Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          7hxplVRMxO8nNmbNYKPMtfhjonjAQ/FKxJjYODI+kkk=
Subject key identifier:   CE:E8:40:D3:2D:20:93:29:B0:49:3B:3E:5A:DB:DA:4E:36:2C:D7:C7
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       019CABD9B8BD960A62EB9AA018CF8C44BB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 00:01:38 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:38 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:38 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: IKQu30/PZzN6BUTDw9PlKs/NBX3NEJsOHDZTpn9rUxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:b8:bd:96:0a:62:eb:9a:a0:18:cf:8c:44:bb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: Mar  2 00:01:38 2026 GMT
            Not After : Mar  3 00:01:38 2026 GMT
        Subject: CN=cee840d32d209329b0493b3e5adbda4e362cd7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:6c:1e:37:36:e6:26:d5:be:f2:e2:f7:95:
                    b6:d6:47:6b:1c:be:bc:a9:b5:85:92:e3:3a:8c:66:
                    86:8d:75:f9:14:00:57:d6:e7:9f:fc:68:a1:b6:38:
                    7b:d1:55:69:4f:1e:65:78:83:44:e6:db:03:68:19:
                    e6:60:5c:01:3e:b8:fa:ea:09:3a:e1:69:41:77:62:
                    d7:02:b3:67:97:80:5c:1b:00:38:4b:18:c5:7a:02:
                    d2:d7:92:05:4b:8a:ac:cf:0f:33:5f:80:c5:e8:f8:
                    2a:91:d6:8e:70:4c:f9:ca:d1:6d:8e:00:1d:2c:57:
                    03:28:cf:c1:60:26:60:2f:69:d1:2c:a4:38:88:dc:
                    a1:fe:8c:b4:ca:e4:36:fb:32:4d:8a:25:fc:9e:8e:
                    12:fe:aa:07:dc:8c:63:54:de:c1:4c:22:8e:46:fa:
                    d8:a6:ba:de:11:7b:f6:0c:6e:35:58:af:8c:28:28:
                    ee:4c:8f:c6:74:75:72:b3:4b:ee:ce:6d:eb:d0:f7:
                    ef:3e:a0:61:6b:53:51:d4:b1:c8:61:1a:b7:34:e9:
                    c5:e1:6c:39:7b:ea:41:69:24:c6:90:d2:cb:f0:c3:
                    09:18:bf:0e:a0:38:18:1a:1d:0a:ec:90:da:3a:08:
                    03:d5:9c:17:68:49:68:a1:31:35:f6:bb:fc:9d:6d:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:40:D3:2D:20:93:29:B0:49:3B:3E:5A:DB:DA:4E:36:2C:D7:C7
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:15:ab:aa:42:93:42:e4:6d:21:72:df:6b:35:bf:f3:7d:42:
         86:5c:41:69:6d:e7:92:16:e2:4c:14:76:0c:73:9d:f6:b0:a5:
         c8:b8:38:ed:cc:f1:79:72:c3:00:69:4d:e4:30:4a:af:53:70:
         30:2e:65:6e:6c:64:31:a1:89:d5:d5:9e:74:86:9a:50:7d:11:
         cd:4a:ca:72:3d:21:6e:5e:58:4f:2c:02:9b:e4:5a:24:a2:2f:
         6c:bf:1d:b8:ae:47:d6:85:92:ce:25:6d:d3:20:c0:67:69:53:
         e1:9a:e2:47:24:31:98:17:58:91:c4:6b:33:c7:d0:91:02:51:
         b4:2a:57:73:7f:e3:45:61:14:f2:22:28:06:b3:da:7c:ec:4f:
         48:5c:2f:d4:69:16:ac:5d:24:2f:8e:d9:69:e3:a0:c9:43:53:
         3d:b6:7d:c1:cc:a0:0b:e8:23:c6:70:82:6a:1b:03:e7:54:cc:
         b5:bb:c1:b2:4f:bd:32:df:19:c9:83:34:01:d9:81:53:cf:82:
         7f:23:06:fa:f6:8d:03:d2:d9:3f:49:ce:ce:cc:21:46:0b:64:
         25:18:f1:02:e7:00:6d:ab:a5:6e:13:63:dd:0f:61:6d:e0:dc:
         68:ab:7f:7b:51:a6:4c:4d:5c:e8:ec:d7:5a:c9:39:f3:c9:13:
         15:9e:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:39 2026 by rpki-client