Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File:                     0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier:          /nV5nfF8KzZpB3NqcBPwT31X18+9mS4iucg+VRcg3XU=
Subject key identifier:   AD:11:54:F5:D3:80:7E:6A:45:0E:55:4C:69:B2:99:8C:08:14:A4:59
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer:       /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial:       019CAA8FBA23A0EA332B0B0ECB12098B9345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 18:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:11 +0000
Files and hashes:         1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: TwVG+PUmL+5bYHgRuEHJsVpwKsaCuZX/wO7tq9MxUIA=)
                          2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:ba:23:a0:ea:33:2b:0b:0e:cb:12:09:8b:93:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
        Validity
            Not Before: Mar  1 18:01:11 2026 GMT
            Not After : Mar  2 18:01:11 2026 GMT
        Subject: CN=ad1154f5d3807e6a450e554c69b2998c0814a459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:48:a2:85:f5:94:0d:ea:e1:83:83:a5:52:
                    a3:7e:90:5c:52:cf:db:d2:27:fe:33:61:fd:c6:b6:
                    62:3e:95:79:85:b1:3b:08:d3:61:f7:37:ae:ca:0f:
                    6c:d3:ad:1f:c5:40:03:4a:3c:81:9d:eb:68:fc:c0:
                    e3:5a:59:58:0b:ac:2b:02:36:16:f2:08:a9:e3:2f:
                    70:f4:91:3a:dd:30:3f:54:25:f9:58:25:4f:68:3b:
                    24:de:1f:1c:35:1b:c0:d8:f1:e0:b8:65:04:d1:c6:
                    f9:8b:3e:56:4b:ae:2d:a1:06:cf:09:4b:ab:0b:4a:
                    fd:32:06:15:83:49:d6:5c:3e:9a:3e:a3:f8:17:45:
                    87:e3:b2:ab:7e:38:fd:b8:7f:cb:c7:18:35:37:b5:
                    a9:d5:19:9f:e7:44:f3:37:9a:be:13:a0:f7:52:f8:
                    b8:22:6e:14:b6:02:d5:ba:94:62:06:34:96:ff:bd:
                    ef:94:5f:41:16:4c:44:04:01:46:ec:9d:c5:73:6c:
                    72:71:a3:e6:b5:38:3b:5f:94:a8:6e:a0:6a:50:be:
                    7d:42:c5:71:44:40:40:d9:d2:d8:a7:91:e5:f7:e4:
                    6e:44:22:af:0f:52:24:75:e1:7b:cc:01:75:e2:7c:
                    bc:9e:85:89:d6:6c:b4:1e:45:e5:2e:12:b6:24:cb:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:11:54:F5:D3:80:7E:6A:45:0E:55:4C:69:B2:99:8C:08:14:A4:59
            X509v3 Authority Key Identifier:
                keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:1d:8f:a5:ad:f7:f7:c6:65:84:3c:4e:a9:23:d8:81:99:
         0b:f8:24:47:d9:fa:06:ee:57:02:f7:bb:fe:37:e8:2b:f1:c7:
         34:5b:26:f7:68:34:94:95:8a:e9:1b:ff:b0:e3:dc:ff:2b:6c:
         4c:02:66:81:50:44:77:a8:36:d6:30:05:4a:77:8f:51:6b:95:
         69:3d:73:42:83:8b:b5:34:a9:63:3e:1c:4a:25:cb:66:b5:e8:
         13:0a:a6:4f:55:e1:2f:eb:72:16:26:f5:7d:c3:7a:30:d5:36:
         14:f5:ea:29:c0:40:cb:8b:c8:3d:c9:af:6a:19:07:17:26:be:
         c0:4e:03:6e:44:90:d1:11:ab:c1:6a:41:4b:3b:1e:b3:56:37:
         bf:06:56:60:5b:27:da:a6:6c:19:77:47:65:9a:ab:f7:80:34:
         a4:1c:55:c9:c5:ea:b3:31:d8:8c:e3:ed:37:78:b0:b7:36:f1:
         24:62:4f:7e:59:93:c7:2e:32:7f:2b:85:46:10:68:58:a4:84:
         71:62:e1:dd:93:b3:c5:bf:f5:ed:d5:1c:89:de:07:c0:eb:47:
         2c:21:2d:5b:13:50:8e:38:84:69:9e:1e:61:bd:7e:a4:b9:38:
         db:3f:0a:e4:61:63:6e:5e:4b:43:a8:58:09:42:e0:9c:3b:58:
         de:69:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:00 2026 by rpki-client