Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File:                     e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier:          FERx/w3IT+g7c12PcjHdQV/7izwzGT7di+CrqqlT5ao=
Subject key identifier:   92:2A:21:51:29:C7:04:D7:36:37:D9:23:C1:88:AB:15:2B:38:D5:1D
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer:       /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial:       019CA9B3B37711154E70268011FFDB0A2F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 14:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:52 +0000
Files and hashes:         1: YnW_N1HnfxQcGZ8nbOsDuROfUtw.roa (hash: WvOgqLBZMI+JVQxfZ0sns+9mEpeSOL8i0zDZ/Mkn1d0=)
                          2: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: V0roK7bos01b7HfBqxDK1EbtWKQ3d7l7SSackqkRwR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:b3:77:11:15:4e:70:26:80:11:ff:db:0a:2f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
        Validity
            Not Before: Mar  1 14:00:52 2026 GMT
            Not After : Mar  2 14:00:52 2026 GMT
        Subject: CN=922a215129c704d73637d923c188ab152b38d51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:30:36:f9:cd:9b:dc:26:fe:63:48:49:ba:
                    28:b0:9a:05:3b:85:78:6c:36:f7:c0:c0:cd:69:6c:
                    d0:a4:87:7f:85:fc:f8:d2:bd:a0:69:b6:4c:64:e7:
                    af:d2:3b:7e:aa:33:f3:5f:9e:57:11:5c:f6:4b:6a:
                    2b:5b:1f:67:3b:51:5f:0c:24:16:76:b3:c7:1a:3f:
                    31:48:2a:86:2c:b8:7b:00:59:77:8b:ac:ba:80:87:
                    7a:fd:18:e9:f7:62:24:d9:9e:81:d1:40:81:64:92:
                    64:e0:68:ef:44:7e:38:ca:9e:25:ee:34:88:c5:86:
                    97:ee:85:2e:fe:19:5e:7d:af:22:cd:dd:ed:54:d5:
                    6a:60:d4:21:d4:2f:81:10:a0:00:0c:30:d5:36:fb:
                    f7:59:15:83:af:b8:7f:8d:59:c1:c1:8d:01:62:7a:
                    29:f4:22:2e:51:52:9c:d4:b6:cc:c1:10:92:e8:d8:
                    68:7f:77:15:ed:39:70:44:eb:e1:3a:98:40:e5:e7:
                    52:78:d0:e2:df:dc:f3:3f:54:4d:8d:b9:be:69:38:
                    c8:eb:90:ce:19:4e:7e:2a:84:53:24:64:17:af:65:
                    69:c5:0c:69:cd:b0:2b:dd:1e:af:da:34:8a:4a:63:
                    b8:bf:45:d1:e1:a3:7e:3d:4a:ba:8b:55:c6:9e:74:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2A:21:51:29:C7:04:D7:36:37:D9:23:C1:88:AB:15:2B:38:D5:1D
            X509v3 Authority Key Identifier:
                keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:58:ba:53:c4:f4:5a:6b:4f:4e:43:45:5c:cf:04:cb:79:69:
         49:d7:4e:02:a4:28:95:0f:67:5d:0d:ed:fb:97:11:4a:7d:bf:
         1f:aa:97:39:a1:73:d7:08:b8:bb:03:04:ba:91:0e:b1:81:13:
         6c:91:18:ea:67:a3:4d:b9:f5:f1:bb:19:65:3f:81:6a:67:89:
         a2:c7:ed:21:b8:da:48:ce:06:06:95:3f:3b:4c:ea:72:7b:6d:
         ba:23:ad:08:94:27:2b:d9:a3:a2:a1:d9:2d:f1:d9:27:88:d4:
         8a:e2:7e:4b:f5:9d:03:dc:18:c2:46:46:6b:d2:55:81:70:af:
         5c:67:b6:2e:b4:bd:33:2c:77:bc:88:2a:63:0e:40:8e:db:df:
         93:dd:22:97:ad:4b:2a:91:e2:03:7d:55:97:53:8f:31:75:ec:
         8f:08:fc:5e:d4:a9:12:ab:3f:07:62:84:1e:73:b1:09:bd:62:
         12:65:0c:42:2b:66:8b:13:f7:12:4f:ae:39:13:d1:6c:89:e0:
         55:a9:db:a8:1f:33:1f:a8:97:b0:35:45:03:2c:8d:2e:3b:07:
         90:29:af:62:38:a5:39:1a:ae:29:87:50:1c:6d:9c:da:39:af:
         b1:8d:4e:63:aa:d2:42:19:d8:8a:28:d5:04:1a:2c:05:d6:fd:
         1a:c1:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:10 2026 by rpki-client