Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File:                     _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier:          UBbv+v4QnV2ey5oBV1Tx6BrwZ3tbizEjDCx4MEbb+Kc=
Subject key identifier:   E2:9A:E6:EC:A2:EB:95:B9:80:5B:C8:27:95:92:F1:DD:AF:88:AF:B9
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer:       /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial:       019CAA8F8E10731DFA1C97216D3781EBDA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number:          1570
Signing time:             Sun 01 Mar 2026 18:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:00 +0000
Files and hashes:         1: V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa (hash: tm/NB5wzRW6Hwa1rWNFA/fkC7eMyH/xDfSrejkXoTro=)
                          2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: j71RTe+z/AwvJiv3yNj5WH+2TZT3obkmF8qcXUHiHv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:8e:10:73:1d:fa:1c:97:21:6d:37:81:eb:da:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
        Validity
            Not Before: Mar  1 18:01:00 2026 GMT
            Not After : Mar  2 18:01:00 2026 GMT
        Subject: CN=e29ae6eca2eb95b9805bc8279592f1ddaf88afb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:31:e3:77:09:c9:28:24:1e:27:84:04:13:
                    a4:25:5c:d6:24:61:c7:92:4d:e2:f3:a9:b9:32:b5:
                    52:80:f7:11:65:69:24:5a:18:1c:51:c4:7b:72:dd:
                    0d:4c:7b:d9:65:d1:ef:d8:a1:ff:e0:64:2e:21:0a:
                    56:64:20:f9:5b:3a:af:2a:47:3d:ab:ce:12:cc:98:
                    0a:2d:da:58:f3:6d:c8:5e:c8:e6:29:a6:24:e4:97:
                    e5:7b:ee:2d:9d:38:e6:0e:5f:ea:8e:b4:ba:86:e6:
                    1d:8a:3d:d4:fe:27:d5:82:f3:4a:30:61:ef:45:ae:
                    fa:51:9b:20:27:45:f5:36:93:a2:16:12:33:ed:8c:
                    9b:88:5f:10:77:7e:7e:19:42:f9:cb:58:5b:3e:39:
                    dd:dc:50:20:94:3c:2c:ae:1c:4b:b0:09:ea:ba:58:
                    87:34:f4:de:2c:a4:17:6d:bb:00:a2:b3:9a:9c:9b:
                    99:d3:1d:f2:8a:16:34:e2:66:db:7c:98:5f:2e:df:
                    7c:9e:37:cd:20:43:28:a5:8d:41:1a:8c:c8:2f:e4:
                    0c:ee:57:f0:ef:95:5d:c5:96:b1:b6:96:67:6b:95:
                    7d:78:5f:86:4b:57:ec:33:59:8d:45:d8:a9:76:ad:
                    1c:ec:1c:8e:8c:72:a0:42:2e:6f:62:11:c2:bd:e9:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:E6:EC:A2:EB:95:B9:80:5B:C8:27:95:92:F1:DD:AF:88:AF:B9
            X509v3 Authority Key Identifier:
                keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:97:b8:de:5e:a7:e8:5f:a4:bc:f7:90:39:e0:8b:3d:67:59:
         90:27:aa:85:9d:97:78:e4:1a:e8:63:f0:1b:34:bc:17:8b:ed:
         1b:b0:ae:4b:b6:61:a9:0c:36:f1:d3:3f:9a:57:00:82:d2:36:
         d8:9c:4b:58:17:51:5a:75:37:15:ef:23:ab:20:aa:d6:c6:eb:
         db:f2:fb:f1:40:ff:17:44:76:b3:d9:2a:e3:7d:84:3f:06:51:
         0d:8e:b4:27:bf:43:f3:49:99:06:e7:c8:3d:a2:64:68:4d:fe:
         43:b7:bb:78:4e:3a:79:54:38:a5:45:c7:b8:84:9c:57:76:4a:
         c0:27:b7:ba:ec:99:e5:18:96:61:cb:77:74:77:a0:25:68:16:
         a9:ca:85:f6:2d:fe:d7:07:9a:61:99:77:e4:3c:0e:3c:e8:45:
         13:02:a4:d0:8e:ca:ea:1b:7c:65:2e:69:ba:a7:c0:3a:78:9f:
         3e:46:ee:44:3f:0e:72:b6:a5:70:69:af:60:4b:32:1f:95:f5:
         b9:91:49:d1:34:ce:17:4d:c8:f3:16:7c:60:b8:cc:2f:86:69:
         30:78:c4:18:09:18:f5:36:e2:b1:95:21:db:b0:9f:59:25:33:
         d0:85:64:97:eb:61:a6:11:9a:a8:0e:60:c3:94:88:d1:17:91:
         db:4b:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:09 2026 by rpki-client