Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File:                     ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier:          e4I+7Q9zxh+hBb/eamnvNNhuY//YGzO1Jvqg4qQvEgI=
Subject key identifier:   9E:C8:62:82:CF:2A:85:38:4F:1C:91:C7:E0:81:16:F1:07:65:EB:6B
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer:       /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial:       019CAAC6C6D2C3A4755ECD2FC3978FDDDA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 19:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:19 +0000
Files and hashes:         1: cUjXL3AkU0vzCeL7XNA5hx74zv4.roa (hash: M5YlQ4HoZ45gNTliPTDu0USjnaLFnkhBumUlmweXtD8=)
                          2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: YKXm43xVQaOfqsHKTvd21/QDoaO4TiuxzFzBfyUAZZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:c6:d2:c3:a4:75:5e:cd:2f:c3:97:8f:dd:da:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
        Validity
            Not Before: Mar  1 19:01:19 2026 GMT
            Not After : Mar  2 19:01:19 2026 GMT
        Subject: CN=9ec86282cf2a85384f1c91c7e08116f10765eb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:73:33:e2:45:70:a4:ee:eb:4d:91:8f:58:
                    b4:52:d0:9a:7a:d9:a3:b6:a9:46:b2:55:04:fd:7b:
                    5c:62:11:81:fb:a3:78:45:f4:d1:bc:d3:50:b9:f5:
                    fa:f9:78:05:41:fc:59:df:dc:95:13:f1:c3:ce:db:
                    f4:78:49:2a:68:0a:ad:9a:f8:34:70:44:b7:45:70:
                    87:3a:d3:58:d8:57:27:e5:8a:25:2a:50:6f:ab:33:
                    54:ff:ef:b6:84:54:28:1f:51:18:af:fc:af:b2:4a:
                    c4:bd:13:fe:6d:c7:c2:6e:82:ae:64:85:d7:ff:a4:
                    94:bd:7c:01:1f:b8:b2:5d:5f:92:bc:45:06:6d:24:
                    30:13:06:d5:fe:8e:8f:e0:65:02:2b:09:10:98:d8:
                    25:e2:bb:3f:d6:8c:16:28:19:62:d2:7c:70:04:9e:
                    d9:0d:1a:99:f8:c9:b9:83:56:20:31:55:38:64:a1:
                    6a:e8:84:cc:99:fc:b6:4a:fc:e0:ef:f9:b1:ac:e5:
                    b2:4b:96:94:46:74:92:5a:98:ed:a3:5c:67:1f:48:
                    17:11:16:58:34:4d:f5:53:66:e0:03:13:a7:3e:47:
                    80:b9:2c:c7:ec:c3:5c:f9:91:00:d0:0b:84:86:b6:
                    d9:a9:21:1e:f2:1a:25:78:5a:0d:3a:ef:18:51:5f:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C8:62:82:CF:2A:85:38:4F:1C:91:C7:E0:81:16:F1:07:65:EB:6B
            X509v3 Authority Key Identifier:
                keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:cd:a9:a7:d6:8a:e3:e8:56:f0:7f:97:91:37:08:9d:75:
         83:74:20:35:a9:cb:de:de:1c:dc:c0:21:a2:dc:4c:fa:fe:75:
         f8:3b:bc:2d:61:74:14:ec:2a:2f:65:23:72:36:8e:c8:b4:a9:
         f1:08:88:62:2f:87:9e:ce:c9:53:0d:02:cc:00:29:a5:fc:0d:
         e3:c1:4b:8b:c0:d8:ed:4a:cf:45:85:9f:01:7e:3d:f2:de:7c:
         74:67:ac:af:75:e0:a3:bc:42:d8:4c:3b:b6:ae:d4:0f:74:fc:
         95:b2:60:c4:2a:ea:d7:13:a3:f2:4c:19:2b:28:90:76:1c:a2:
         a6:9f:55:ea:27:dd:90:3b:72:f5:d1:fb:9b:50:67:af:f5:8b:
         e3:4d:94:58:c8:cb:ea:d5:dd:8c:40:76:9c:f5:a7:31:29:12:
         1f:19:f9:a9:3b:b2:4e:62:6c:32:81:28:2a:b7:a0:23:5c:8e:
         1f:d4:d9:6b:24:a7:44:c7:ec:ba:57:ac:5b:7d:64:bc:f4:7b:
         90:7e:eb:13:71:51:2a:08:21:de:83:2e:09:b0:b3:05:e8:04:
         c9:82:48:38:52:30:ad:bd:0b:1c:db:3a:21:25:70:fd:0c:70:
         0e:39:43:e1:c1:18:88:38:eb:79:0a:b1:57:49:b1:8c:68:49:
         3e:8d:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:43 2026 by rpki-client