Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          46m/+wnuSApbnhl1WJV+zPqw+Yd1z+KJ11aLXYEr8iY=
Subject key identifier:   1A:DB:AC:9A:CB:66:84:7D:73:5B:EA:24:5A:06:E6:4C:C9:FE:36:F5
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       019CAB6B2E29EB7693231866D8F4D74E4E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          1857
Signing time:             Sun 01 Mar 2026 22:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:53 +0000
Files and hashes:         1: 05pxQUZ3O5g7XwtchpzgXkYXLrM.roa (hash: pSBaxXr7aIa0AV76Ml4OFVZIYb8NNW03JRmIFNcA92E=)
                          2: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: v6fszHAn6X3kqNuxuJGdtRfX6Hav6BOqOpGol1X1sbo=)
                          3: 4zc0TbZEkLFIHswzFPhuNpSxjI4.roa (hash: YDxBwpVQ5ct0e9UMy7Eo6tKf/5X6TUwON0SibETkWO4=)
                          4: 8sE9vfnxVkhmpv_cPv6lSgophbw.roa (hash: pgSz+be35K3IsVHSxBC7rLqa8AF08GPc30TZx1/DC/o=)
                          5: O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa (hash: pVOrFHAX/Lnb3FuStEB2bMj1QRU4ZVatYcxzuU5OSMo=)
                          6: QHPyg5iWbWbbW5gr34naY63NDvo.roa (hash: yEtOkw8pnNFWUem/+gYHXLql4MYn18HzTEqZKWbEw9U=)
                          7: bH0F2mV_dRL1r12H9Kv5329qGfI.roa (hash: zDXdXDEtcJePiYih7GNQU0Vm0lUa6Wpo3l7juYolzJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:2e:29:eb:76:93:23:18:66:d8:f4:d7:4e:4e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Mar  1 22:00:53 2026 GMT
            Not After : Mar  2 22:00:53 2026 GMT
        Subject: CN=1adbac9acb66847d735bea245a06e64cc9fe36f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:e7:7e:97:d8:d2:5d:6a:cf:0f:64:72:8a:
                    55:fe:53:e4:f1:38:b7:e8:e5:9f:15:ca:40:4c:fc:
                    86:a3:d9:10:7f:a7:81:f7:69:35:3f:b0:c3:5d:43:
                    18:13:03:b0:f0:27:21:11:c9:32:c7:35:1a:0d:1e:
                    84:2b:84:3b:c3:3d:a5:a3:44:61:8f:72:d4:da:e4:
                    dc:60:5a:53:b2:56:71:95:eb:9f:7a:cd:c4:29:d9:
                    72:5d:b2:38:80:99:65:63:63:e6:df:86:7f:d7:f6:
                    f4:07:d4:d5:81:ec:55:1a:43:4f:f5:4c:6e:5b:37:
                    e6:90:db:8b:b8:5c:d0:ff:a9:4b:0f:c4:6a:a5:3a:
                    43:1e:2c:a4:69:22:74:ec:15:41:f9:9c:09:d5:d5:
                    a6:37:72:33:af:d2:40:de:6b:39:bb:68:43:2f:18:
                    63:e9:cf:e8:1f:c4:d6:b0:a9:64:ac:75:6d:b2:dc:
                    a3:11:04:30:f2:54:86:bf:8e:4d:15:c0:33:de:16:
                    f3:ca:8a:94:85:4a:e5:f5:6e:ac:e2:f0:ec:3c:76:
                    f2:c2:fb:63:93:2c:18:71:55:64:ef:25:21:5c:50:
                    5c:e5:83:6a:d2:19:78:83:ab:41:65:cf:72:76:c2:
                    72:23:e8:ab:02:14:bc:97:8f:ed:fb:56:ed:e6:bf:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DB:AC:9A:CB:66:84:7D:73:5B:EA:24:5A:06:E6:4C:C9:FE:36:F5
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:a9:12:89:5e:bb:f7:3b:2e:b2:3a:73:6e:9e:06:c1:67:
         d9:9d:a4:34:3d:c0:1a:c7:c3:40:a5:d9:e4:e4:b2:30:c6:56:
         e1:bd:36:21:c5:dd:66:9c:73:0d:8a:94:52:da:6a:a1:d3:66:
         7b:d0:23:90:3a:80:f4:4b:78:28:56:1c:fe:b6:30:72:44:15:
         e2:77:0d:58:2c:85:39:2a:bd:5c:7e:5d:0e:0c:53:34:53:a4:
         1c:8e:bf:25:17:7c:74:47:ba:4e:4d:bb:0d:d6:1c:6f:d3:b9:
         96:13:5a:d3:04:94:ed:de:27:f1:e4:2f:f2:eb:3f:e0:c6:06:
         89:51:c3:da:7f:8c:a2:2b:a9:20:b8:16:a3:ef:b4:db:3a:84:
         22:36:f5:d1:fb:26:47:86:c5:11:6c:93:b6:6f:85:32:f1:09:
         69:2e:15:b8:3c:55:96:02:fa:5a:a9:d7:2a:a0:ae:1c:53:6e:
         04:71:b5:5e:81:79:75:71:0f:4a:a8:e7:7c:b9:15:26:69:b8:
         9d:47:05:7c:31:ab:60:9d:89:11:c2:5f:9e:c2:25:bb:2e:b6:
         7c:aa:e7:e6:fa:a2:bc:0e:3a:8c:4d:01:c3:af:93:17:45:be:
         cd:f0:b2:f9:13:2e:40:3e:ef:80:c8:b4:b2:10:03:54:b6:bc:
         56:55:ff:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:22 2026 by rpki-client