Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File:                     gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier:          4WOtEdjbGzPbEU7UvbyQIjXvc4fwRm+MhyQGigdUOAM=
Subject key identifier:   75:0E:80:CC:53:39:1C:B3:EB:F8:40:70:25:D6:39:2C:BA:42:80:DE
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer:       /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial:       019CAAC6537F9D3F47756394300ED876994B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 19:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:50 +0000
Files and hashes:         1: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (hash: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg=)
                          2: FcCot_n8byTOtYnTcT9gqTdXqgI.roa (hash: W7M2MGUSVVgsXq7kupYfdmxLZ/fDswJFwIWF+JWAWi0=)
                          3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: yBvYbc0iF8AwzVdIrgV87DUuJf3oiqAXcHlHys/UBZU=)
                          4: i3hqrGmzLv-adlovTZFEhAYhrt8.roa (hash: YEHlqYbfyAyYFOXiBY45uPwANx9Oj4hq3HmMe/UJ6jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:53:7f:9d:3f:47:75:63:94:30:0e:d8:76:99:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
        Validity
            Not Before: Mar  1 19:00:50 2026 GMT
            Not After : Mar  2 19:00:50 2026 GMT
        Subject: CN=750e80cc53391cb3ebf8407025d6392cba4280de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:8e:15:8e:f2:3a:85:11:4d:cb:07:07:35:
                    4b:11:97:51:96:ae:24:3c:cf:4d:9f:9e:3d:54:5e:
                    25:af:89:70:d0:08:d1:a2:52:39:11:b5:19:bf:9e:
                    65:5b:63:2b:5d:7a:8c:b6:95:c3:e7:96:9a:07:75:
                    c4:85:d4:06:cd:48:09:e4:49:e6:50:80:a1:26:86:
                    59:1d:14:b2:d4:af:9d:a5:dd:ad:77:55:4a:ea:f9:
                    c3:f0:d9:0f:99:54:94:5c:23:2f:9e:fa:7f:82:d3:
                    5b:84:f4:cd:5e:d4:86:35:8a:7b:18:14:e4:ee:f9:
                    be:6b:55:e6:34:1d:b6:61:61:2a:67:ba:f1:3f:17:
                    5b:eb:ef:62:f2:7b:bf:4c:e2:af:b2:92:d7:2f:ad:
                    52:68:9c:56:07:f3:7f:07:84:5f:5e:9d:f1:8c:61:
                    55:72:f2:2f:96:88:cc:0d:be:dc:ab:55:15:50:56:
                    5f:11:4b:ab:d0:ae:60:cf:91:ce:73:6f:c8:a9:83:
                    c4:78:0c:61:d3:60:b6:9c:dd:b3:20:d1:93:21:dd:
                    d2:95:46:6d:b1:c8:e5:00:d7:51:6f:c6:4b:93:85:
                    97:7b:a0:36:d0:64:a8:6d:bb:bd:ae:9f:8f:57:c1:
                    f8:c0:c1:8c:11:63:e4:cb:0d:38:22:a3:be:49:9c:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:80:CC:53:39:1C:B3:EB:F8:40:70:25:D6:39:2C:BA:42:80:DE
            X509v3 Authority Key Identifier:
                keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9f:62:20:11:e7:bd:2c:ce:92:17:b0:b5:9c:f3:c5:a2:90:
         d3:cc:15:3d:5b:3c:04:24:47:0b:70:8f:9a:46:88:66:f0:50:
         91:b3:e1:15:a8:0d:0c:b3:29:7f:ce:d3:5f:30:42:b1:fa:a3:
         8f:48:87:5b:22:a1:1f:4d:46:fc:ca:60:56:00:b3:81:66:8b:
         89:1e:44:b1:82:88:c9:9d:9f:26:45:cc:36:ad:cc:8c:d8:67:
         bf:54:a3:5c:dd:2d:dc:66:bc:2c:b1:47:5a:54:ef:f3:ce:1d:
         88:95:16:2e:e2:cf:fe:ad:44:3f:7e:bb:57:97:69:24:f8:0d:
         22:ed:f3:61:16:22:bc:17:17:79:bd:78:87:ff:6e:2d:61:46:
         48:08:97:51:de:0b:c7:6d:4c:4e:02:2f:67:78:2e:af:94:d4:
         ac:0b:0f:ea:25:75:4c:08:cf:85:06:6d:98:e5:19:58:4c:b1:
         f6:50:1d:ce:51:e9:f3:08:f3:86:d3:41:85:d1:19:0e:23:97:
         ab:50:1e:8d:12:7c:a1:0d:b0:b6:3f:2a:74:46:82:46:8e:a8:
         d6:aa:9b:a2:91:43:10:31:cd:85:89:2d:0f:f9:f7:dd:84:ff:
         f1:49:9a:cc:21:3e:d6:dc:9b:10:80:d5:da:32:8c:0e:cb:ed:
         5c:8c:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:37 2026 by rpki-client