Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File:                     L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier:          ntfNCwWDk7WEQEpPkTRrdp/hj+IHRAGzlQAweB7cUfk=
Subject key identifier:   12:A7:29:E6:3F:55:99:5A:EF:68:6B:F2:C4:59:50:95:11:63:5C:1B
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer:       /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial:       019CABD8E1824220F61527E71799289272B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 00:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:43 +0000
Files and hashes:         1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: srrgFk8AYr9TdXljav+bZnxt59nzBh/5kMxKivrbKE4=)
                          2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:e1:82:42:20:f6:15:27:e7:17:99:28:92:72:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
        Validity
            Not Before: Mar  2 00:00:43 2026 GMT
            Not After : Mar  3 00:00:43 2026 GMT
        Subject: CN=12a729e63f55995aef686bf2c459509511635c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:11:9f:aa:2c:3a:56:9b:1e:5e:7b:dd:c2:
                    6e:37:fb:ff:67:49:4c:b7:4b:a5:2c:8b:4d:46:ea:
                    6a:d8:d1:63:26:66:20:18:92:1e:c1:de:05:84:97:
                    c6:0a:d7:69:80:33:32:71:bb:ea:11:11:4a:d9:da:
                    a4:3d:5b:61:de:23:f1:cc:6c:15:e2:42:6a:46:39:
                    4e:6b:98:9b:2d:de:78:f7:ae:9c:36:b8:4d:16:44:
                    9f:f7:6e:c5:a3:93:d8:40:09:88:e2:02:0b:b1:18:
                    f4:d5:50:ab:61:cc:fb:b1:0c:53:31:0f:66:9b:8a:
                    5e:42:59:1c:da:a0:aa:04:2f:93:01:ef:ea:33:6a:
                    24:80:2b:96:6a:c3:51:e6:85:38:00:7e:11:c9:76:
                    80:4b:05:69:56:2b:2e:99:1b:53:06:6b:aa:4e:95:
                    81:4e:fc:09:6b:43:ee:3f:93:39:3a:f0:a0:c3:87:
                    45:48:b8:b0:f1:25:b6:a6:60:a4:c4:2d:47:3e:67:
                    d2:8c:26:91:33:7a:97:83:0c:29:1d:ce:2c:09:49:
                    dd:93:f7:54:5f:0c:34:5f:89:59:cc:74:0f:5b:84:
                    26:de:02:ef:2a:b4:f4:85:b8:d3:eb:ae:7a:87:0b:
                    bd:c2:ba:28:e2:c3:70:62:97:c7:24:2a:cc:47:96:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:29:E6:3F:55:99:5A:EF:68:6B:F2:C4:59:50:95:11:63:5C:1B
            X509v3 Authority Key Identifier:
                keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:07:45:a4:72:54:c5:65:44:77:6c:46:81:55:05:0b:0a:71:
         3f:00:7c:9f:59:f2:86:cb:5c:ff:1e:6c:a5:88:73:71:6a:76:
         84:24:b8:1d:db:7d:4b:c7:30:07:f3:9d:94:c5:e6:63:5b:16:
         ce:a6:4d:3d:01:85:bc:da:5d:14:86:34:11:28:7d:2a:14:32:
         cc:ef:99:ad:e3:ab:fe:a7:bf:02:69:d8:34:6e:d1:d3:2c:a1:
         87:e7:23:4d:62:50:d7:5f:34:d6:9b:e0:c2:cd:89:53:65:37:
         f1:c1:a9:14:d1:95:4c:55:dd:8d:3a:93:19:c2:87:64:6f:73:
         f4:30:5c:be:f9:bb:7f:d2:ce:b5:d8:58:2a:89:94:cf:1e:60:
         b2:3f:bd:1b:0d:0f:52:16:99:fa:0b:b4:85:1d:86:d4:e9:bc:
         ce:0e:1a:4c:bf:c8:93:ea:99:5a:ea:1b:6e:9a:60:ca:43:22:
         ca:26:91:07:ef:67:d2:0b:d4:f5:4a:8f:f7:07:c7:9f:71:16:
         da:6f:3d:bd:92:c8:8e:d3:c4:bb:a7:7d:ef:ad:87:3d:9c:ae:
         a6:af:31:41:86:76:3a:13:4d:75:7c:a8:6d:8a:36:66:9b:14:
         aa:00:2d:04:b1:ee:0f:7b:10:21:9a:19:39:7b:0f:1f:ae:c7:
         e5:35:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:10 2026 by rpki-client