Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File:                     xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier:          sNZc4bU8v1/AXocdKMZZIXoryIyptIwlWH+c46YA5OM=
Subject key identifier:   F6:F9:68:A0:56:05:98:2C:6B:66:ED:DF:E7:E5:0B:4D:FF:A3:6D:09
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer:       /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial:       019CAD22A06455F58E2E985D625D47AF30BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 06:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:53 +0000
Files and hashes:         1: Ey9RDTUKNtpxucDL595am7oxv5w.roa (hash: Tn0c8HJjvP0UNfrsMJSn4uo3H3SBrrgbKleOBTQq0Rg=)
                          2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: sUhZWSz2j41biaPfg+jkhExVBaKeBw9wBWrhg8PbicU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:a0:64:55:f5:8e:2e:98:5d:62:5d:47:af:30:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
        Validity
            Not Before: Mar  2 06:00:53 2026 GMT
            Not After : Mar  3 06:00:53 2026 GMT
        Subject: CN=f6f968a05605982c6b66eddfe7e50b4dffa36d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:4e:dd:a6:c8:b3:db:33:07:d5:d4:d2:b0:
                    d7:72:c2:9a:97:90:b9:8c:0b:a3:54:67:5c:ac:cd:
                    88:17:19:20:92:ee:a9:85:be:21:7b:a7:bd:f9:69:
                    18:f7:bf:22:68:28:1d:0e:ea:66:16:4e:30:09:e0:
                    8a:23:4a:3b:60:99:c1:c8:13:40:9f:01:1c:d8:8a:
                    a0:5f:07:f4:80:43:73:20:34:03:48:3f:19:58:21:
                    ae:08:ea:90:de:18:47:3d:86:53:05:54:07:ee:00:
                    ca:ec:69:e5:55:74:fa:a7:a9:f1:85:f3:90:62:c6:
                    e9:4e:f9:ba:5a:4c:5e:0a:f8:dd:f4:4b:b2:42:60:
                    99:c1:19:62:da:77:b8:b1:4e:dd:6e:a6:59:86:5a:
                    73:b2:af:56:32:e4:f7:11:b8:69:d7:ca:f3:8b:ab:
                    7e:a1:ec:61:d8:b6:af:cb:f4:39:15:33:50:c8:15:
                    5e:61:d5:b7:eb:50:c1:83:75:56:a5:ed:7e:24:66:
                    2c:11:67:9d:e3:ec:0a:01:12:02:27:85:d6:9a:2f:
                    9b:a1:70:ea:72:0b:b8:a9:37:fe:bc:b5:02:ab:69:
                    a6:bf:fe:8b:1b:85:07:6d:5a:f0:04:aa:2f:02:f2:
                    8d:8c:65:72:6b:a3:02:ca:ab:7d:13:87:31:66:c3:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:68:A0:56:05:98:2C:6B:66:ED:DF:E7:E5:0B:4D:FF:A3:6D:09
            X509v3 Authority Key Identifier:
                keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:6e:58:c8:cd:8a:f0:0d:2a:08:a3:89:f3:4e:d5:99:50:
         7b:f4:fc:c8:09:57:83:96:37:07:61:09:a9:4b:47:29:99:d9:
         ed:01:02:90:ae:f6:36:23:94:20:6d:eb:c1:be:5b:ee:c4:23:
         71:05:55:19:46:b8:e1:73:b2:14:5d:fb:e1:0a:b3:5f:2d:ee:
         b0:25:7d:38:09:10:6b:ce:70:68:51:4c:d7:af:35:7c:4a:2d:
         17:ac:01:af:92:a7:fd:4a:ee:23:e8:01:56:0c:19:3d:2a:db:
         9c:b8:49:97:1b:03:b2:cd:b9:98:f1:28:77:99:17:77:59:41:
         c6:b5:51:11:ab:d0:90:78:63:b9:28:8f:86:a7:28:0d:7e:39:
         6a:86:f8:98:29:bd:29:88:4b:4b:8b:9f:3c:6a:ea:5b:c4:0f:
         7a:a2:bc:a8:a2:22:97:00:95:3b:af:8d:c3:c4:74:16:48:49:
         e5:11:9d:ad:9d:24:7b:8c:34:49:d3:80:16:7f:b8:bb:a1:f3:
         28:bd:67:6c:3e:d0:a1:23:56:33:3c:6e:a0:27:e6:d7:09:aa:
         7d:21:b4:9d:6f:0a:d7:0d:d2:d2:56:8f:7a:9d:e1:2f:a9:20:
         7b:32:ce:a0:b0:92:6a:19:45:10:76:c5:07:ad:6a:35:1d:7c:
         b6:a6:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:13 2026 by rpki-client