Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
File:                     HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json)
Hash identifier:          ZqX6iqB8t6ssyVhv4225sHde7pyVYzj9Uvs/JugrVu0=
Subject key identifier:   7B:41:EE:D8:64:C7:DB:F7:28:44:B6:86:1F:8A:11:60:8E:5F:7C:60
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       019CADC7B6A35A9F9B656F23AB9F8A30C4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
Manifest number:          1850
Signing time:             Mon 02 Mar 2026 09:01:12 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:12 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:12 +0000
Files and hashes:         1: 1XzbCZ6yY8fKoxvI53eQ_YxAoE8.roa (hash: 2cHGvx3rw1zFTiwFmSKRPxp+Yh74QRl9au/Y2339KsI=)
                          2: Eb64F3v1oYAj-E_RQC6TCD6A0Qo.roa (hash: 5S7unqujHWRwDHCe4gkQrhEC290D97kkFboUxzuHNTk=)
                          3: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: 8hp+se0vewUp4KrLvf9pxF7U4dGU/5bBqOkuzn7HtzI=)
                          4: I5oIKyc-Nnsg2P5sBEZFMHv808I.roa (hash: A5np8yhL8kgzony1w/u2xXkkcbdyP8sEVHMrTdXVIdE=)
                          5: W__alkBuZRj8gzkXd-vzfVbHK2Q.roa (hash: 0kBZjg6sW5SXO3x1fTOof+1+5GjGHO22pAAtjoqsY2Q=)
                          6: cPf8LTmHuQNpFCebW57DX4X7lVg.roa (hash: EC/kmKIvEJeWcU36Llbivi0e5yeWXS5Hz9Nq+HvVB00=)
                          7: hmZ1mxVrzqjqx_1iP5op4hU25Ho.roa (hash: pfSMpgk/ODrUlGox+4Mj+0AxVVPVgzj1yETRt0uvYPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:b6:a3:5a:9f:9b:65:6f:23:ab:9f:8a:30:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Mar  2 09:01:12 2026 GMT
            Not After : Mar  3 09:01:12 2026 GMT
        Subject: CN=7b41eed864c7dbf72844b6861f8a11608e5f7c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:52:78:1c:d2:9c:7b:14:54:a6:89:92:a0:
                    8d:8b:99:23:cb:20:65:aa:f7:c0:e8:64:01:50:dd:
                    ac:f3:aa:e6:8b:f4:d1:82:02:e4:81:aa:94:97:a1:
                    b2:3a:d8:ff:9a:d9:8a:a1:4a:55:66:6f:04:fb:b7:
                    22:c7:37:b2:0d:a3:27:85:6d:61:fe:60:81:ea:fd:
                    ec:42:be:b9:64:5c:fa:78:21:70:d9:e4:05:b9:e7:
                    a1:1e:40:50:0a:10:58:75:d3:d5:be:d0:93:1f:18:
                    07:d5:07:0d:65:04:82:aa:55:56:d0:59:98:44:b1:
                    cd:68:ab:66:b4:fc:65:dd:ef:e5:5b:2b:a7:b4:51:
                    96:99:5d:56:30:b2:09:37:c8:05:bb:a3:fb:f4:c2:
                    07:ce:0b:43:5a:bc:e4:2a:39:35:99:d7:c0:99:5f:
                    a7:9d:95:31:08:dc:8a:56:c6:e0:62:83:f9:5d:40:
                    0c:1b:a6:49:d7:f8:41:1d:45:54:66:1d:b5:8a:41:
                    70:b4:59:7d:dc:4a:40:84:4c:be:cb:61:30:29:26:
                    26:26:79:82:0f:39:cc:1a:14:e8:df:73:86:47:3c:
                    46:80:75:d7:fe:d7:37:cf:a4:bc:6c:4a:ac:04:e0:
                    3a:57:6c:68:0f:03:09:78:16:af:ef:2e:43:ca:aa:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:41:EE:D8:64:C7:DB:F7:28:44:B6:86:1F:8A:11:60:8E:5F:7C:60
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:46:93:e0:b2:c2:d2:e1:9f:2d:ba:74:05:59:b2:d1:55:
         e9:27:7a:39:b9:df:8d:c3:17:b9:18:9b:db:38:90:0a:3a:7f:
         96:61:1a:c5:6f:68:d8:c0:2d:4b:1f:f0:4a:8f:e9:7c:b7:e1:
         d2:3b:2b:63:fe:c2:e9:18:6f:09:48:e4:3e:79:15:ae:ce:75:
         9c:75:aa:45:12:87:79:20:0d:77:b3:82:9b:00:e1:1c:31:cd:
         e1:e4:db:ce:09:71:ad:d6:be:b6:48:d3:dd:05:e6:68:49:6b:
         93:e5:ac:fc:c9:1e:ea:12:d5:20:8b:da:2b:c8:18:84:91:00:
         55:67:d2:89:45:e6:44:0f:41:95:48:f4:e7:f5:1f:ed:ef:ee:
         ea:c5:66:37:d2:5d:49:af:65:7e:d3:81:74:e4:cd:06:71:2f:
         bd:d8:fb:4f:7d:98:1f:d5:f0:a4:7d:60:41:82:02:2c:63:40:
         f2:e6:d5:80:85:0c:cb:6d:58:d6:90:2b:70:c7:54:01:fa:e5:
         b7:ee:d8:8a:07:69:de:3b:f4:59:be:b1:97:0b:7b:cb:30:c3:
         82:96:04:25:30:47:8f:52:a9:e0:52:4c:ac:2a:2f:23:c4:de:
         9d:59:1e:50:15:40:7e:85:0a:12:e0:4e:3c:aa:dd:9c:e0:84:
         ad:ee:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:57 2026 by rpki-client