Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          D5nZZ+6++nIqzLQ+Vjb/J3uR5jXLy919mWunEowI7Eo=
Subject key identifier:   0E:43:17:6D:E8:8B:A6:F6:30:D6:73:FE:FE:35:AD:D9:9B:39:DC:A7
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       019CAB34ADB355C26A1E42C0E5579844561F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 21:01:21 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:21 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:21 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: A5Igh6Z4gYJDXctOvSWG2QhKQbVWcHujwN/jhnDj3VY=)
                          2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:ad:b3:55:c2:6a:1e:42:c0:e5:57:98:44:56:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Mar  1 21:01:21 2026 GMT
            Not After : Mar  2 21:01:21 2026 GMT
        Subject: CN=0e43176de88ba6f630d673fefe35add99b39dca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:5e:48:84:15:2d:8e:1f:96:4e:e5:ba:17:
                    50:65:43:25:7a:f0:eb:72:e0:42:4a:6d:33:6c:48:
                    55:5b:24:55:02:a3:1e:99:c8:6f:b2:a8:1a:bc:f3:
                    83:f8:e0:5e:7d:86:66:3d:26:bb:38:9d:cf:42:36:
                    4d:48:45:a0:a5:8e:8b:6f:ab:72:96:49:ca:b7:35:
                    eb:b2:79:18:bc:8a:36:d7:a5:d3:c6:03:fa:02:7e:
                    9c:cc:d1:4b:7c:ca:85:10:e9:18:40:5c:6e:ce:66:
                    a9:56:4a:86:ea:0c:3c:56:d7:34:34:c9:84:77:6c:
                    a9:01:08:b3:9a:e4:ab:e1:1b:37:bf:d9:79:cb:6d:
                    fe:dd:e0:1f:db:9d:b3:c5:97:f0:ed:08:49:0a:45:
                    11:9a:00:cc:c8:27:d5:69:2e:91:80:8f:86:f8:6a:
                    ae:fe:a3:84:f5:de:4d:07:a9:dd:f3:21:63:81:ba:
                    25:cb:91:76:d2:96:c9:57:7f:6f:8d:e5:10:3c:a6:
                    60:b7:06:20:03:40:e7:b4:48:d9:44:2e:09:6a:3d:
                    16:a6:64:97:1d:f0:46:e4:fe:63:cd:71:cd:f5:32:
                    e8:dc:1e:9b:5d:1f:cb:6f:50:2a:d5:1f:48:26:93:
                    80:67:bf:ff:f9:93:35:e5:1a:33:a0:8c:84:2c:ec:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:43:17:6D:E8:8B:A6:F6:30:D6:73:FE:FE:35:AD:D9:9B:39:DC:A7
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:81:d3:98:cf:37:08:60:a2:52:04:f9:bb:ee:0f:90:5f:
         02:8e:98:ba:dc:b1:87:34:72:b3:0e:e3:cc:05:56:c5:cf:2e:
         35:93:36:6b:f1:6d:c9:86:5c:b3:c2:a6:f9:d1:2f:3e:da:bc:
         94:20:5b:f9:0c:a2:25:d0:42:1e:71:29:11:9a:f1:5e:48:13:
         d8:8d:e9:3d:a2:f7:7a:34:98:29:ed:16:f2:f2:4c:c9:55:cd:
         12:ea:f2:6e:0d:d4:f9:96:6a:d7:43:a2:65:be:59:6d:f4:c4:
         29:46:5f:08:46:7e:03:d6:12:71:89:99:47:08:c2:ee:9e:32:
         eb:73:71:69:13:8c:16:7f:11:bb:7c:9a:56:b3:1b:29:5a:a0:
         ba:e8:77:f6:6e:a1:ed:25:13:1d:23:65:0c:7a:e0:a4:f1:b2:
         aa:0c:77:c9:90:42:01:b2:1f:26:2e:73:ed:1a:92:36:36:57:
         17:ce:37:fd:4f:b1:2e:f6:d9:60:81:5f:07:39:8e:a7:e3:22:
         96:87:be:35:88:19:b0:95:f2:af:6e:95:93:59:94:48:e8:b8:
         ae:25:aa:3a:25:4c:ce:5b:f6:be:2e:f3:af:ab:46:4b:b2:c4:
         8c:03:bd:bd:61:9b:ca:ae:f2:5a:2d:a9:3e:9c:5f:ed:c4:a3:
         69:16:20:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:31 2026 by rpki-client