Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File:                     vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier:          qnTE4J4oRUiyYGy9YQNNRgPa1NwDUgGkHrlOfDkQAIk=
Subject key identifier:   C7:A7:0B:7B:E4:9C:34:FC:17:3B:9A:27:02:E0:A4:F9:8C:FD:9E:E6
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer:       /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial:       019CAD2257143A38DB43C54BCB0CC4127694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 06:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:34 +0000
Files and hashes:         1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
                          2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: 8iVK8Hscpgs3F3+p3kcuKUgqUjW0AxUjvLheTP1X0W0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:57:14:3a:38:db:43:c5:4b:cb:0c:c4:12:76:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
        Validity
            Not Before: Mar  2 06:00:34 2026 GMT
            Not After : Mar  3 06:00:34 2026 GMT
        Subject: CN=c7a70b7be49c34fc173b9a2702e0a4f98cfd9ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:12:49:f0:85:2d:fc:bb:55:45:4d:86:d1:
                    3c:64:55:54:c1:e7:f1:7c:66:22:76:5a:11:6c:95:
                    64:2f:fb:48:86:89:6e:c7:39:0e:d7:02:07:1a:d1:
                    54:f5:ba:3e:04:57:6f:2a:92:2e:b2:5f:11:21:bd:
                    df:7c:d0:dc:96:57:2d:69:58:ad:dd:5e:ff:ac:b9:
                    95:46:10:70:4d:32:1a:c1:4c:f9:fb:5b:61:5a:ac:
                    03:b0:3e:14:6e:d0:e4:d7:30:ba:b5:3c:3a:a4:2d:
                    89:2f:2d:5c:46:3a:1e:f0:a1:61:59:9b:61:70:60:
                    ba:6d:e6:e6:4e:f4:f7:24:b3:fe:45:e5:b1:04:41:
                    5b:62:76:83:24:b5:1b:68:77:86:f4:89:14:01:7d:
                    58:a0:e7:ce:ab:66:53:43:55:b4:76:37:cb:7d:84:
                    09:e7:48:7e:20:7f:82:a0:af:85:dc:0f:e4:33:37:
                    2d:07:9d:6b:b5:72:e7:5e:ae:05:09:09:e3:ee:05:
                    fe:9d:fb:e2:b7:33:b9:53:16:ef:17:7a:d6:b3:b1:
                    4d:a4:8d:3c:ad:9e:f2:db:64:f8:57:76:9c:76:b8:
                    db:07:e7:88:83:bc:70:08:bd:6b:43:1f:ad:76:01:
                    f5:b5:c6:cf:39:9c:79:5a:77:85:73:72:ab:a7:a1:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A7:0B:7B:E4:9C:34:FC:17:3B:9A:27:02:E0:A4:F9:8C:FD:9E:E6
            X509v3 Authority Key Identifier:
                keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:03:81:77:15:7c:0d:fd:96:96:78:62:66:69:88:d7:a3:76:
         a4:8d:38:35:e2:27:e6:df:fd:1d:b5:be:36:9a:2d:74:40:c6:
         e9:fa:0f:de:fe:7f:49:bf:71:69:c6:4a:90:4c:15:b0:0c:2b:
         0b:de:3f:32:90:77:38:61:10:17:b7:10:0e:38:d3:3b:b2:e7:
         21:65:1e:e1:eb:45:65:f0:07:8f:30:fb:48:5c:25:8c:10:48:
         49:ef:f2:ee:ba:38:9d:29:e5:05:c1:4d:1e:86:09:74:6f:98:
         bd:6c:f3:86:69:31:04:30:40:d4:6b:2b:f3:a2:d8:6d:a1:a6:
         e5:58:4a:83:d8:14:a6:c1:09:d9:f4:48:72:9f:e3:60:b1:49:
         e8:8e:68:a1:ef:57:fa:a4:4c:f4:43:20:1a:2e:32:dd:77:7d:
         e0:3b:55:b9:4b:4d:85:c4:b5:5a:a8:c9:2d:33:69:ff:e2:b6:
         41:a2:e7:c7:90:eb:bc:e4:78:b4:6c:14:05:25:1a:d3:bf:ae:
         b6:ba:fe:31:a3:d2:7d:9b:aa:3f:1b:41:42:dd:6a:66:90:0d:
         4d:53:7f:2a:9c:62:d1:60:48:e3:10:60:6b:fd:9a:e7:8f:f0:
         b3:3e:b2:c3:ca:bc:ea:36:90:67:92:c9:a1:46:79:80:58:67:
         2b:cf:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:38 2026 by rpki-client