Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File:                     b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier:          Jcp5pguJCjM8Srq+ZuP1ofdnDP128+rTUAe8/ct66mE=
Subject key identifier:   3F:98:6C:AF:5D:E1:B6:13:DE:35:51:E8:E1:28:88:CA:0D:24:EE:56
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer:       /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial:       019CB0C817D95AFB0D9D00C1AA4EF70FB408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 23:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 23:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 23:00:29 +0000
Files and hashes:         1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
                          2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: gT4quuD9EOR9jPW/nK3G00NqMyauwgtwviteAOHgqA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:c8:17:d9:5a:fb:0d:9d:00:c1:aa:4e:f7:0f:b4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
        Validity
            Not Before: Mar  2 23:00:29 2026 GMT
            Not After : Mar  3 23:00:29 2026 GMT
        Subject: CN=3f986caf5de1b613de3551e8e12888ca0d24ee56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:be:fc:b0:ef:47:d1:92:e3:94:49:bd:4d:
                    24:62:0f:bc:1e:91:34:ca:cb:6d:86:31:bf:7b:d2:
                    53:0d:4f:92:41:ae:88:2b:43:2e:a9:0f:63:33:a9:
                    59:5e:b6:38:5b:a6:2c:38:67:0d:71:fe:11:0b:f7:
                    f9:70:f7:a0:de:0e:3f:1b:17:37:b4:43:a1:63:be:
                    46:7c:4e:b4:b6:04:ac:eb:e2:6a:15:b9:83:fa:ee:
                    79:01:64:df:b5:b1:f0:5e:db:fd:fb:6b:54:1a:a7:
                    72:16:ab:e1:86:7f:13:93:6d:21:47:dd:b2:20:5e:
                    e3:1c:3a:3d:c8:52:68:36:41:76:e6:e2:7f:c5:09:
                    5b:9c:e1:a3:f1:8e:c9:03:75:01:8e:e4:c1:b5:51:
                    7e:55:e9:37:f7:4e:82:94:73:7a:45:b3:98:ba:6d:
                    01:f4:2e:2e:39:a0:ed:b6:f1:98:6b:72:db:75:25:
                    8e:5c:fa:0e:c2:06:d7:64:17:94:1b:50:3f:1e:f9:
                    ca:ae:f3:05:f2:0e:06:ea:2c:22:aa:de:c0:fb:50:
                    55:08:71:d6:c1:5d:f1:ba:0d:ef:f1:d3:a1:7e:87:
                    1c:08:b4:a7:72:bb:3a:30:b0:d1:c0:99:92:fa:bb:
                    b7:22:a5:93:b9:26:c6:d0:1e:6a:6a:df:cb:fc:64:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:98:6C:AF:5D:E1:B6:13:DE:35:51:E8:E1:28:88:CA:0D:24:EE:56
            X509v3 Authority Key Identifier:
                keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:65:8f:43:da:93:09:af:76:7b:61:9b:47:29:22:db:4c:e5:
         d2:7d:8d:de:0b:ee:4b:80:de:b0:77:8a:44:b4:5a:c6:00:21:
         36:53:01:79:17:65:7b:e9:5d:30:81:af:1f:1e:96:c7:ac:e6:
         7a:37:4d:fc:05:a9:09:4a:e0:fc:84:5a:b1:45:87:d4:bc:df:
         03:0b:ea:27:98:8d:2c:05:00:2f:bd:ed:51:f7:7c:65:68:49:
         93:80:30:4d:8d:91:a7:01:d9:8a:1b:f0:3a:90:f2:39:3b:fd:
         70:be:e3:96:1e:42:84:b9:de:90:1f:9d:ed:a3:9d:90:ed:4b:
         40:e5:2c:0f:15:45:65:48:46:c2:d5:29:ff:36:17:53:b6:27:
         a1:d7:f2:4f:d5:60:7a:0e:af:fa:4f:50:3f:17:fe:ff:32:eb:
         30:12:96:9b:d9:9e:9f:49:2b:b1:b5:39:30:d1:48:a5:f0:db:
         76:09:eb:71:fa:0d:77:1c:35:99:99:4a:cc:b6:29:aa:8d:bc:
         b0:15:5c:c1:ef:93:ac:4d:af:59:2f:22:91:8b:92:71:33:65:
         48:04:71:00:bb:aa:0d:45:e0:ae:ee:98:b6:18:f5:2d:5a:a3:
         09:e6:eb:75:5d:28:bd:42:3b:eb:20:1f:52:5e:f7:54:cc:a9:
         d7:12:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:50 2026 by rpki-client