Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          FukB71ZwWuXaPaxoEqD+VqN/6Ik1IMPjvouXHPUhZXc=
Subject key identifier:   E4:D3:6F:9F:33:02:1D:6D:5C:87:01:E9:A3:33:83:3F:D8:A0:C8:31
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       019CACB462450AE492438D598D3FD197E7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 04:00:28 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:28 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:28 +0000
Files and hashes:         1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: IxsMp+/E796q/YcWKEYGZj+/dimvuhEZEAcEUsupeIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:62:45:0a:e4:92:43:8d:59:8d:3f:d1:97:e7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: Mar  2 04:00:28 2026 GMT
            Not After : Mar  3 04:00:28 2026 GMT
        Subject: CN=e4d36f9f33021d6d5c8701e9a333833fd8a0c831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:d3:fb:89:63:5f:15:0b:2e:2b:57:d1:e4:
                    d5:a1:6c:18:cd:8c:46:fb:8e:72:9c:17:3b:24:0b:
                    bd:7c:f7:9b:3c:05:93:fa:47:f4:8e:b5:c3:f9:47:
                    f8:3c:e1:90:c5:24:f7:f0:3d:18:88:a5:f6:94:8a:
                    cc:59:0d:7e:fa:ef:78:71:7f:70:ae:5c:19:9f:ec:
                    18:16:a5:60:11:d6:e6:91:ef:89:19:85:5a:a2:87:
                    85:ba:0e:ec:a8:16:5a:55:37:03:32:bb:32:b9:f8:
                    05:13:21:1d:83:80:14:9a:d0:de:6f:7a:58:21:25:
                    8d:95:3d:e0:a9:b6:87:99:c6:1a:de:f9:91:5a:ae:
                    9d:e3:28:d4:40:0a:30:85:a4:10:26:8f:70:38:b7:
                    3e:46:7b:7d:e0:8e:a5:cc:22:a9:0b:7b:3d:6d:0d:
                    d9:ff:af:87:61:85:9e:eb:60:1b:32:31:3a:a4:61:
                    91:39:93:94:4c:aa:33:ff:89:17:2c:f8:e5:38:ee:
                    1b:9f:bc:b7:84:92:33:4c:a8:3d:e9:b5:75:b9:de:
                    de:ad:cd:5b:93:f2:e8:32:6f:61:45:b1:c2:83:39:
                    e5:e5:18:7c:34:71:df:75:6e:76:7b:e8:c9:27:38:
                    51:df:e4:1a:38:a6:fd:1c:cb:a4:94:79:cf:cd:9e:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D3:6F:9F:33:02:1D:6D:5C:87:01:E9:A3:33:83:3F:D8:A0:C8:31
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e3:52:11:86:26:53:c2:0a:88:66:b2:ef:35:e1:f6:63:71:
         ac:38:22:89:48:7b:82:e6:fb:40:ce:97:01:4e:7c:1c:96:41:
         42:19:b8:63:b5:5c:e0:05:bb:73:08:50:d9:95:df:29:0a:ba:
         92:a4:e6:c8:09:d6:ec:c0:f4:12:57:6e:7f:6e:d7:79:54:97:
         3e:7f:d7:22:46:96:dd:e2:38:11:fb:43:b2:5a:02:7b:71:ff:
         73:06:39:14:86:ab:15:93:f9:39:f4:c1:47:3a:8d:20:38:74:
         1e:ea:10:a1:0b:a9:4b:15:60:bb:2e:47:3f:f9:98:a9:23:dc:
         bc:ed:b2:25:22:25:c2:1d:49:a6:89:98:f2:d7:61:a7:ab:3c:
         b9:27:f2:38:6f:5b:e4:48:b7:a5:15:02:ef:42:48:f6:a1:8c:
         d0:58:de:84:b0:20:54:70:81:2c:eb:af:49:87:3a:0c:36:75:
         f7:94:b2:dc:07:bd:52:73:53:2c:67:67:04:37:e8:d4:cd:00:
         93:1b:b4:52:5b:c1:2d:68:28:fa:65:46:a7:90:79:85:d8:98:
         88:b7:c2:4c:49:47:72:45:9c:f4:16:b2:b9:f2:25:0e:99:67:
         3a:83:71:0e:62:20:1d:de:6f:b2:f5:d1:53:41:b1:f3:97:43:
         05:33:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:09 2026 by rpki-client