:d0:d6:e7:78:
         5c:89:98:79:57:82:bc:59:6e:e9:bb:e8:48:5b:a6:d6:78:a4:
         14:a4:03:3d:5d:1c:de:7c:70:f5:da:4d:cc:32:5c:4a:c0:56:
         34:6f:21:6c:d3:c1:4b:03:17:88:d5:66:7f:d8:1c:a2:68:64:
         4e:b9:49:47:14:19:ed:15:42:6e:43:a3:1d:17:e1:ca:21:26:
         f9:c9:42:44:c6:78:5c:74:36:ba:fd:b4:ab:d4:b9:74:df:ac:
         df:fe:7e:8e:cd:9c:cc:a5:08:30:a7:9e:88:1b:e2:79:b6:f3:
         de:b7:e7:25:48:4a:20:a1:04:93:9f:08:03:64:8d:71:33:b7:
         d6:74:66:19:21:35:78:18:a5:63:51:e2:78:84:7b:e2:9b:36:
         4a:a4:05:b6:4e:8a:ed:3a:b9:50:76:26:6e:d2:01:a8:28:c2:
         16:20:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:37:38 2026 by rpki-client