Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          YJKJCbbDX/LkRhDMfblBqSXBa+Q5G7/KmmuaZ+3xseA=
Subject key identifier:   7C:86:9D:68:72:1A:3B:FE:EB:AC:E1:DE:56:A4:2B:EC:2F:0E:A5:AF
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       019CA90F07E976F5589D4C948F6033551768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 11:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 11:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 11:01:00 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: btYJ1i3hFb9bNI0Ixiy55ORFZMzZaPecr1CBa1FLbxs=)
                          3: Oa_sii1Clbbek1SF0NauE94faXI.asa (hash: YEmLQlVRuHxGBIqwaUaToyDICFpczhTHLQZcRXVFos4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:0f:07:e9:76:f5:58:9d:4c:94:8f:60:33:55:17:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Mar  1 11:01:00 2026 GMT
            Not After : Mar  2 11:01:00 2026 GMT
        Subject: CN=7c869d68721a3bfeebace1de56a42bec2f0ea5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:be:4d:1a:cb:46:a6:ad:dd:fb:5a:46:8f:
                    d4:64:d9:ce:a6:4f:fc:d5:96:c8:64:f9:b9:42:5d:
                    31:dc:11:f9:ef:04:13:7a:d1:16:41:f4:0a:fe:5f:
                    2e:2a:a9:1d:e5:24:3d:14:5e:b3:0e:12:d4:93:fd:
                    ee:c1:26:30:b1:9d:22:80:c4:b8:67:6a:ad:1a:d1:
                    92:a1:01:77:97:e3:d5:e6:ee:a7:90:0f:5f:01:c1:
                    10:25:e6:10:d8:32:56:65:21:3b:50:a6:51:ab:4c:
                    c8:09:d6:2e:cf:8c:61:a6:e1:f3:4e:47:35:df:fe:
                    54:73:89:cb:0e:9c:e1:82:31:45:94:6d:95:b1:0d:
                    99:ca:b6:2f:95:bb:af:c3:6b:bf:a4:5b:22:8b:e9:
                    e9:36:1a:85:2a:4d:16:65:44:ee:1f:71:dc:2d:ca:
                    68:d4:43:e8:55:4f:75:27:22:f0:66:c9:73:fb:7b:
                    69:42:0f:3e:69:68:bc:2c:0b:37:bb:f4:1e:1d:55:
                    89:34:6d:df:d5:ed:ac:8b:9a:41:de:3d:6b:65:b4:
                    19:a3:09:92:9c:59:22:f3:cf:bc:d3:d0:01:39:a2:
                    ca:a6:55:e5:52:7e:e4:cf:2a:46:0d:75:2f:97:16:
                    bc:f7:20:a1:50:18:cc:45:69:a7:ae:d9:70:b6:e9:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:9D:68:72:1A:3B:FE:EB:AC:E1:DE:56:A4:2B:EC:2F:0E:A5:AF
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:32:27:a1:a0:9e:cc:0e:c3:0d:12:1e:b1:4e:c0:7d:06:36:
         0b:e9:dd:24:68:82:fa:6a:51:ea:34:41:b0:b7:88:6f:84:e9:
         47:fb:41:57:f9:5e:8d:77:8f:be:df:7d:54:c0:e1:32:4a:6d:
         00:1a:e7:0d:be:59:27:34:0b:42:7d:29:68:0c:b4:d0:98:9d:
         a2:99:50:82:73:bd:19:23:d2:af:4c:e8:52:22:1b:40:40:21:
         30:f8:a8:e5:37:46:d8:df:45:a1:e7:71:12:20:5c:b1:99:9d:
         51:45:b4:6f:92:f0:fd:b1:21:c5:4f:ad:a9:3a:b3:7c:e9:7a:
         2b:20:0c:0e:3b:51:ed:17:3e:f1:9b:f9:68:e0:18:ce:4e:41:
         35:c1:b9:25:85:94:a4:a5:a1:32:fa:19:90:08:fd:22:7e:b9:
         d5:d2:b1:53:8f:54:05:f6:d1:3f:94:d5:ea:ea:b3:3b:28:df:
         e0:61:7b:19:0a:1e:8c:31:f7:35:44:c8:3c:53:f5:e8:47:5b:
         7a:ee:e6:88:df:d8:bd:34:50:1b:c8:7e:76:fd:e4:76:3d:b5:
         87:c2:81:b0:76:f7:75:15:be:93:43:84:e0:c5:4e:f0:4f:66:
         fc:f2:f9:1e:b2:41:14:40:8f:cd:d2:84:04:5b:ed:c3:b5:66:
         52:bd:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:30 2026 by rpki-client