Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File:                     70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier:          LQU/a0doMIT/CqOd2ooLrk7WyxRRfLNDB5Qz4OTZR3U=
Subject key identifier:   30:5C:E3:D9:0E:2D:20:B5:87:7E:D0:F9:D5:66:29:C4:FD:55:A2:8F
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer:       /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial:       019CAC0FFF148A5DAC1A43D17F9DC741224A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 01:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:55 +0000
Files and hashes:         1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: tAaYFGcsCqz56zt83Q8hOmTddU5gn72kyiY75h38DfQ=)
                          2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:ff:14:8a:5d:ac:1a:43:d1:7f:9d:c7:41:22:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
        Validity
            Not Before: Mar  2 01:00:55 2026 GMT
            Not After : Mar  3 01:00:55 2026 GMT
        Subject: CN=305ce3d90e2d20b5877ed0f9d56629c4fd55a28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:7c:a3:b7:e5:35:9a:9b:4a:ba:04:9b:08:
                    e4:0b:ee:27:55:7c:e6:b6:a9:32:43:27:6c:36:be:
                    80:3f:e1:e3:24:36:5b:c3:da:04:6b:ce:aa:b3:eb:
                    8a:5e:f9:19:f2:3b:54:99:6b:7e:9b:4d:7d:d7:22:
                    e8:3e:68:8c:f7:44:94:f1:bb:57:86:d9:64:3a:8b:
                    58:0d:73:a9:43:8f:ca:60:59:af:af:85:6a:5b:2a:
                    c7:62:29:cf:5c:51:bf:f6:f3:75:50:08:0b:98:dc:
                    88:7e:1b:09:fb:1c:e7:c3:6e:03:88:49:78:b7:0a:
                    18:bf:da:f6:f9:3c:76:80:7d:ae:fe:6b:24:11:fd:
                    82:ca:b3:7a:68:56:20:ce:85:66:25:96:b8:01:59:
                    cd:d6:15:87:87:9a:c2:7b:ce:c3:67:85:64:e3:1b:
                    dd:33:32:74:5a:c8:e7:60:80:87:9b:ee:3c:fe:8c:
                    f9:b6:52:0d:aa:d4:74:ae:ec:76:e7:cc:06:f3:ed:
                    fd:48:04:7b:a1:de:96:d5:ea:16:fd:5a:04:41:77:
                    03:68:53:42:65:22:a9:91:81:30:b7:8b:77:50:47:
                    4b:f8:dc:ba:4c:e7:43:15:24:70:eb:0e:3f:6a:b0:
                    13:cc:ac:56:38:d1:86:25:a6:3e:49:93:3c:17:b3:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:E3:D9:0E:2D:20:B5:87:7E:D0:F9:D5:66:29:C4:FD:55:A2:8F
            X509v3 Authority Key Identifier:
                keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:44:b7:07:74:c5:4c:30:6c:92:81:a9:d3:cb:60:60:b0:
         8e:00:a4:51:df:37:58:9f:31:ba:0a:a4:67:3b:21:77:3a:31:
         bc:89:d9:9c:16:2e:01:5f:b5:14:69:5c:2f:88:5f:f4:fa:86:
         4c:ba:0c:be:2d:46:16:da:7a:a0:41:4f:b9:57:1d:0f:41:25:
         50:cf:72:58:d2:ac:c7:9b:64:f2:db:66:5a:25:06:6d:a3:05:
         05:7f:29:40:de:ec:93:dd:7a:63:64:e3:11:50:b6:73:17:29:
         e5:c0:d1:de:a1:0f:96:70:b0:8b:5e:07:ef:23:84:d1:7a:7b:
         b5:5c:f9:49:79:e1:60:c3:3b:15:3c:ed:51:0c:5a:f1:c1:b8:
         f4:6c:91:d8:32:f9:31:a9:94:8e:f5:7e:20:0e:e4:91:20:75:
         f1:f0:25:b1:d2:30:6d:76:9e:21:2b:73:b5:95:b7:81:a0:9d:
         b9:04:a3:44:5a:6a:de:8a:93:41:e1:46:8b:50:85:b9:17:1b:
         41:03:fb:da:23:56:e2:08:7b:1d:9d:46:cb:c2:8b:47:ba:ed:
         de:e3:6f:33:b8:0f:a9:cf:80:41:2c:1d:f4:1c:c5:70:3a:70:
         1f:1a:90:f1:02:27:a0:95:20:ea:0b:fb:94:9c:56:8c:3b:02:
         8d:c5:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:05 2026 by rpki-client