Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File:                     Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier:          q0imlSkMoEgPtKsxp1eiGFyFPDqVo4XTh0A7iccBZ1I=
Subject key identifier:   F1:34:1F:68:C7:CB:45:79:72:11:74:D9:10:34:93:D8:6E:6D:2B:B0
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer:       /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial:       019CADC7E2AE28A3E1C6F042AC46B5CAD872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number:          185D
Signing time:             Mon 02 Mar 2026 09:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:23 +0000
Files and hashes:         1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: z6RNsjXonO1h6vC4G8TaZJlyPhoZXqWqa2bSQfPSP30=)
                          2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
                          3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
                          4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:e2:ae:28:a3:e1:c6:f0:42:ac:46:b5:ca:d8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
        Validity
            Not Before: Mar  2 09:01:23 2026 GMT
            Not After : Mar  3 09:01:23 2026 GMT
        Subject: CN=f1341f68c7cb4579721174d9103493d86e6d2bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:c6:34:3b:49:d3:5c:b1:5d:89:fa:6b:bd:
                    1f:aa:17:e5:47:0a:96:94:83:88:04:98:23:ee:1e:
                    d9:61:f6:bc:0b:84:cd:5f:55:73:23:ba:90:d3:84:
                    1a:c1:1d:81:9e:99:fb:09:96:44:7d:7e:7a:56:af:
                    01:ad:02:93:a1:a1:1d:e3:3a:ca:9d:3c:80:3a:95:
                    98:7d:14:c4:a2:1d:ce:d1:44:00:61:c4:4e:af:d8:
                    71:6d:32:40:5a:e7:07:59:64:51:ee:3a:9d:c7:39:
                    d4:64:31:c7:00:76:02:ce:de:a8:f5:c1:3b:9e:9c:
                    f0:3f:84:12:21:ed:81:31:c8:0a:5b:cd:5c:77:31:
                    d5:f4:24:45:6f:6c:6e:15:af:06:2a:2e:7c:dd:95:
                    33:86:98:0e:e3:98:ee:0a:c0:b9:ae:2f:39:67:50:
                    06:5a:90:e4:17:72:0d:b3:06:1d:d5:ba:a3:4c:80:
                    51:23:b7:b2:20:88:26:42:da:b2:e2:cf:9c:a8:f6:
                    89:f7:f0:6a:36:2c:23:55:82:74:28:f4:99:d6:75:
                    bd:e9:2b:ea:6a:b8:f3:12:c7:7f:b6:b4:58:a6:26:
                    c6:34:d1:db:8f:82:9d:e0:85:1b:2b:45:64:d4:a9:
                    61:11:f4:d0:34:19:1f:14:25:4a:98:9d:67:af:d6:
                    bc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:1F:68:C7:CB:45:79:72:11:74:D9:10:34:93:D8:6E:6D:2B:B0
            X509v3 Authority Key Identifier:
                keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:00:05:f1:74:2c:2c:3e:25:d7:3d:0d:86:af:47:79:ba:05:
         bd:72:75:75:64:f3:e1:83:7d:af:3b:d3:3c:a6:c1:40:df:61:
         77:71:0b:7f:64:a9:ba:c1:f8:e6:39:af:b2:8d:a6:3b:1a:09:
         2b:23:67:59:ce:ac:12:5c:9e:26:a9:f4:0c:91:6e:1b:f6:6e:
         63:75:93:d9:3f:fb:37:49:b7:26:e7:00:17:dc:9a:08:ae:29:
         4e:cd:e0:d2:4b:62:17:0d:01:d8:59:c9:b7:a1:ac:27:85:fa:
         61:83:e1:e4:19:e9:c5:9f:16:b2:28:26:b0:80:03:1f:9a:6e:
         57:ab:42:ce:1d:52:3a:2f:82:9d:e2:3b:ac:12:52:8c:aa:45:
         2b:25:6b:77:16:fa:3e:64:7c:22:d4:80:62:e1:dc:69:bd:2a:
         3c:59:ea:1f:1d:e2:26:05:95:47:ae:39:87:ce:ff:0a:23:63:
         3a:d4:bc:35:fe:ff:f1:58:af:56:7f:be:e4:81:7c:59:39:87:
         87:f3:dc:19:4b:33:02:1a:ae:a2:53:3b:f2:bd:95:d4:59:02:
         82:93:66:75:88:ae:9d:7d:28:a6:0c:af:2c:01:b7:dd:ee:05:
         0d:b2:ee:9d:b3:3e:4b:9b:47:1d:7a:6b:e6:f0:a7:56:dd:6c:
         75:2d:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:34 2026 by rpki-client