Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File:                     rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier:          jjxAgAscnPSoXV+smvODG6vAKdPHUmAT8kHPQenG4eM=
Subject key identifier:   C4:6E:1C:21:E4:DD:E6:A9:33:E5:D6:2F:88:FB:49:8E:0F:5C:B1:03
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer:       /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial:       019CACEB869F7DBBD23C82B40261BE4FCF9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number:          046D
Signing time:             Mon 02 Mar 2026 05:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:42 +0000
Files and hashes:         1: 5bBSbPRJU7MitFpRgPerCchom28.roa (hash: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek=)
                          2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: qlCdDtsJoHhrKtU2muWanS1EiCQrQTos35c9xnqPvHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:86:9f:7d:bb:d2:3c:82:b4:02:61:be:4f:cf:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
        Validity
            Not Before: Mar  2 05:00:42 2026 GMT
            Not After : Mar  3 05:00:42 2026 GMT
        Subject: CN=c46e1c21e4dde6a933e5d62f88fb498e0f5cb103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:ba:64:e8:0f:25:75:03:3e:1e:ff:4f:cc:
                    b8:81:ff:a6:7c:64:e0:44:97:bb:7a:02:b0:b7:a0:
                    4c:d5:39:07:97:8e:fb:cd:1c:9f:32:e0:26:1c:5e:
                    64:6d:cb:af:a2:31:48:41:cf:bc:69:8c:a4:f9:dc:
                    20:bb:f9:5b:50:4e:ea:d0:31:ae:52:85:56:46:a6:
                    44:1b:c0:c6:3e:a4:4e:c8:f9:cb:e2:0a:d1:a3:9a:
                    60:c1:1e:9d:b2:6c:83:4c:4d:84:94:b8:dd:4b:5c:
                    17:74:34:44:24:4e:6c:07:9a:76:23:eb:bc:57:56:
                    7c:02:b1:f7:f1:5a:c5:5e:f9:c9:1d:80:e2:e7:9e:
                    ff:41:7a:0f:ca:f8:93:4b:98:1a:f3:6f:25:66:bb:
                    68:9c:19:85:6b:40:06:ea:19:b2:c5:1d:f8:01:af:
                    08:73:e1:ac:58:a3:1d:21:b3:20:e6:d0:fd:aa:e4:
                    70:99:d4:41:af:9d:a5:60:cf:7e:ca:19:2e:aa:03:
                    0b:ad:4d:6b:2e:d3:d9:84:74:be:15:ce:03:03:13:
                    5d:2b:05:1c:bc:bd:83:42:ca:e9:e7:26:5a:7c:ab:
                    d4:5e:36:aa:bf:ba:d6:5f:62:ca:b5:dc:5b:0a:c7:
                    79:73:70:36:35:ef:09:d4:6b:23:1b:d5:be:72:60:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6E:1C:21:E4:DD:E6:A9:33:E5:D6:2F:88:FB:49:8E:0F:5C:B1:03
            X509v3 Authority Key Identifier:
                keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:20:72:2b:4d:aa:25:59:ee:60:e5:0f:3c:02:96:54:ce:03:
         6b:0f:23:a2:8e:0a:64:21:63:f8:89:a7:ce:55:41:27:82:40:
         a8:4f:85:99:87:91:9e:53:2f:49:11:2c:61:97:fc:dd:3d:5a:
         bc:9b:ab:8d:ac:5a:62:73:f6:ca:fd:69:d0:2f:f4:f9:82:98:
         ee:99:90:ab:13:16:3b:5d:01:68:7c:22:12:14:05:a1:08:4d:
         81:e6:52:28:e3:04:64:2e:ea:c8:23:6b:6a:29:2c:d5:66:e6:
         e9:9a:c1:f6:41:3b:0d:50:a6:f0:95:52:e0:f7:5a:fa:55:b3:
         a2:53:1c:94:28:3a:f5:f8:a2:b9:27:80:19:1d:9c:62:b9:b3:
         d6:3a:b3:96:71:3e:3c:a7:5b:8b:94:ce:04:08:98:01:bf:55:
         32:57:24:c8:30:a6:de:b7:63:b9:ef:55:cd:af:80:40:c6:b6:
         86:1a:d7:54:54:67:4a:f4:1c:d1:87:3e:70:05:26:70:15:3a:
         31:39:32:63:24:80:4d:8f:41:23:d2:9d:7c:18:08:7f:d7:a6:
         b6:f0:cc:6f:4b:9a:b3:fe:9d:f4:8f:4f:93:98:31:f4:a8:df:
         f6:d3:ca:d8:9a:5d:4b:4c:e3:b9:1c:0d:8e:a3:c2:43:96:2e:
         11:ff:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:36 2026 by rpki-client