Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          43fP8i9XKzrtOgT4i/hev2iR3JCZfp3+KKAxTV3r9qU=
Subject key identifier:   F0:1E:73:79:19:19:8F:FD:82:3A:8D:8F:B8:CE:9E:11:A4:9B:5D:FD
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019CAD5A23AA94EFF3E122342E9884298ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          1861
Signing time:             Mon 02 Mar 2026 07:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:31 +0000
Files and hashes:         1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
                          2: 5T6muliVBW8fS-8i29q4TfjPKww.roa (hash: tQ3qJO54TZ3cHoxqFq0bCzVKBXdLkF5Xol5mChz7hcM=)
                          3: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: 3aVfiO3nGQgFYd2o9NWeyBljoe7bjG4iBKFfv9wTpSM=)
                          4: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
                          5: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
                          6: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
                          7: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
                          8: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
                          9: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
                          10: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
                          11: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
                          12: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
                          13: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
                          14: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
                          15: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
                          16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
                          17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
                          18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
                          19: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
                          20: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
                          21: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:23:aa:94:ef:f3:e1:22:34:2e:98:84:29:8e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Mar  2 07:01:31 2026 GMT
            Not After : Mar  3 07:01:31 2026 GMT
        Subject: CN=f01e737919198ffd823a8d8fb8ce9e11a49b5dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:0a:59:5f:1d:1a:fe:f2:0c:a3:8f:1b:eb:
                    cb:a4:dd:b4:de:91:04:ba:2d:7a:80:8f:3f:d3:c4:
                    bb:24:cb:f9:42:5f:0c:f0:61:e6:58:24:86:14:28:
                    1e:cd:68:7f:d9:04:0c:87:f0:9a:33:8c:74:f1:73:
                    72:1f:0c:8f:6d:4e:80:f3:e6:a6:3b:bb:6c:67:1c:
                    4e:af:56:39:07:7f:a5:af:2c:3a:ff:fb:cc:dc:ec:
                    ac:e3:c0:67:f4:5a:f0:c7:e5:19:07:53:62:f0:56:
                    9d:52:de:c2:b0:5a:6a:23:c0:dc:53:b0:57:c5:4d:
                    12:4e:97:a5:0b:96:14:e7:2d:d2:b6:59:39:fb:29:
                    14:65:a0:90:a8:a1:86:d3:74:e4:b3:4b:04:2a:07:
                    69:c9:30:19:8c:cb:32:23:28:47:e0:23:9f:29:89:
                    dc:4b:1c:1d:a1:da:02:0a:84:03:e1:a5:4e:53:43:
                    4c:74:77:c4:0e:3b:29:86:b3:d4:7d:a5:ae:26:8d:
                    9d:1e:17:87:10:b6:84:c3:ee:3d:c3:ae:96:6a:8d:
                    59:15:b5:14:32:6e:e0:5a:bb:3a:a0:07:19:28:bb:
                    6a:09:08:7a:9f:f3:4d:de:6b:cb:31:b1:41:58:50:
                    7a:93:cf:e8:d6:05:35:6b:e9:e0:ba:03:ce:e5:ca:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:73:79:19:19:8F:FD:82:3A:8D:8F:B8:CE:9E:11:A4:9B:5D:FD
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:28:7d:48:2a:00:62:fe:2e:f6:3a:2e:5c:80:15:70:4e:43:
         fe:69:99:34:02:4c:cb:55:bc:fd:8a:2e:4b:14:08:1c:27:63:
         03:c2:f8:a1:69:a3:12:51:e1:89:92:0b:eb:89:d3:f9:d6:d5:
         96:fc:89:89:41:ac:7f:1d:76:99:fb:12:ee:e5:aa:bf:d9:52:
         0b:63:69:da:fe:b5:01:1e:8d:0c:3f:49:a9:18:b7:7f:38:73:
         60:86:06:cd:94:6f:bd:55:7d:8a:eb:8d:ee:82:14:f9:ba:50:
         e7:52:65:14:8e:eb:2a:04:5c:8b:37:25:ff:01:b4:3b:fa:9f:
         11:a9:d4:33:13:9b:3d:9b:22:24:0a:93:a2:72:4b:97:e2:de:
         97:86:85:7f:e8:2e:f3:75:bb:87:0a:24:1c:60:64:ac:78:6d:
         7f:61:1e:a8:72:04:1a:39:e8:ad:58:fc:ec:a2:7a:2b:74:cb:
         f1:80:03:ee:20:19:3e:bf:3d:02:25:a6:97:4f:fb:76:7d:c3:
         1f:e2:16:1d:34:14:19:a6:d5:4a:38:f2:11:19:49:6f:56:3c:
         4a:43:ca:c0:b9:6b:48:bd:3e:8b:25:e5:dd:4d:02:67:d0:da:
         f9:c8:32:f1:19:a4:bf:ca:c0:a4:56:91:65:3c:c0:bb:97:01:
         de:f6:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:46 2026 by rpki-client