Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File:                     Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier:          MbS50KL6Gyeg/lu9HPKFP2a2kz3Hd4iEsGSDUI8r8Sw=
Subject key identifier:   29:BB:61:71:12:26:0A:78:8F:A4:7F:E0:9D:93:49:00:87:8B:3F:9E
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer:       /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial:       019CABD8FC107ECFF3DE7AA14FF8000FDB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number:          142C
Signing time:             Mon 02 Mar 2026 00:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:50 +0000
Files and hashes:         1: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: RL8JpglY+nXYHXYd8QdvriA+LUMwmM9exl1XNQv1O2c=)
                          2: zRBFe9x1meBumlZVBO7a-XrbamY.roa (hash: 9tVoYdgbZgFACYKhxfO+KxLqad27bA9cdGeFVvtqTOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:fc:10:7e:cf:f3:de:7a:a1:4f:f8:00:0f:db:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
        Validity
            Not Before: Mar  2 00:00:50 2026 GMT
            Not After : Mar  3 00:00:50 2026 GMT
        Subject: CN=29bb617112260a788fa47fe09d934900878b3f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:40:c3:23:2e:96:dc:8a:f9:eb:00:c4:c5:
                    50:f8:3d:d0:09:5b:af:55:89:6d:c6:60:7b:00:86:
                    44:b4:f6:fe:23:4a:ff:3c:94:30:b5:42:a9:22:1c:
                    01:24:09:de:b7:67:03:f8:5b:ac:5d:e3:f9:c4:8c:
                    df:1f:df:00:7a:c0:bf:c5:5f:b1:2a:82:45:57:3f:
                    32:f4:50:12:cb:e0:ca:d0:b0:3f:9f:93:50:45:1c:
                    1f:65:b1:24:fb:b5:8a:f2:f1:09:b0:f5:bb:8b:c0:
                    30:d1:d3:0c:51:f6:fe:01:fb:9d:d7:27:30:f7:d4:
                    fc:e1:15:37:01:bc:6c:15:cf:c2:17:36:2d:c0:08:
                    69:20:87:5e:66:2c:d4:ff:57:e7:23:ea:94:6c:21:
                    97:19:fa:c2:e2:0d:0d:f7:3e:45:75:7a:ec:1b:4c:
                    56:d2:69:cc:0e:df:f2:74:4b:be:2d:a5:7c:01:d6:
                    b7:05:8e:49:a3:6b:9b:95:d2:81:92:39:f6:81:46:
                    e5:2a:a8:23:76:a6:22:5a:12:fb:3b:ef:bd:f0:00:
                    4f:8f:e6:01:5a:da:6d:44:09:9e:f4:0d:6d:b1:4a:
                    f4:32:de:59:7f:0a:1e:ee:13:46:37:25:d2:ab:17:
                    de:00:c8:c5:bf:76:b3:dd:ee:29:3e:7e:c0:00:b4:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BB:61:71:12:26:0A:78:8F:A4:7F:E0:9D:93:49:00:87:8B:3F:9E
            X509v3 Authority Key Identifier:
                keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:c7:e4:19:52:58:1a:de:64:96:21:73:d5:d1:df:0f:00:
         3a:05:df:25:b0:96:3d:48:e9:b0:50:d0:90:30:33:aa:50:33:
         bd:86:03:e7:cf:2d:a0:79:2c:ea:9e:df:ee:19:73:da:67:bf:
         94:54:62:18:0d:2e:ec:07:71:b7:15:7f:6c:87:b2:db:e8:06:
         c3:a4:5e:0b:11:4f:7b:49:2d:7f:f4:29:ec:66:8b:44:67:51:
         35:a3:00:a6:f8:dd:55:7f:45:4e:8a:ff:fd:de:21:72:a0:cb:
         c8:83:99:bd:54:35:a7:b9:c1:7a:9b:1e:97:9d:43:db:cd:ad:
         5f:14:02:2f:bb:c7:be:77:06:e5:c3:17:ff:6a:40:a4:1e:f8:
         65:91:50:4c:89:fa:70:a7:f2:75:cb:6e:0a:d8:99:28:9f:70:
         c7:0a:66:0f:40:64:3b:39:90:c1:b9:ca:0e:0e:8e:44:b2:e2:
         09:ca:63:ef:3f:69:cd:c1:dd:1d:41:09:73:2a:36:df:83:c0:
         5e:da:74:13:de:8f:9a:38:60:61:14:9d:13:b8:b8:ec:b6:1e:
         04:01:16:54:a5:3e:38:65:ba:de:5a:a5:79:09:a9:3e:c4:4e:
         a4:12:0b:79:0e:c8:48:0d:ab:1e:4b:f8:3c:88:d7:be:d1:2c:
         7f:c5:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:38 2026 by rpki-client