Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File:                     sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier:          ueCqhl9NeUwPHZsLxFUpv1OrBnZFwWetONKNK/qav34=
Subject key identifier:   B4:76:91:91:47:D4:7D:55:6F:2B:8F:C5:3A:28:33:87:43:CF:1E:D4
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer:       /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial:       019CAC4695FFB5237AE3281060AF3DDD0E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number:          0D02
Signing time:             Mon 02 Mar 2026 02:00:32 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:32 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:32 +0000
Files and hashes:         1: MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa (hash: 4Sap9NoQcaB7qcwGKxc8FZ4d2698TBnl8zwNLDBPALw=)
                          2: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: KCi6bqwxHNnrz/volXeyrQhT6dLZTbBNM/Hzo/AvV7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:95:ff:b5:23:7a:e3:28:10:60:af:3d:dd:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
        Validity
            Not Before: Mar  2 02:00:32 2026 GMT
            Not After : Mar  3 02:00:32 2026 GMT
        Subject: CN=b476919147d47d556f2b8fc53a28338743cf1ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:94:9b:4b:3a:32:e4:51:ae:08:51:e4:0f:
                    93:ac:85:9c:07:03:30:81:61:42:40:65:63:f0:13:
                    71:36:36:d1:31:36:df:a6:f5:cb:d7:f7:51:52:78:
                    23:53:2e:b7:1e:3c:75:ed:fa:84:b4:41:bb:73:42:
                    5d:9a:c9:04:0f:fe:df:ef:a4:6f:6f:d4:5e:e5:4c:
                    8c:07:cc:bb:b6:0c:b3:c4:30:33:d0:aa:6d:e8:8d:
                    21:85:a5:a8:e0:81:c3:ee:ae:7a:ad:50:76:e4:a9:
                    3e:64:43:23:23:72:80:d5:4f:9e:cb:d5:88:d3:ab:
                    8b:32:bd:f7:6f:63:af:5e:35:02:47:a2:15:b2:71:
                    da:92:1e:f4:46:d0:39:65:74:53:16:1b:cf:69:87:
                    9e:3f:70:d6:f0:4b:a6:18:9f:99:82:57:e6:30:1c:
                    11:cc:f1:3a:af:d8:36:a5:1d:c3:5f:c3:2f:f8:87:
                    f6:d1:79:6d:28:e4:73:71:33:72:0b:b1:c7:d6:13:
                    57:46:e0:c6:10:56:38:cd:c6:dd:84:08:16:92:0f:
                    6b:f7:86:92:8a:15:13:2e:23:c4:d1:96:5d:c1:84:
                    ab:72:8c:16:a0:1e:52:13:49:09:89:49:d1:4f:55:
                    37:fd:3d:f8:fc:d1:3b:78:c9:fb:d7:6b:f8:c0:f8:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:91:91:47:D4:7D:55:6F:2B:8F:C5:3A:28:33:87:43:CF:1E:D4
            X509v3 Authority Key Identifier:
                keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:e2:ad:65:43:8d:08:4b:4f:b6:c1:85:48:69:03:40:a6:
         d0:08:d3:25:f4:a4:b1:99:1f:74:77:2a:45:88:45:e4:8d:91:
         ef:3c:7c:ad:a6:37:d1:80:c2:9e:c7:ea:08:d4:52:e1:69:e7:
         0d:5e:c8:49:0a:80:6a:b1:1c:bd:bf:9b:01:86:09:a8:91:f3:
         a6:71:c6:21:6f:d8:d2:a7:b9:6e:bd:9a:d8:2f:f3:e6:96:5f:
         f2:45:c7:d0:b2:05:b2:c6:55:5f:db:47:51:4b:9d:02:8a:3a:
         5e:96:78:b7:e0:0e:3e:99:71:b4:80:37:02:4c:bf:2c:1d:16:
         4e:4b:ff:52:e5:f3:2e:7b:c4:78:db:0c:0a:fb:b8:62:26:4a:
         35:f5:09:b0:b6:a2:6b:a9:8f:22:43:e0:32:cc:74:43:8a:76:
         78:4a:fa:5c:78:78:f0:44:76:01:d6:99:04:7e:ca:48:47:d8:
         f8:3a:50:ef:aa:e8:20:a4:0d:c5:f7:ff:89:58:46:14:22:7b:
         37:2f:3e:74:99:86:fa:75:6c:d7:5e:fd:65:9d:61:b0:bb:59:
         a4:4f:9a:e2:e8:17:d3:5c:28:f7:48:5c:79:c0:3d:81:29:b7:
         2f:ac:99:57:03:da:32:0d:53:fe:f9:3f:24:db:bc:b3:4f:9a:
         95:5a:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:21:52 2026 by rpki-client