Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File:                     46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier:          nb1CgZgLiQkDrRWeyWN31wiHpGaTwCDXNwk4KYTco1M=
Subject key identifier:   F2:82:EA:FD:CE:F9:F0:69:25:CB:23:DF:76:FD:13:38:C3:45:95:A1
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer:       /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial:       019CAAC617F24C70353E70BAFF767A6E6CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 19:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:34 +0000
Files and hashes:         1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: 5wEBRTinY03USi6LjfrzAXGpSAarlvPxfdtb6cVOvhY=)
                          2: gM8ofdQeGubU92gq-aGGa-zvY6Q.roa (hash: 3xpADweqEfrOHaBnc8vO2OLZLCKpNhwxUy/JAhbOyTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:17:f2:4c:70:35:3e:70:ba:ff:76:7a:6e:6c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
        Validity
            Not Before: Mar  1 19:00:34 2026 GMT
            Not After : Mar  2 19:00:34 2026 GMT
        Subject: CN=f282eafdcef9f06925cb23df76fd1338c34595a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:6c:70:f0:8f:70:19:cb:50:32:b6:ec:8a:
                    47:28:3a:75:a9:4a:0a:c0:b6:ab:f3:b2:52:13:52:
                    25:68:84:8c:fe:b6:54:0f:af:1c:a2:7a:a9:a3:04:
                    ff:a3:bb:99:1f:29:28:79:25:ac:a3:58:6a:e5:2a:
                    55:16:d5:03:98:cf:df:b3:54:6b:ee:0f:da:b9:57:
                    a8:16:4c:4d:50:2a:74:23:6b:88:77:b6:e4:2d:df:
                    29:e6:04:97:82:42:59:f7:c0:82:c2:b9:f0:c6:cd:
                    fa:f0:6e:b1:df:e3:73:a3:c9:0f:07:7d:56:e9:ac:
                    d1:ae:4b:fa:d8:48:2e:bf:c2:b7:90:d6:8a:6f:2b:
                    7f:26:cc:0a:46:9b:e3:2d:a2:78:09:1e:fb:81:5a:
                    fd:9c:0f:d8:2e:36:5f:b3:6c:be:ea:98:09:12:72:
                    9e:cb:71:55:2e:3c:53:dd:38:6b:af:94:1c:63:6c:
                    35:d3:3f:55:d4:54:b7:41:c8:e8:65:3c:76:4b:1c:
                    a2:e9:6c:d9:69:a7:c0:79:17:1f:99:b2:48:f3:26:
                    61:b0:ab:74:c9:53:f2:c8:40:41:f1:76:7a:42:2d:
                    3e:10:5b:f8:54:55:91:c4:0b:0b:7a:dd:ce:60:cb:
                    74:c7:c4:23:8f:18:f0:26:54:39:49:7f:34:3a:0e:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:EA:FD:CE:F9:F0:69:25:CB:23:DF:76:FD:13:38:C3:45:95:A1
            X509v3 Authority Key Identifier:
                keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:61:63:78:90:23:fb:b4:28:13:95:d3:0d:47:de:45:1d:84:
         5c:e8:1a:2e:ce:f0:84:37:66:3d:6f:af:6d:3e:06:bb:ef:e5:
         4b:d9:5d:d1:35:48:22:7b:a0:bc:12:55:04:78:d2:48:f2:11:
         93:77:f0:d4:d4:d4:45:ad:88:e6:6e:fb:c2:60:4d:17:93:18:
         b6:1c:7e:f3:f2:cf:fa:23:db:cc:10:47:83:2d:17:16:e9:6f:
         c9:1f:56:6c:0e:68:e5:ed:a3:e1:36:8d:10:4e:6f:19:0f:1f:
         06:03:35:aa:6b:98:06:27:0c:14:9a:d4:14:7d:10:3a:f6:76:
         57:b3:38:0e:b8:0f:95:8a:b1:0e:fa:55:0c:fb:41:34:c3:c5:
         49:c1:2a:49:1d:ab:29:eb:67:d7:e1:67:65:d9:66:cd:c7:dd:
         aa:c2:9e:88:e8:a0:28:cd:b1:6d:47:b2:da:cd:9f:1b:83:81:
         87:a9:99:72:fa:40:d8:a1:8a:e8:f6:6c:02:ef:18:d8:80:21:
         18:92:79:be:18:ae:d1:e6:27:e2:d9:37:7a:56:d9:63:4f:f9:
         e8:05:41:0b:79:92:a5:ae:23:c7:e4:e8:b1:4f:a8:fc:ba:66:
         b9:a0:9f:08:d0:92:0e:19:74:ce:30:bb:8e:bf:4e:66:7e:b9:
         23:a0:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:29 2026 by rpki-client