Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File:                     B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier:          5DJsDwq30HZQkvyU/9O6Re48LiMYc2WzF3Km6bM2B44=
Subject key identifier:   2E:FE:7F:EA:FC:0D:84:DB:53:66:40:1E:6D:C2:06:10:B6:20:92:7C
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer:       /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial:       019CAC7E298FED4838DAA870EE8EC1E39BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 03:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:15 +0000
Files and hashes:         1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: pGMa9WeWtq7w189yxT+PJTI8ayAEz8vqexx8tL3mHHA=)
                          2: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (hash: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:29:8f:ed:48:38:da:a8:70:ee:8e:c1:e3:9b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
        Validity
            Not Before: Mar  2 03:01:15 2026 GMT
            Not After : Mar  3 03:01:15 2026 GMT
        Subject: CN=2efe7feafc0d84db5366401e6dc20610b620927c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:68:c0:1c:50:3d:7e:9a:d8:17:60:4a:02:
                    d8:64:9f:c1:a7:db:b5:f9:4e:dd:e2:d6:ce:93:c0:
                    11:1a:bb:c8:b1:d3:19:8a:89:04:f8:6d:b2:18:bb:
                    59:90:a6:da:a2:4e:c6:1b:46:62:7f:d5:4a:83:81:
                    b3:36:96:a4:af:a7:f7:84:06:e9:d1:59:64:bc:0c:
                    b7:20:90:71:33:ce:b0:9c:e2:23:08:39:aa:9b:10:
                    65:79:44:39:ff:a5:b9:ae:81:04:fe:53:6a:ea:b1:
                    fb:93:aa:e2:15:98:04:49:bc:8e:16:d5:a3:9c:3d:
                    80:7f:a4:3a:ec:ff:cb:b4:ef:cc:12:46:e8:5f:ed:
                    6b:88:8a:ff:f4:d4:99:86:91:a2:a4:b5:38:ab:33:
                    a4:42:7e:6e:91:75:18:5d:ea:e2:10:cc:6c:35:f3:
                    56:a1:be:8c:57:31:1e:cc:3d:c0:e3:e0:a5:e2:16:
                    61:8a:88:bc:b6:48:b1:4a:9f:7d:71:d1:05:e5:13:
                    d7:a7:2a:96:ea:4a:07:79:11:26:3b:b0:d9:6c:d7:
                    ea:51:b9:65:70:53:5e:15:57:c6:30:f7:e1:05:a3:
                    e3:b1:2f:df:30:fc:a2:85:3c:65:aa:85:6e:f1:66:
                    96:04:d1:fb:8f:49:ea:4f:22:ba:04:03:2f:e1:67:
                    fa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FE:7F:EA:FC:0D:84:DB:53:66:40:1E:6D:C2:06:10:B6:20:92:7C
            X509v3 Authority Key Identifier:
                keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:c7:b8:e8:d8:ad:0b:a3:2a:cc:2c:1f:bb:ff:8d:7d:5b:
         83:9f:bd:65:ed:2c:dc:5e:fe:1d:da:6c:66:e1:9c:cf:42:2c:
         df:e7:3b:88:50:b0:6b:47:ed:d1:aa:9c:02:33:f7:b0:9d:03:
         b0:3a:f5:1a:35:86:c5:61:ae:78:ae:c6:e1:2f:58:69:9f:c4:
         b0:c8:41:56:bc:26:fa:c6:15:66:b1:33:3e:82:b2:04:e1:21:
         40:82:e2:c9:f6:73:fe:6f:64:b6:e5:db:09:67:79:96:37:03:
         bd:1b:ae:43:4c:24:25:f3:16:1b:1e:55:18:be:63:35:02:d8:
         a1:34:5f:ca:f7:29:f0:c4:f0:cd:94:16:ca:4c:26:74:2a:e8:
         d9:1e:d4:a9:72:49:aa:bb:7d:f0:14:09:08:13:bb:7e:86:eb:
         68:5e:c0:48:10:8c:26:6c:ad:13:d5:34:4b:91:92:fe:70:93:
         bc:67:ed:97:26:7d:3c:37:c4:bb:a0:97:33:8b:16:b2:e7:b9:
         c5:33:b1:2d:9a:26:0e:8d:c5:91:0c:24:a0:c5:9e:f4:6a:d6:
         5a:80:a5:b6:24:14:5f:b2:51:20:89:3c:92:cf:db:69:0e:5b:
         f3:20:94:72:aa:29:4f:62:f2:70:58:8e:03:65:20:6a:f2:3b:
         74:17:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:15 2026 by rpki-client