Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          AvY0xWmKK74dDarcWnWMdeNMQu6asDR7qkbYWU6Upfk=
Subject key identifier:   E7:8D:B1:89:DF:E9:5C:CF:AA:7A:DF:1C:62:02:FC:8C:33:4E:2F:63
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       019CAA5871798ADC65F7E78FEFA71EF570EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 17:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:48 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: R7FqTEasVyUfK61qpQsiX2cb3m00KEzqn1qVPud9xy4=)
                          2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:71:79:8a:dc:65:f7:e7:8f:ef:a7:1e:f5:70:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Mar  1 17:00:48 2026 GMT
            Not After : Mar  2 17:00:48 2026 GMT
        Subject: CN=e78db189dfe95ccfaa7adf1c6202fc8c334e2f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:39:20:5f:a6:31:24:dd:40:44:a5:90:73:
                    e7:f6:72:3d:79:a4:d2:74:ce:16:70:e8:f4:33:5c:
                    4b:8d:cf:1d:62:0a:10:d3:ea:24:1d:a7:36:e5:62:
                    13:c0:a3:be:0e:87:de:55:e8:21:b9:2c:5e:85:68:
                    59:58:7b:96:e5:df:40:6a:81:ce:04:03:c4:db:6e:
                    8b:58:f0:d6:d8:16:e5:c6:6c:6d:87:c1:4e:90:e2:
                    60:67:94:ff:e9:9d:69:e8:d0:7f:21:bb:c4:2c:ab:
                    ea:03:80:b0:42:88:f9:1c:60:fe:e1:ec:bd:bd:7e:
                    7b:78:e6:50:1f:89:dd:0c:c1:da:05:88:03:ba:39:
                    e9:2c:4d:8f:0c:9c:03:f8:a0:51:85:23:fe:ae:61:
                    ae:c2:46:b5:82:c5:1c:29:ec:13:c5:7a:66:de:1d:
                    56:e8:78:22:be:30:c1:18:c5:13:11:d8:14:3c:cd:
                    ba:12:78:f7:5f:6c:9a:73:dc:68:08:b5:de:91:08:
                    ef:a4:53:63:f4:bf:9d:7d:1c:fc:f5:8d:75:38:d6:
                    20:7b:bb:79:ca:a9:ec:1e:d5:3e:62:47:48:11:5a:
                    6d:02:72:3f:63:34:ea:cf:14:12:54:c2:8c:ca:f4:
                    f6:ff:27:ea:cb:5e:3b:2b:ab:86:00:49:63:6e:a7:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:B1:89:DF:E9:5C:CF:AA:7A:DF:1C:62:02:FC:8C:33:4E:2F:63
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:77:c1:be:0d:f1:e6:f3:bc:1f:eb:2a:35:8c:c1:63:a0:ac:
         53:0b:55:52:05:7d:41:f4:63:e4:38:0b:3f:99:bb:6a:6e:0f:
         da:8c:c9:92:2b:15:4e:e7:84:62:d5:e2:2c:d8:f3:33:40:11:
         db:d0:2f:d7:d3:3a:56:0f:1d:15:d0:d0:6a:06:7e:f7:cd:39:
         41:d1:c5:8f:ec:02:6d:6b:77:d7:a2:05:09:53:64:e4:3b:30:
         39:a8:bc:35:59:59:70:02:ff:d3:24:f1:d5:af:78:0d:82:d3:
         0e:95:38:6a:2e:9a:0e:11:78:17:f3:8c:08:a9:46:72:2b:1e:
         c1:50:c9:e5:93:7b:54:b3:08:6c:83:62:50:c3:ed:a1:20:67:
         95:91:e9:0f:5e:71:5e:24:c1:fd:dd:79:32:b4:c3:c3:07:18:
         90:cc:59:04:a1:9f:af:32:cc:04:b7:05:c5:b7:f5:65:4c:93:
         c0:b2:42:4d:c1:8d:fd:32:e7:99:d5:70:dc:05:08:3b:bf:67:
         b8:9c:4d:29:d2:cf:d9:54:28:82:92:71:7e:66:44:f4:9f:6e:
         5d:5c:6b:82:9f:85:db:9e:94:9c:c8:98:71:7e:35:6f:77:d0:
         72:24:85:c1:03:0f:fe:37:f2:85:8c:47:c1:2d:26:65:e9:e6:
         d3:e6:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:43 2026 by rpki-client