Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File:                     1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier:          I/gUp9VTLnVrT1iLeNM9KwV/2QTSgi5JlRWUQQyQ4Q4=
Subject key identifier:   18:08:7C:52:81:DD:95:E2:FE:ED:2A:6F:36:A1:67:EA:DA:B9:E5:26
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer:       /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial:       019CABD9F45EE2F560F456A863862481B673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number:          157C
Signing time:             Mon 02 Mar 2026 00:01:53 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:53 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:53 +0000
Files and hashes:         1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: E7sM1zIR5Osj9yjJ97ui2r91jwWPCiAJHUzYQgi5czw=)
                          2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:f4:5e:e2:f5:60:f4:56:a8:63:86:24:81:b6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
        Validity
            Not Before: Mar  2 00:01:53 2026 GMT
            Not After : Mar  3 00:01:53 2026 GMT
        Subject: CN=18087c5281dd95e2feed2a6f36a167eadab9e526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:77:02:7f:b9:39:64:3e:ab:e6:12:c6:ad:15:
                    73:b1:cb:1e:10:71:b3:7c:5a:1a:71:34:7e:33:b7:
                    6c:c0:c3:6d:1c:87:d0:c9:ca:93:de:c8:16:2a:df:
                    1d:b7:a7:59:58:25:2c:1f:d3:a4:2d:43:91:8f:55:
                    d0:8f:1e:4a:e2:09:c1:e7:93:3a:ba:94:7d:9a:28:
                    db:b6:81:72:60:68:5b:c8:27:1f:60:62:dc:05:18:
                    f2:d5:26:dc:87:a0:b2:4c:fc:b1:dc:9b:93:6f:e0:
                    dc:90:4b:04:ef:98:fb:20:ad:32:35:28:6e:f5:ee:
                    21:59:58:76:02:d1:c7:e1:0c:5d:b1:b1:4c:a4:38:
                    39:39:28:21:de:40:12:47:81:dc:46:55:71:27:bf:
                    5e:a0:e7:a8:99:2b:2c:65:6b:0e:15:6a:12:51:2e:
                    c0:ad:91:80:37:29:b8:ee:60:a1:10:4e:c2:ac:7d:
                    24:f2:e1:a6:22:87:01:8d:63:21:05:b5:39:d9:90:
                    22:61:f5:71:68:2a:79:9a:be:1d:fb:5e:22:ae:07:
                    e3:0d:71:12:d2:04:c8:9f:48:86:b6:02:96:85:dd:
                    f4:b3:97:5b:ca:5d:63:ba:0f:24:9c:f8:9a:05:d2:
                    e8:03:c5:72:4d:13:e5:b6:15:2e:79:c9:65:c4:a3:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:08:7C:52:81:DD:95:E2:FE:ED:2A:6F:36:A1:67:EA:DA:B9:E5:26
            X509v3 Authority Key Identifier:
                keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:f1:a9:12:54:8f:b6:a5:e7:3e:69:1d:9c:fe:24:8a:30:
         b1:26:4d:4c:d2:ba:ff:ca:36:2e:e5:f7:03:54:a6:15:9a:2c:
         fc:49:bd:38:39:ff:0d:da:87:96:07:c7:ba:40:0f:0a:51:44:
         03:b0:ca:83:1f:79:88:e1:01:62:d4:e3:3a:10:ef:59:2f:2a:
         07:b3:23:1f:e8:c1:17:f1:e4:b0:1d:2e:95:75:d9:a6:1e:6d:
         4d:64:62:f2:c1:a6:8a:8a:9d:dd:eb:68:9d:8b:17:58:6a:48:
         9b:17:cc:0f:b5:3b:c7:87:e4:85:05:20:5d:e4:fb:ff:55:2e:
         37:ce:ee:f1:d8:7c:56:b3:04:aa:01:aa:09:f3:13:5d:63:69:
         79:98:37:2a:e4:6a:eb:be:d8:1a:ec:3e:3e:e4:e1:34:17:83:
         a4:e0:3a:b9:f7:a7:d8:a7:f9:dc:66:f2:a0:9e:48:de:ec:b0:
         35:c2:ad:a9:a9:b6:0e:c3:c2:c6:7a:ea:70:81:55:85:e0:df:
         9b:23:f3:c4:5e:47:bd:57:a8:5a:69:04:4d:03:d0:71:14:f9:
         ca:87:7d:73:0d:4b:3c:5a:e1:42:af:d0:db:36:ec:fd:fa:1a:
         f8:0b:25:52:85:03:b4:70:85:81:04:8f:8e:58:fc:3c:23:ac:
         b3:25:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:52 2026 by rpki-client