Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File:                     Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier:          L9lGABh3dHbBuBgROhDYg6X8S3Bbuj3Hq/H0PqP08mo=
Subject key identifier:   12:68:31:05:14:69:BA:49:C6:E5:FB:7A:3F:01:6A:A8:6A:07:B8:34
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer:       /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial:       019CAC10511185532D1ADB257E5A34C938DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number:          1864
Signing time:             Mon 02 Mar 2026 01:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:16 +0000
Files and hashes:         1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=)
                          2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=)
                          3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=)
                          4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=)
                          5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=)
                          6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: +ge2sWfvBxJ2G07mJSw8gdc7LS6MRBbbOVc5sBFtvFk=)
                          7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=)
                          8: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=)
                          9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=)
                          10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=)
                          11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=)
                          12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:51:11:85:53:2d:1a:db:25:7e:5a:34:c9:38:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
        Validity
            Not Before: Mar  2 01:01:16 2026 GMT
            Not After : Mar  3 01:01:16 2026 GMT
        Subject: CN=126831051469ba49c6e5fb7a3f016aa86a07b834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:77:10:5b:8b:cb:a0:f1:4d:4a:0e:1e:60:
                    d7:48:d3:cf:40:af:88:04:12:62:29:9a:73:fa:4c:
                    2e:fd:81:5c:ee:40:c8:d8:e2:95:39:1c:1d:c1:ea:
                    51:3d:04:a0:c8:f9:49:16:e2:f4:b2:f2:04:c9:72:
                    16:65:4e:9f:c5:05:ef:aa:8a:37:48:44:82:77:6e:
                    53:7b:0a:a8:6d:bd:13:21:7f:b2:bd:70:0f:9b:5c:
                    f1:fd:cb:36:32:88:3e:c8:d8:f2:3a:9a:fa:a1:05:
                    7d:9b:27:4e:5b:93:d2:47:06:a4:76:35:4c:ac:e0:
                    24:fc:fa:a5:d8:2d:75:bc:ea:bf:eb:29:6a:a7:ca:
                    45:2c:38:05:91:f1:fe:c7:a1:cd:1b:de:17:72:e3:
                    4e:b8:4c:1d:54:77:9a:ad:4b:ca:59:14:26:6a:62:
                    3f:f4:14:bf:7a:66:77:06:aa:98:75:dd:7f:5a:d2:
                    ce:13:c0:8d:19:2e:cc:b5:ed:f6:68:06:2b:d5:69:
                    7e:a1:73:3c:78:ab:93:48:3f:e8:47:d3:bb:81:70:
                    fe:34:48:f2:62:6e:72:61:a1:79:89:d3:e5:af:a2:
                    35:b6:0c:c1:83:dd:c5:c7:61:89:7a:59:b0:e0:60:
                    d8:91:a2:24:ed:cc:df:d2:92:49:75:82:0f:78:89:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:31:05:14:69:BA:49:C6:E5:FB:7A:3F:01:6A:A8:6A:07:B8:34
            X509v3 Authority Key Identifier:
                keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:a8:4c:06:89:ff:cd:cc:83:8d:b6:40:9e:29:30:16:92:
         6e:8d:76:20:e5:3a:8b:6b:70:27:90:0d:8e:ab:39:fe:63:0f:
         5e:6b:d0:55:f5:e2:9e:28:24:cd:41:72:41:30:3a:62:e2:30:
         11:d3:35:fd:f5:48:27:a8:3c:61:05:44:4a:7f:6f:9a:99:e7:
         29:dd:67:40:81:ab:0e:a6:bf:26:9e:51:97:ab:99:b7:2c:da:
         dd:e6:29:f8:c4:5a:a3:28:c8:bf:72:93:38:6f:d1:ae:89:f0:
         ca:8d:39:0c:11:da:63:ce:42:1e:04:0c:95:04:d9:4f:40:f6:
         bc:99:19:84:4f:5c:56:b5:05:05:2c:dd:a3:ed:2a:31:b0:20:
         f6:85:d4:a7:b4:ce:6f:86:e7:a0:9c:27:6e:68:28:85:e4:0d:
         3e:60:8b:d3:03:51:fc:e4:ec:30:63:18:af:fd:1b:74:c6:ec:
         17:35:ec:1d:1f:9e:23:43:e5:41:c2:4c:ad:80:16:99:41:40:
         ab:6b:a6:e7:74:7f:43:b7:61:b4:ca:b8:de:5e:ed:e5:f7:86:
         6d:17:20:71:ef:b4:4f:e0:3a:81:7c:ef:93:45:4f:ea:69:7c:
         bd:3b:18:45:45:5b:60:66:12:d4:59:c8:78:71:66:f3:c0:4b:
         85:96:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:24 2026 by rpki-client