Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          1NYg1MPRew/bBvevuZdRUZiRU4o8m1QiSsBeBuTJeFE=
Subject key identifier:   C8:72:B9:C9:F3:F0:9E:75:35:59:F6:77:1A:25:41:BC:2D:28:04:94
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019CABD8FC38CAE56C0130A5622F9DDC042B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 00:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:49 +0000
Files and hashes:         1: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (hash: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50=)
                          2: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (hash: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo=)
                          3: RtgqAojptg3yfsTJ-oga_8isRto.roa (hash: eyQYoF7t82yY3YtM/1jPPLvEjYoo8YlLinObPAQcXHA=)
                          4: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (hash: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU=)
                          5: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (hash: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw=)
                          6: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: IbjZ4x+Jo0QHLdo3I5Xp6YkH5SKIp6vtgzImSvkFUqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:fc:38:ca:e5:6c:01:30:a5:62:2f:9d:dc:04:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Mar  2 00:00:49 2026 GMT
            Not After : Mar  3 00:00:49 2026 GMT
        Subject: CN=c872b9c9f3f09e753559f6771a2541bc2d280494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:98:a3:04:3e:36:57:ec:6c:6c:8e:4f:61:
                    e3:8d:b6:f2:b2:8a:d3:a0:69:ce:44:0f:5f:6e:8b:
                    c6:f7:bc:15:ff:69:fb:07:59:67:e7:81:a5:92:54:
                    fc:40:9b:11:62:61:16:19:fe:ae:9a:ba:8b:a2:0b:
                    79:e2:14:f4:13:e8:0b:0f:25:1f:ef:1e:44:92:f4:
                    91:fd:b5:d6:a2:ab:06:58:92:ff:cf:d2:69:cf:b1:
                    a1:4b:6c:ea:9b:3a:3b:79:db:2b:cf:fa:3a:7d:5b:
                    4a:76:04:8e:ce:98:01:19:09:bd:19:fb:32:48:a3:
                    ad:da:2e:44:f6:30:39:a8:a8:39:69:9f:fc:18:51:
                    ad:6d:f2:a6:7c:66:d8:f2:1c:13:fe:68:2d:8f:7a:
                    01:0b:5e:13:0b:ed:dd:99:16:0c:90:47:47:38:c6:
                    60:8b:f3:c2:7f:02:c8:50:32:84:b1:2d:b5:1b:0e:
                    b1:40:e6:30:dd:6c:38:1b:bb:2d:b0:67:97:6f:13:
                    c4:e4:da:c3:76:8e:4c:53:7e:ee:3d:18:a7:cd:bc:
                    73:e9:79:e7:e4:03:5f:76:43:87:08:9d:f5:29:9e:
                    92:35:c3:06:64:1c:f6:cf:20:13:40:d8:6b:87:f9:
                    fc:0d:e9:8c:c7:b4:3b:a4:8d:eb:5c:29:93:bf:0e:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:B9:C9:F3:F0:9E:75:35:59:F6:77:1A:25:41:BC:2D:28:04:94
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:21:d9:18:05:55:a9:3c:63:9a:ee:06:6f:0f:2a:ae:40:8f:
         d5:e2:ed:ab:23:5e:09:3f:25:b6:0e:bd:65:85:46:f8:14:5c:
         f7:21:a6:06:0c:9b:2a:c7:18:7c:ab:dd:2f:52:ec:95:c7:75:
         4c:53:2d:5c:a6:c9:c7:34:49:65:b3:1e:3a:0b:fa:80:63:94:
         ff:9c:bf:32:ec:7b:dd:20:49:21:52:77:76:67:7f:2b:4f:ff:
         8f:2a:9b:9a:e9:c8:a8:e1:a8:a9:8e:88:8d:13:3a:2c:3c:29:
         e3:27:d0:3a:ff:cf:41:a7:7b:16:9c:94:a0:a8:76:ad:00:9a:
         08:fb:5c:2d:b3:ff:3c:cc:40:e5:0b:a6:56:fe:16:cf:8b:70:
         5d:53:6f:e7:9a:84:70:9e:38:a0:60:d7:a4:9e:a7:a2:cd:43:
         f7:74:71:10:d7:f6:96:fc:22:14:e8:e8:9c:09:13:95:f1:37:
         a5:8f:77:d0:f4:ff:09:65:73:76:08:64:05:e7:2c:dc:24:2a:
         f0:03:64:27:19:37:b7:9c:41:ab:07:d6:88:d1:61:b1:62:33:
         e7:f5:26:3c:5e:3a:e4:af:b5:b5:5c:a8:4e:6e:1a:67:60:8b:
         e7:b5:e3:97:18:e7:44:2f:93:d6:f3:1d:da:7e:18:cb:0b:13:
         22:6a:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:30 2026 by rpki-client