Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File:                     l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier:          NtnBxMlv9WvrGkvAJOmZSIvi6bRDS061nLukGLJx6fs=
Subject key identifier:   46:88:A8:55:15:D1:EC:11:AB:60:85:33:D2:33:DA:5D:8C:FD:CA:B1
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer:       /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial:       019CA946092C18F03F8F2ABCF2AF9CDD7953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number:          1844
Signing time:             Sun 01 Mar 2026 12:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:05 +0000
Files and hashes:         1: jWXMDv13AWDAzHmG3AwphA0uU3I.roa (hash: gbSC++TyPC7wR0U95OM82la8DG8eXm7v1JK7SFOBZRE=)
                          2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: SJBfMuHocSdckbTAdg+MjekQm1i2AvVbpZ9bofudiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:09:2c:18:f0:3f:8f:2a:bc:f2:af:9c:dd:79:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
        Validity
            Not Before: Mar  1 12:01:05 2026 GMT
            Not After : Mar  2 12:01:05 2026 GMT
        Subject: CN=4688a85515d1ec11ab608533d233da5d8cfdcab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:f7:46:eb:1e:f1:5a:b0:c1:68:c8:a8:17:
                    76:6f:7e:af:b9:a9:28:43:f7:db:84:e4:b4:ae:f5:
                    5e:c6:18:1c:a4:66:37:7a:7b:25:b7:c7:d2:42:f7:
                    5c:40:53:f5:91:59:c8:87:43:15:ba:cc:6d:e1:13:
                    5c:10:65:81:37:5b:03:a5:e3:ac:cb:7d:c0:de:52:
                    74:c8:24:cd:cb:32:f7:9f:d1:08:b0:af:10:fe:3c:
                    96:d1:c8:3f:8c:b2:2f:5a:52:02:30:be:56:d8:7c:
                    3a:e5:1d:61:59:72:af:50:5e:dd:dd:fb:da:fb:20:
                    50:7f:0a:55:e6:07:7c:98:d6:1b:de:a0:28:44:3c:
                    18:59:24:e0:e8:2a:e0:2a:f4:c8:aa:f8:a9:90:69:
                    40:a0:ba:f1:89:45:f2:2f:b9:1b:1a:1c:d8:9a:7e:
                    a9:65:7b:8d:74:02:60:f2:db:77:ab:06:af:9e:b0:
                    4c:1f:08:c5:0b:a0:74:89:30:2f:79:70:4d:a4:ba:
                    ed:1b:a9:e5:e9:d9:fe:a2:fe:8c:83:4b:8e:be:88:
                    e1:b9:d5:34:e7:e2:3d:3d:62:4e:44:b7:2f:5e:14:
                    1f:04:cf:29:ea:42:39:d6:3e:69:eb:f7:a2:df:63:
                    7b:70:bf:c8:5f:7c:ff:90:d7:1a:bd:f0:7d:d8:2e:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:88:A8:55:15:D1:EC:11:AB:60:85:33:D2:33:DA:5D:8C:FD:CA:B1
            X509v3 Authority Key Identifier:
                keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:71:b9:2c:08:0d:e4:ea:d1:55:cd:55:61:0e:8f:2c:0c:f9:
         d3:0a:45:3c:1d:c0:6f:a6:86:a8:26:ad:bc:87:69:81:51:24:
         7a:37:47:a6:55:10:34:d3:c6:f7:10:ee:56:c5:f7:39:32:28:
         50:96:95:7a:47:e1:12:e0:0d:e2:e6:cc:ec:39:0a:2a:78:6d:
         fd:64:2b:1d:d8:76:1f:bb:fd:f6:dc:de:8c:b4:55:b2:0a:71:
         c2:17:71:8f:f1:f3:a3:ab:d6:0a:3f:fe:29:67:ca:87:8f:e7:
         32:49:0c:5a:30:2b:5f:fe:59:cb:d5:f0:00:77:24:3f:1b:fa:
         33:c2:2d:9a:38:fb:b7:98:33:3d:d4:32:24:42:9f:90:4e:18:
         6a:56:33:57:09:64:45:93:20:30:1b:85:3c:20:13:ea:82:6d:
         50:c8:a0:d1:55:74:ff:a1:c3:b4:a2:a5:2f:60:28:64:31:37:
         a5:30:82:d2:88:8f:6e:5d:6e:e2:ab:0b:85:61:f0:97:48:3f:
         a9:3f:3f:33:08:b4:b3:9a:81:1f:92:7d:1d:31:1f:9e:a0:83:
         ad:3e:a4:82:b2:d2:85:09:58:61:1f:ba:1f:c3:67:74:4a:9c:
         2f:db:44:19:f8:45:02:3d:a3:a7:e8:22:8b:88:cd:82:fd:31:
         e1:93:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:46 2026 by rpki-client