Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier:          vCHKhU0LrbhKq2zvstobJM7EHR6JUdqFRTXF+x914VE=
Subject key identifier:   55:D1:42:7C:6F:4B:D7:22:E7:9D:0E:9C:20:85:95:46:78:AC:8F:50
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer:       /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial:       019CABD98CB27D0F15F54C2CE557FE458B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 00:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:27 +0000
Files and hashes:         1: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (hash: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI=)
                          2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: U17tGM6Dwqdu5QVxmHX3FvPVwegigDsGtzwN3L4g0e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:8c:b2:7d:0f:15:f5:4c:2c:e5:57:fe:45:8b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Validity
            Not Before: Mar  2 00:01:27 2026 GMT
            Not After : Mar  3 00:01:27 2026 GMT
        Subject: CN=55d1427c6f4bd722e79d0e9c2085954678ac8f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:99:77:03:d3:33:70:62:80:11:2c:2e:a7:
                    96:54:2e:c6:a4:21:ca:4e:7a:d6:f7:bf:37:cf:2e:
                    df:d3:88:15:99:89:df:4f:0f:6e:99:4e:bc:82:14:
                    4f:65:51:fd:93:13:34:23:58:71:25:8f:84:76:98:
                    7d:ee:7b:fb:c4:7b:a4:5e:79:8b:fe:16:a0:2b:01:
                    23:2a:86:b8:66:e9:6b:7a:37:37:cb:99:e5:a1:60:
                    a9:70:a4:72:76:35:ab:11:69:57:99:fb:c8:f6:88:
                    f0:38:b2:57:b0:76:fc:f3:62:67:0f:25:6b:fb:0d:
                    92:aa:db:3b:cb:ec:e5:2c:8a:a7:b4:2c:14:27:42:
                    0c:2a:7e:5f:35:9e:2f:cc:aa:31:31:24:9b:2f:7d:
                    09:bb:a4:b1:a0:64:f5:10:38:d7:a2:16:01:f5:2b:
                    0a:1f:6f:09:eb:b3:52:69:04:2b:b2:2e:89:15:ec:
                    9f:59:93:f7:a5:01:53:b7:20:c1:78:b2:79:ed:7e:
                    dc:1d:e0:c9:ae:ee:a2:b6:1d:b6:30:04:96:25:9b:
                    38:8c:4c:9f:f5:a1:b6:5f:a3:47:b7:41:4b:01:92:
                    8b:a6:8c:fd:67:9f:d0:57:d1:94:86:ee:64:7f:90:
                    5d:9a:b0:1e:c7:62:d2:00:ed:18:73:8d:9a:98:21:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:42:7C:6F:4B:D7:22:E7:9D:0E:9C:20:85:95:46:78:AC:8F:50
            X509v3 Authority Key Identifier:
                keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:53:05:c2:41:f4:f9:9e:bc:eb:35:72:4e:e2:fa:cb:55:
         80:f4:20:6e:74:74:9f:af:7c:62:c7:b1:e6:f3:e7:cf:8f:ea:
         76:90:9a:e8:4c:79:6a:6b:27:04:dd:b3:43:d9:0e:68:27:96:
         32:69:26:6b:33:ab:ff:32:22:cf:84:97:98:33:c5:a0:af:6c:
         85:cb:7c:47:b4:c9:f3:13:5e:9d:a2:cf:d8:cc:9b:d4:60:65:
         c9:24:71:9c:dc:a6:03:84:a7:f1:06:5c:a9:db:87:e4:31:af:
         9c:61:6a:2c:1a:87:40:25:b2:95:43:2a:28:18:0f:4b:2c:56:
         9e:9a:ac:ba:05:80:89:8e:3d:e8:2c:79:02:b6:09:49:11:6a:
         98:2f:92:7d:f5:34:05:41:52:75:12:73:8d:e0:f9:54:e9:8a:
         36:64:c8:b2:e7:da:a2:02:81:2b:d9:88:03:08:fe:68:a0:1e:
         1e:cb:d8:36:75:f9:db:ee:78:3d:d8:1f:8a:4c:f1:31:66:61:
         d7:3d:f0:11:49:2f:df:1e:5d:1a:9c:7b:79:b4:39:c2:d1:aa:
         ee:ab:e9:cd:9f:69:2f:49:6e:62:04:ec:99:83:eb:12:27:00:
         32:61:0a:f8:11:0f:e8:0c:bd:5a:59:3c:65:64:80:31:05:9c:
         86:96:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:20 2026 by rpki-client