Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File:                     IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier:          K4zLkue5PJOGO2yrMvozeoD7fngRySI6eBa4t8cq7z8=
Subject key identifier:   10:94:DA:6A:A2:A1:E5:FE:53:7D:56:1E:F5:D4:1B:E3:6C:6E:34:A3
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       019CABD9CF28084D79D096B5F2F0FE0EA812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number:          1857
Signing time:             Mon 02 Mar 2026 00:01:44 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:44 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:44 +0000
Files and hashes:         1: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: HlXLBJHqoyOzxPgOs3zjAfBoTcPMEE75c7d4oJRcJVI=)
                          2: Uh329QdqNtbq-rnjzUX67spw_pI.roa (hash: KrAiLdJbcCv+UC8InYxWGXAZ6xLFGNzoVLgOGCkNxp0=)
                          3: viJ7WfbDNM5esSfJxOqSt5gKGAc.roa (hash: 9+hcCiy0XqJIFSr4FHRADwACNfKMSEAJCGmpy7MhHBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:cf:28:08:4d:79:d0:96:b5:f2:f0:fe:0e:a8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: Mar  2 00:01:44 2026 GMT
            Not After : Mar  3 00:01:44 2026 GMT
        Subject: CN=1094da6aa2a1e5fe537d561ef5d41be36c6e34a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:a1:01:c6:d6:85:0c:d2:68:f7:a5:b2:82:
                    56:02:00:20:aa:b1:4c:3f:fc:5c:25:f0:72:08:1a:
                    18:d7:48:8c:4c:38:26:1f:7b:4c:6d:1a:1f:b5:39:
                    23:0b:05:8e:8e:98:0c:b2:ec:15:76:67:bd:2a:d1:
                    99:7a:e9:cf:00:88:aa:58:ab:b0:94:25:e1:14:2f:
                    cd:34:41:2e:b1:be:e2:23:20:4a:f3:18:11:a4:d4:
                    96:c8:8a:bd:91:e5:0f:26:37:ae:ec:7e:82:4c:da:
                    3f:aa:0d:49:c0:58:be:4e:3c:9e:95:3b:d9:c2:b7:
                    85:88:00:29:4c:62:ed:a3:f5:46:16:57:41:eb:da:
                    01:a7:e4:6d:e0:9a:48:56:77:78:e1:95:09:39:cb:
                    a2:68:fd:cc:52:95:32:42:b8:ef:90:54:d8:4a:2c:
                    4b:ea:c1:27:f7:ca:1e:97:57:6e:31:a7:2f:ee:47:
                    f6:25:ff:54:57:dd:7f:7a:6b:53:dd:d8:c3:b9:9b:
                    0e:e3:a4:97:8f:a3:94:89:4a:98:94:dd:c1:45:68:
                    9d:ad:0b:70:7b:2d:32:a0:ad:3d:36:79:cc:58:77:
                    91:f8:ed:5e:cf:d8:c3:3a:1c:9d:46:5c:ee:d1:57:
                    97:32:dc:1b:fb:92:7c:b4:7a:5d:f7:12:41:3b:67:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:DA:6A:A2:A1:E5:FE:53:7D:56:1E:F5:D4:1B:E3:6C:6E:34:A3
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:54:98:82:9c:6a:d5:66:dd:d9:fb:e6:ae:0e:25:46:21:
         0d:b6:ff:d0:26:e0:40:f6:5e:22:29:ed:26:e5:3d:ca:39:7e:
         4f:80:68:c0:e0:e7:71:5b:84:51:f4:6b:7a:1b:b3:a5:04:95:
         5e:dc:d5:cb:de:7a:8c:fe:58:f6:7c:a8:c5:fa:08:ad:fc:46:
         b3:91:bb:33:8f:21:e5:0e:de:7d:11:7a:8a:78:08:7e:2a:3f:
         80:d5:60:47:b8:99:75:e4:b3:20:27:75:1a:c1:bf:ec:c3:f9:
         6a:9a:75:a3:d9:38:a1:de:7c:fa:ed:d0:cb:dd:35:ec:83:84:
         2e:e1:28:c5:93:8e:6f:b7:d8:40:c6:46:99:b1:e9:3d:f5:f1:
         91:dc:ec:c1:df:5c:9e:1a:92:2f:a0:b0:90:7f:5e:f2:43:07:
         d4:b3:4e:18:e6:b4:e4:15:44:7d:74:35:c0:42:88:ae:3b:6f:
         39:b5:a0:c5:06:a1:dd:41:6a:d0:aa:c8:6a:4b:76:c9:7e:a1:
         0c:eb:2b:47:9d:f8:90:db:24:3c:36:3e:a0:53:76:9c:7e:b4:
         82:cf:aa:7c:2e:5b:33:a3:1f:43:3f:12:cf:26:8a:78:96:0c:
         5a:30:e1:31:b2:81:9b:6a:73:90:ab:8f:23:98:11:4a:d4:73:
         c9:aa:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:19 2026 by rpki-client