Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
File:                     sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json)
Hash identifier:          /K1wgU6YMESugm8LbaYjhdRtRZMUm4rhIv37kwT0h84=
Subject key identifier:   BB:48:2B:C2:52:59:EB:C1:72:D8:DE:99:EF:DF:A5:FA:EE:5F:F9:98
Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96
Certificate issuer:       /CN=b092c2c2350c590a4483fd44f250a77feeaab296
Certificate serial:       019CABA21A155036E8AE4BCBCF36AA602C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
Manifest number:          07EC
Signing time:             Sun 01 Mar 2026 23:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:53 +0000
Files and hashes:         1: 3bXwyJRphHC821s-_1eJDdRcSaQ.roa (hash: 1C3Vwg+v+ejiWvSqFbwaT9wdnlbnP0w1UGBSQJTnl9w=)
                          2: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: 3SmZqdUjDx02F/K4izmuAVacccLW50kskJ+1hLFstVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:1a:15:50:36:e8:ae:4b:cb:cf:36:aa:60:2c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296
        Validity
            Not Before: Mar  1 23:00:53 2026 GMT
            Not After : Mar  2 23:00:53 2026 GMT
        Subject: CN=bb482bc25259ebc172d8de99efdfa5faee5ff998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:0b:38:2b:c1:fa:59:e8:da:0a:74:ba:4d:
                    af:f0:1d:f4:77:40:23:49:ff:4d:3c:86:10:9b:52:
                    48:cd:f2:04:4c:ee:0a:1c:d3:92:d7:27:fe:3d:d2:
                    25:a3:5d:bb:54:69:be:49:f2:52:fa:a7:6c:77:76:
                    1d:ea:72:2c:12:9e:e8:13:98:81:b4:c5:e2:b9:a6:
                    08:b3:31:45:32:97:d7:72:41:f7:51:2c:9f:1e:18:
                    16:16:dc:35:4a:a4:ef:f7:95:50:ad:03:57:f9:f0:
                    61:8e:08:d3:1c:d7:24:33:1b:c9:c2:a4:2b:f3:9a:
                    cd:95:6d:5a:a1:46:de:13:31:49:af:74:62:98:c7:
                    b7:86:cb:8c:2c:56:ac:f3:e1:dd:94:d2:b8:cb:52:
                    61:26:ed:00:89:00:48:bd:6d:e2:15:16:23:ff:c5:
                    da:b4:47:7f:fa:9c:c6:4b:a4:3a:94:06:c5:02:55:
                    23:4d:fd:67:93:43:cc:42:37:20:7b:86:13:e7:25:
                    53:14:91:ca:93:fd:be:0a:21:2d:8d:92:15:6d:ba:
                    27:6b:d4:f2:d2:24:f8:e2:6c:93:43:1a:35:1f:ff:
                    bb:d2:aa:ec:84:d0:91:d1:cb:85:29:22:ed:ae:af:
                    c6:59:db:5e:92:09:90:74:38:15:73:57:35:76:3c:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:48:2B:C2:52:59:EB:C1:72:D8:DE:99:EF:DF:A5:FA:EE:5F:F9:98
            X509v3 Authority Key Identifier:
                keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:c8:14:13:c4:af:6c:42:e7:20:a6:aa:5f:29:7d:e8:d3:
         d8:19:1c:e2:51:e9:d3:b4:69:19:62:69:b5:a1:e9:2d:76:f6:
         0e:48:11:25:17:6a:12:74:e1:55:72:40:e3:34:3c:3a:14:8a:
         4f:78:9f:69:9f:67:96:15:cb:56:df:7e:45:23:a0:3d:c6:e7:
         a4:be:25:26:ff:e2:a2:f4:2e:70:60:ab:3b:fd:3a:96:53:9d:
         2b:35:2d:04:63:2b:4d:ff:63:d0:36:ce:8e:3d:13:bb:31:91:
         75:9e:b0:7e:8c:c8:91:b6:14:3f:14:6b:1a:98:55:50:25:12:
         ab:06:aa:16:24:42:13:d7:0a:09:db:04:92:70:86:b5:1c:28:
         d4:65:1f:ec:73:31:42:dc:4e:0a:6b:c7:0b:09:53:31:ce:95:
         1a:04:aa:c9:f4:f4:d9:91:44:1f:66:58:c4:2f:5c:2e:34:42:
         72:02:f2:7b:46:70:53:99:09:7f:e9:a4:43:c9:10:79:e4:27:
         b1:21:55:1f:73:57:84:9f:e4:8f:7d:64:ac:6e:48:de:59:22:
         24:a0:3b:ea:43:60:ba:fd:18:ea:33:07:09:f8:55:2a:3e:46:
         31:fb:14:43:b1:2f:e5:df:b7:69:9a:d9:d2:16:12:c2:ba:72:
         d6:c5:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:17 2026 by rpki-client