Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File:                     N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier:          3qKD5ByMZxIOwNJ36QeyqcTwLkY2O5LuIZhji0wnFVU=
Subject key identifier:   36:6A:E2:D2:1E:17:75:F6:27:C7:19:29:94:9B:AE:D7:44:8A:94:FE
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer:       /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial:       019CAAC64F1A2F4470AB6DA3EEBE9BF90FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 19:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:48 +0000
Files and hashes:         1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: OsGwxcKdxOjesuHBJC73q1SCaR7tU1OiSdWYj6EABcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:4f:1a:2f:44:70:ab:6d:a3:ee:be:9b:f9:0f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
        Validity
            Not Before: Mar  1 19:00:48 2026 GMT
            Not After : Mar  2 19:00:48 2026 GMT
        Subject: CN=366ae2d21e1775f627c71929949baed7448a94fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:1e:f4:84:90:e7:f4:be:4f:c8:14:bc:52:
                    5c:0e:71:bb:3f:93:2f:34:b7:c6:7e:39:12:a9:f1:
                    94:d6:51:16:b1:dd:3b:f6:27:84:35:2e:0f:3f:ec:
                    96:82:c0:c1:27:5b:73:74:6d:6f:86:29:ed:a5:be:
                    8b:b5:df:ad:3f:ee:33:ff:c9:37:8c:07:c0:64:88:
                    6f:11:3a:14:14:91:5f:4f:b8:4e:a8:26:3f:b1:31:
                    86:03:4d:57:b1:7e:e9:e4:e1:6e:d0:dd:ab:cc:12:
                    e3:15:49:89:e5:4b:db:f9:c4:80:9a:da:20:ee:85:
                    b1:e8:93:ca:06:1c:48:62:f2:48:3f:24:68:d5:bc:
                    eb:cd:92:6a:a6:a0:29:e6:83:24:63:91:bd:b4:b3:
                    eb:ae:b9:66:3d:7b:72:5b:03:2d:07:6b:4c:8a:0e:
                    40:6e:f9:5e:25:21:d6:cb:bd:18:4c:73:84:9d:65:
                    98:6e:01:bb:47:27:62:dc:3f:8f:bd:ab:cd:ea:2a:
                    bc:65:88:2a:12:13:be:64:25:d6:05:36:c3:86:1a:
                    96:b5:cd:cd:70:df:37:c5:0e:ea:c4:6a:c3:c8:e0:
                    9f:21:ac:7c:4b:d1:d6:f4:9b:32:ae:1f:76:fc:ea:
                    48:36:bd:8d:e7:dc:1d:02:d8:1f:63:6b:a2:6d:cf:
                    c7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6A:E2:D2:1E:17:75:F6:27:C7:19:29:94:9B:AE:D7:44:8A:94:FE
            X509v3 Authority Key Identifier:
                keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:7a:1c:a4:a4:9f:46:94:0e:c6:39:c9:bd:23:b5:e3:d1:
         35:43:59:dc:33:81:a2:6e:b9:ef:e5:a4:19:37:8c:35:91:46:
         4d:2e:c3:e2:44:cc:fb:a5:16:13:9d:bb:2c:ff:56:82:63:31:
         e8:7d:29:26:47:8b:b3:03:59:90:e2:e8:51:01:52:9b:c0:e8:
         d6:a0:e4:37:fd:02:ea:4b:7d:f7:54:3c:35:08:b7:9d:d2:11:
         ce:ca:18:87:96:ba:21:4c:0a:a9:3c:c0:fa:51:dc:fe:d7:a1:
         18:c4:93:30:3a:c1:67:02:51:ed:2f:ba:0e:83:a2:49:53:cf:
         3d:7b:33:47:b3:41:cb:3a:03:2e:4b:ea:a7:8f:02:30:87:e0:
         17:66:0a:60:17:9b:eb:31:ac:d2:69:97:49:c7:e8:12:05:c6:
         b8:83:00:45:b5:68:df:2b:b9:8b:aa:d0:d5:cb:88:c2:71:d0:
         41:f1:0c:80:ad:6c:78:86:84:ae:ca:5a:c9:00:63:c6:95:05:
         e4:1d:49:41:96:bb:89:89:44:ca:cb:49:13:a8:82:15:74:a5:
         8d:98:5a:b1:64:ea:27:7e:15:7b:74:c5:fb:bc:e5:38:f0:df:
         08:6d:be:8e:df:32:87:21:a5:00:71:cb:07:e5:94:8e:4b:7d:
         66:be:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:17 2026 by rpki-client