Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File:                     4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier:          SfWV0K6Nr8sSfifWA6gybYqMYhqIoFTUWwIDbzcZDwY=
Subject key identifier:   C7:38:B7:EA:93:C2:23:6E:9D:CB:6B:86:6D:B8:6E:0D:44:17:2D:DF
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer:       /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial:       019CAC7DFCBCA2C39D0B2A34E4E77B01AC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number:          1474
Signing time:             Mon 02 Mar 2026 03:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:03 +0000
Files and hashes:         1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=)
                          2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: KOwL9BLHN+DkfwruRpDEOW9zbUu4f+cNNcBBbgEAYQg=)
                          3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:fc:bc:a2:c3:9d:0b:2a:34:e4:e7:7b:01:ac:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
        Validity
            Not Before: Mar  2 03:01:03 2026 GMT
            Not After : Mar  3 03:01:03 2026 GMT
        Subject: CN=c738b7ea93c2236e9dcb6b866db86e0d44172ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:0a:09:a1:69:3a:e4:1b:f6:b1:1d:ce:c9:
                    72:b6:b9:f5:40:f2:ce:1a:f1:dc:93:23:22:6a:6b:
                    b6:6a:c1:d7:34:66:b9:6e:ce:15:f3:79:07:48:fc:
                    e7:ac:dd:c8:94:20:a9:35:4f:b5:bb:67:b0:40:82:
                    19:82:c7:cf:9f:d5:c9:10:87:75:37:e5:59:46:bb:
                    a7:4e:b7:aa:51:c2:4d:fc:c9:c0:ab:93:19:36:d2:
                    53:0c:6c:63:82:af:a5:aa:37:6e:de:80:37:06:76:
                    14:84:37:9e:24:1e:15:c4:62:fd:fa:28:d0:9e:31:
                    78:e7:f8:ee:b0:6e:eb:03:2d:fa:78:e7:2c:64:fd:
                    54:d0:48:94:85:fa:96:5f:78:b9:e4:70:8a:ff:5a:
                    b1:af:46:e7:65:a5:85:2b:51:ed:c8:0b:17:81:91:
                    1c:8e:09:f4:23:58:28:79:eb:8e:70:64:14:a9:cd:
                    eb:2c:82:d3:78:af:4c:38:17:2b:17:27:3a:9f:99:
                    a0:52:4d:a8:b0:ff:70:0a:16:3b:09:84:b4:99:16:
                    8f:96:d0:c2:d0:0f:e7:a1:5e:f0:db:44:0e:be:3e:
                    39:4d:87:b8:3b:a0:10:07:01:04:24:ab:fd:41:95:
                    0f:e2:9a:d8:91:46:17:a2:05:c9:02:82:c6:f9:71:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:B7:EA:93:C2:23:6E:9D:CB:6B:86:6D:B8:6E:0D:44:17:2D:DF
            X509v3 Authority Key Identifier:
                keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:1c:ae:43:f3:44:ad:f3:49:26:ae:72:31:70:9e:80:32:
         50:3b:53:01:fd:1f:72:03:20:86:d9:a5:8f:24:9c:03:47:0b:
         7f:bc:1b:58:da:51:34:2c:91:7a:2a:9c:5d:9d:c8:7b:d3:e4:
         a5:81:22:fe:df:33:e6:c5:df:b6:2e:40:bf:ad:af:b6:76:5f:
         dc:6d:56:e6:5e:f3:12:c9:fb:92:61:57:a5:e1:d1:1a:08:e8:
         ef:8a:4f:b9:48:2a:a2:03:77:6f:a7:f2:b7:75:3b:7e:9a:8e:
         c2:1f:12:b4:25:4a:4c:9a:44:f3:f9:3b:f9:b6:42:31:a7:e7:
         9c:be:41:69:d7:66:a6:02:4d:2b:72:f6:b3:bc:36:d5:5e:9a:
         5e:dd:d4:4a:f5:c0:bc:a4:aa:ae:df:dc:84:e8:fc:d2:06:52:
         86:36:6b:ba:6a:8b:bc:d8:61:4c:c3:8d:67:64:13:58:87:c3:
         9f:c0:72:00:2f:47:c0:19:57:87:2c:87:1b:26:16:b9:5b:33:
         14:b0:59:e1:df:56:56:51:62:5b:20:e9:f1:1a:f1:30:9c:03:
         76:5e:49:87:f9:bb:44:b8:56:0b:59:24:fd:2f:55:12:b9:b3:
         e0:00:5a:4c:c5:71:13:0e:82:14:96:a7:8b:45:71:6b:be:ec:
         cb:f3:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:56 2026 by rpki-client