Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          MSSakwPz6yVHFZ6i+vPdAxnOVDamOSD8Gnb5XaQvOlo=
Subject key identifier:   E7:AD:A6:B5:92:08:F7:C6:59:38:81:A2:7C:B5:8D:63:21:BB:87:3F
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       019CACEB4E3756847E5E86EF546FC7107762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          1853
Signing time:             Mon 02 Mar 2026 05:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:27 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: aGy79bq7o4X50//YIuYLbN0osfZH+kK/4CAzMxGaT7k=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:4e:37:56:84:7e:5e:86:ef:54:6f:c7:10:77:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Mar  2 05:00:27 2026 GMT
            Not After : Mar  3 05:00:27 2026 GMT
        Subject: CN=e7ada6b59208f7c6593881a27cb58d6321bb873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:ad:d5:5c:a4:68:e5:f3:a9:a5:a6:ec:c2:
                    67:da:5c:29:a3:df:6b:96:ea:f7:85:a3:6f:3f:5e:
                    d9:ce:36:8d:c6:72:97:9f:d0:59:84:e2:36:7a:fa:
                    3b:e1:d2:0c:7f:15:b5:0d:93:6d:53:4a:41:47:67:
                    8d:0e:88:ba:61:32:4e:4a:36:b9:f5:23:d4:69:50:
                    a1:b0:14:d3:03:b8:35:e9:e7:35:c6:0b:e6:6b:a8:
                    56:ea:a5:fb:95:02:69:75:31:03:12:9c:a1:94:a7:
                    38:5d:29:5f:49:3b:9a:f5:a3:46:9d:5d:7c:78:96:
                    02:2b:36:51:93:20:f0:90:28:ca:8f:27:54:4e:b8:
                    d6:5e:3b:21:0a:ac:aa:d3:a6:42:a7:08:38:9b:61:
                    c2:0c:84:3a:cd:3f:4a:5a:0e:85:9b:c0:18:ec:73:
                    8c:eb:bb:82:5c:6d:f3:15:37:51:d5:ff:d3:57:5e:
                    b7:1d:00:32:25:8e:c6:98:4c:16:74:ba:b4:34:73:
                    6a:16:84:e1:88:f8:9e:43:16:43:76:4d:26:3a:94:
                    b6:dc:88:d1:ba:a9:15:cf:80:91:6a:ef:c2:d4:4e:
                    4a:cf:0d:0d:39:ef:42:88:b6:00:29:01:22:4d:ee:
                    29:50:6b:24:c6:48:40:97:ba:1b:d0:24:75:6c:fd:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AD:A6:B5:92:08:F7:C6:59:38:81:A2:7C:B5:8D:63:21:BB:87:3F
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3f:c6:0b:f3:77:6d:fd:9a:26:40:0f:65:68:11:09:14:0b:
         1a:3b:8d:44:a7:1f:9e:f0:f7:83:ba:21:2e:6f:fc:09:aa:84:
         aa:fc:fe:48:56:7e:49:c5:0f:72:ec:c2:49:ea:1f:f3:12:54:
         e5:76:1d:f3:10:56:9d:72:a4:1f:b0:5d:46:88:6a:58:82:49:
         f7:9b:6d:e3:00:3a:f2:41:34:bf:68:ca:cd:d9:8c:65:a5:7c:
         08:35:be:98:ab:72:78:05:db:f6:d5:44:9e:71:9c:6c:3c:28:
         e9:cf:0b:90:28:54:fd:0b:f2:1a:17:a2:2d:c0:34:e4:0b:ee:
         04:73:0c:06:5c:eb:2f:9c:dd:77:61:0f:71:e3:02:81:77:a5:
         f3:b7:8b:a1:61:58:07:ea:da:ab:ce:97:26:2d:1c:d5:4e:23:
         fa:04:30:7e:8c:b4:26:dc:25:3a:da:c9:27:dc:eb:42:ed:9a:
         70:26:fa:d5:24:ca:5d:bf:b1:b9:0b:6e:e7:10:b2:b1:d7:35:
         21:a0:b0:56:fb:8f:a9:e5:d8:af:61:63:28:54:9e:00:ec:a2:
         59:dc:30:4c:8f:40:56:29:c3:82:76:ff:78:85:fb:0d:5e:44:
         13:26:8a:1c:b2:fe:a9:ee:74:db:03:84:a5:eb:06:99:cc:c3:
         64:5f:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:20 2026 by rpki-client