Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File:                     m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier:          uzX7F07DqCtSKrP+p3kj2mf2unnV5bpLSnGvw/kqCkY=
Subject key identifier:   46:78:9B:A0:BA:C6:72:A8:F5:A7:55:10:1C:B8:02:41:5D:CB:61:E6
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer:       /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial:       019D26CD45F06E1B5A3148C381976B6A056B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number:          1071
Signing time:             Wed 25 Mar 2026 21:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:20 +0000
Files and hashes:         1: QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa (hash: kIkr4A1mpUTupFUwElbDch1PJM/dciLvNLfYLTlKNU4=)
                          2: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: gmeI5oia3I+vJPaxsuLlaZBYZu6qvn2mASsKvd9gdWc=)
                          3: ymQkqx6vad1BOcZP1A2ksCcXq8M.roa (hash: Mkk7iKFq74kIN4TjOOrbxIdyK2vnb7PkhTT7pKGa0yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:45:f0:6e:1b:5a:31:48:c3:81:97:6b:6a:05:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
        Validity
            Not Before: Mar 25 21:01:20 2026 GMT
            Not After : Mar 26 21:01:20 2026 GMT
        Subject: CN=46789ba0bac672a8f5a755101cb802415dcb61e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c6:d0:81:73:b5:81:7f:5c:f5:a1:44:95:93:
                    6c:ac:b0:a1:4e:9d:f6:5b:d4:41:f1:56:7d:d6:e2:
                    2c:ae:be:a8:be:ba:0a:12:a7:6d:bd:d9:d8:f2:45:
                    f7:31:c6:f4:8f:d7:94:15:ae:fc:53:3a:4c:f9:e0:
                    33:52:41:00:ee:7a:86:7f:7b:08:4d:04:7b:b7:4c:
                    a9:cd:d6:2d:1e:fd:32:0a:e5:d4:42:0a:d7:03:6f:
                    f5:f7:e2:16:1b:57:d1:30:84:34:a2:a2:77:8b:f1:
                    3c:af:2d:51:50:5f:84:f0:ac:f2:24:0e:97:55:40:
                    4c:84:35:2b:fc:cd:10:b0:23:1f:e4:ec:ce:3e:e9:
                    95:24:03:71:a7:b3:03:5d:71:7d:0a:1d:8c:d0:12:
                    23:1c:09:3b:97:cd:4f:fe:55:43:00:db:f5:37:0c:
                    3e:71:86:db:f2:63:da:54:a4:a6:f3:4a:a8:48:88:
                    b0:4d:24:3a:5b:b1:d8:4a:4d:77:24:ae:c3:20:ef:
                    68:e8:36:ab:f6:78:29:bc:8c:e7:a7:78:82:5a:7d:
                    5d:3d:c0:c2:0f:60:b1:70:dc:21:fa:e7:4a:ae:1a:
                    a1:85:5a:ea:ca:02:39:15:c7:97:b4:a1:09:14:8b:
                    3f:c1:ab:09:75:72:05:33:69:24:f4:38:08:6e:e5:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:78:9B:A0:BA:C6:72:A8:F5:A7:55:10:1C:B8:02:41:5D:CB:61:E6
            X509v3 Authority Key Identifier:
                keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:33:1e:1a:7a:29:f3:1d:47:6d:16:6a:4b:18:ac:c1:be:
         75:73:b3:f8:0e:9a:92:70:65:e0:39:a0:71:75:b0:bb:16:21:
         40:23:ac:79:8c:59:1d:bf:11:ee:e3:68:38:55:ff:5a:0d:fc:
         d8:1f:82:fc:14:68:f4:1d:b1:4f:64:c8:f2:58:a3:d3:9f:1e:
         ef:9a:61:0f:51:d6:fc:1c:22:a2:cd:5d:17:b3:b1:38:8b:4a:
         79:fe:52:0d:32:27:e4:27:99:d9:10:df:64:f4:e5:04:1d:1d:
         22:4b:12:84:8e:f1:47:29:a4:2f:22:db:8e:7c:ac:73:8a:54:
         72:96:e7:60:49:fb:14:e2:eb:33:e9:b2:c3:e4:2e:5c:29:36:
         08:1b:c8:89:5c:d4:40:b9:92:58:60:6a:5e:6c:a1:c6:ab:85:
         d6:f6:80:01:c3:fd:4c:6d:de:a4:bf:27:ac:44:69:31:a5:86:
         e9:a5:56:70:dc:c3:bf:93:c3:8c:33:05:b1:11:f3:5a:74:b8:
         86:36:b4:fe:87:73:ec:45:40:d7:00:17:bd:15:39:2c:be:fc:
         1f:93:f6:76:c3:be:9a:5d:3f:b1:3b:3a:19:78:88:04:a6:d3:
         07:1b:a8:51:6a:c2:8c:76:e4:53:cd:fd:e7:11:33:f9:20:b1:
         90:60:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:23 2026 by rpki-client