Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File:                     1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier:          +xSe4cWtAbIS1durAAtfZMJWKiVoUSC9/awMC9icoCY=
Subject key identifier:   F7:4F:45:C3:56:1B:8D:83:EA:1B:F0:69:88:33:38:B6:02:47:2E:30
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer:       /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial:       019CAC0FD98A8F9D06118DAD5D890AD8D0E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 01:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:45 +0000
Files and hashes:         1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: iy+kbs+jst7YB1Ra7Ii4HsoDsgRtticlz4VI7v1I9Jw=)
                          2: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (hash: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:d9:8a:8f:9d:06:11:8d:ad:5d:89:0a:d8:d0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
        Validity
            Not Before: Mar  2 01:00:45 2026 GMT
            Not After : Mar  3 01:00:45 2026 GMT
        Subject: CN=f74f45c3561b8d83ea1bf069883338b602472e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:46:ca:5b:94:8e:c8:5e:38:3e:fc:49:89:
                    6e:26:be:f6:57:fa:43:18:a4:2a:0d:8c:12:99:65:
                    d4:c8:be:2c:fc:26:f8:8e:ba:45:86:49:43:b5:ed:
                    bd:ed:5c:38:65:ea:df:7d:f6:d7:37:03:30:63:21:
                    76:bc:d6:d9:1c:9e:c2:94:cc:85:90:00:dd:e3:34:
                    e1:30:15:73:59:1c:99:01:7c:d1:c7:37:6b:6c:b2:
                    5c:ea:2a:aa:87:5e:44:00:b6:e0:86:b3:80:5f:c7:
                    ed:a4:58:8f:a7:9b:bf:c8:48:e0:88:92:f8:ec:d4:
                    58:44:bd:ea:a0:76:a5:d0:a1:a0:c2:61:5e:ab:ce:
                    99:b4:34:b6:9a:9a:25:2e:c8:03:86:48:b9:b6:70:
                    0c:be:76:83:6d:28:35:e2:d0:70:2e:5c:e8:48:43:
                    7c:42:45:39:77:05:d9:b9:63:37:42:d7:70:6b:7d:
                    78:15:99:82:51:a9:ca:e3:0e:b0:fc:37:75:20:b8:
                    bf:15:12:fd:9d:68:8b:0e:96:d2:f6:5e:03:c6:a9:
                    62:49:63:fd:8f:0d:51:31:c2:cd:12:8a:d5:35:a4:
                    ca:ee:6f:cd:6d:6e:c3:ca:cc:1e:5e:de:f6:7e:96:
                    ba:02:c2:0a:e5:92:f1:ac:9b:6e:76:79:0f:6c:05:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:45:C3:56:1B:8D:83:EA:1B:F0:69:88:33:38:B6:02:47:2E:30
            X509v3 Authority Key Identifier:
                keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:32:8b:f7:28:b1:0e:14:70:63:2e:d9:93:d7:67:1f:2d:ac:
         a8:fa:53:a3:2e:07:df:36:11:9e:ea:0e:f2:b7:42:1e:c0:bc:
         f2:ff:dd:e0:11:32:de:c1:84:4a:a4:e8:52:24:68:7e:1d:55:
         4d:59:fe:41:7c:44:b8:3e:ca:55:67:62:fb:c6:67:08:bd:94:
         70:93:c7:1c:fc:08:1f:5b:4d:cf:41:df:0b:29:ac:b2:ec:04:
         3d:e5:79:f1:a4:36:2a:bf:19:85:ba:bc:2f:c0:03:e9:7b:99:
         86:41:aa:78:c8:fe:12:19:ec:48:63:c6:50:7e:7e:fa:8d:f2:
         16:8d:13:83:bb:ea:7f:23:71:57:a8:da:1e:92:0d:db:39:8c:
         9b:78:84:6f:31:a0:b8:44:96:67:62:92:1a:fc:d4:f7:80:16:
         20:1f:44:61:d8:71:ba:a6:68:d0:3f:6d:17:eb:7f:4e:98:91:
         b4:d1:ea:f0:0a:39:0f:92:07:94:ed:4d:d0:b7:66:1e:46:62:
         45:3a:64:f7:6d:0e:59:6a:b6:ae:dd:8d:b5:2f:aa:e0:05:f8:
         c8:a5:bf:74:12:64:a9:33:77:e7:4e:9f:97:58:5c:6f:67:55:
         50:2b:c8:26:42:14:6f:bb:38:c6:44:96:61:64:aa:f7:d2:98:
         4a:59:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:31 2026 by rpki-client