Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          oqcme052WFvUk0nLy3+AFcVJ5fXMkn6dNLrh35A3sPc=
Subject key identifier:   B5:F1:50:DA:41:19:D2:92:B3:0E:D5:6C:FE:5F:9F:D7:10:DD:EE:23
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019CAB6B92AD96C91E7992D8967AE8432036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          1817
Signing time:             Sun 01 Mar 2026 22:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:19 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: P+2UdMTWk510RZYJF8ryB8ZEb/vFLm9kI2mnuZ9ejVw=)
                          2: Uv1LOQn-rihpO-VnBwQTGmMa48E.roa (hash: U1Bj99VrPaNBoxUvCEMoBEqTdDcni4KZuGxKdf2wOC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:92:ad:96:c9:1e:79:92:d8:96:7a:e8:43:20:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Mar  1 22:01:19 2026 GMT
            Not After : Mar  2 22:01:19 2026 GMT
        Subject: CN=b5f150da4119d292b30ed56cfe5f9fd710ddee23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:82:1d:ec:3c:cd:d0:d2:0c:fe:5f:d5:c0:
                    a8:96:3a:9f:ff:03:42:5c:16:04:cb:de:1f:1f:0a:
                    d8:7b:40:a4:73:02:09:0f:d5:86:31:87:a8:72:94:
                    9e:03:b9:54:ea:f5:51:6e:b2:65:97:10:2c:b2:3e:
                    09:8f:9c:5b:6c:43:03:d0:f1:67:bd:61:e7:87:c5:
                    69:4f:e0:3c:56:4d:d1:61:46:6f:54:bc:0b:14:01:
                    bf:a8:a3:a5:b5:3b:d6:24:af:79:4f:70:25:20:45:
                    44:43:48:8d:a5:5f:21:6f:9b:eb:77:86:34:09:a8:
                    2d:e7:ae:88:6d:da:0b:77:c4:53:ba:af:5b:16:f1:
                    7f:d7:d3:82:90:78:ea:c7:1c:52:be:c0:24:b0:29:
                    db:ab:36:ac:78:41:1b:64:ca:0b:d7:ac:49:c4:bf:
                    15:f2:38:b0:c3:c5:d8:49:db:13:c2:31:9f:94:11:
                    9e:43:35:c2:1e:d8:f7:50:1f:da:35:da:04:f7:be:
                    6d:60:8d:75:6e:c1:6a:10:71:57:a5:5f:0a:2a:b7:
                    1a:f7:31:80:1e:10:67:83:c5:4d:a2:29:af:5b:bc:
                    00:ca:6f:06:2d:51:94:3d:96:58:d1:e4:c5:ff:1b:
                    6c:f6:46:cb:09:a0:5e:a5:92:05:0d:3a:28:0c:e4:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F1:50:DA:41:19:D2:92:B3:0E:D5:6C:FE:5F:9F:D7:10:DD:EE:23
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c3:84:7c:b5:38:d6:17:79:c9:e6:ac:fb:57:c9:cd:52:02:
         95:33:c1:e4:ca:27:92:22:86:89:f4:27:9a:c7:1f:6a:4c:d6:
         6f:19:4f:e1:d8:2a:0d:7d:75:03:bf:3b:69:6c:90:3c:c7:cb:
         03:b3:8a:78:fe:1b:64:b3:5e:21:53:d7:cd:ee:76:82:66:97:
         8b:e8:73:fc:be:2f:55:0f:4a:28:95:43:8e:de:08:70:7a:33:
         19:3c:9e:71:65:4b:7a:c1:7f:05:e8:11:3b:97:53:4f:94:a9:
         3e:8b:53:1c:08:62:fc:ff:12:fe:c4:08:54:a6:92:55:56:88:
         9e:49:7c:40:55:c9:ad:67:27:9b:1e:93:d7:0a:77:b2:ab:f4:
         72:ca:78:24:dd:ec:e0:31:27:d3:8f:2c:59:7f:3f:35:f3:f9:
         5a:8b:a3:86:a1:c4:62:9b:70:18:52:01:a4:36:5c:74:f3:24:
         f3:43:b7:27:bb:46:8c:ca:92:2a:64:a2:35:fc:f2:2e:2f:e1:
         b8:65:5f:4b:a1:02:ce:8a:81:76:02:ce:2c:e5:41:76:bf:a8:
         98:68:d4:1e:4c:cf:2b:64:d0:8e:8d:73:3a:6c:07:a0:22:be:
         1d:0a:4b:b7:d8:60:6a:b3:7d:0b:48:9b:1d:81:b9:84:6b:79:
         eb:c1:49:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra5KtlskeeZLYlnroQyA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOGUyMGM0OGU4OTczYzMzMWUzM2NlNTUxOTVhMzIxNzcz
ZjBhYzMwHhcNMjYwMzAxMjIwMTE5WhcNMjYwMzAyMjIwMTE5WjAzMTEwLwYDVQQD
EyhiNWYxNTBkYTQxMTlkMjkyYjMwZWQ1NmNmZTVmOWZkNzEwZGRlZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu02CHew8zdDSDP5f1cColjqf/wNC
XBYEy94fHwrYe0CkcwIJD9WGMYeocpSeA7lU6vVRbrJllxAssj4Jj5xbbEMD0PFn
vWHnh8VpT+A8Vk3RYUZvVLwLFAG/qKOltTvWJK95T3AlIEVEQ0iNpV8hb5vrd4Y0
Cagt566IbdoLd8RTuq9bFvF/19OCkHjqxxxSvsAksCnbqzaseEEbZMoL16xJxL8V
8jiww8XYSdsTwjGflBGeQzXCHtj3UB/aNdoE975tYI11bsFqEHFXpV8KKrca9zGA
HhBng8VNoimvW7wAym8GLVGUPZZY0eTF/xts9kbLCaBepZIFDTooDOSmwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXxUNpBGdKSsw7VbP5fn9cQ3e4jMB8GA1UdIwQY
MBaAFAuOIMSOiXPDMeM85VGVoyF3PwrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQt
YTVhZjkzN2ZiYzA1LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQtYTVhZjkzN2ZiYzA1
LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcOEfLU4
1hd5yeas+1fJzVIClTPB5MonkiKGifQnmscfakzWbxlP4dgqDX11A787aWyQPMfL
A7OKeP4bZLNeIVPXze52gmaXi+hz/L4vVQ9KKJVDjt4IcHozGTyecWVLesF/BegR
O5dTT5SpPotTHAhi/P8S/sQIVKaSVVaInkl8QFXJrWcnmx6T1wp3sqv0csp4JN3s
4DEn048sWX8/NfP5WoujhqHEYptwGFIBpDZcdPMk80O3J7tGjMqSKmSiNfzyLi/h
uGVfS6ECzoqBdgLOLOVBdr+omGjUHkzPK2TQjo1zOmwHoCK+HQpLt9hgarN9C0ib
HYG5hGt568FJ2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:57 2026 by rpki-client