Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File:                     RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier:          C5cllf1fF2dJtQdn6NJ3cN4c4yNhQZlNT8HkMeVyypQ=
Subject key identifier:   D7:80:0E:DB:47:94:0B:FA:A5:78:05:2D:10:AF:26:F0:FE:0E:C8:D1
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer:       /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial:       019CAC4682647427F1994B1D0F227D9F9C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number:          12CE
Signing time:             Mon 02 Mar 2026 02:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:27 +0000
Files and hashes:         1: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: zhutmOrKcCGto/QOlFsnTlMnoSBrk23/QGDyau58ka0=)
                          2: UxsbNkBxV5Z06pGcubFBR8uKdLw.roa (hash: tbWLve0j2n3BjQjOZ6pgmALHAdTE4wxSO/sJbmSQFxs=)
                          3: tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa (hash: +00YrVjwsl/7FXL7Et4Om6euiIMwhs1ab+9m+Zkr+NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:82:64:74:27:f1:99:4b:1d:0f:22:7d:9f:9c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
        Validity
            Not Before: Mar  2 02:00:27 2026 GMT
            Not After : Mar  3 02:00:27 2026 GMT
        Subject: CN=d7800edb47940bfaa578052d10af26f0fe0ec8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:12:7e:e9:53:ed:12:fe:d2:25:74:26:c5:
                    c4:20:26:49:6d:0d:0a:f9:96:3b:45:bb:aa:15:39:
                    41:60:e1:e6:26:8e:24:e1:6f:0e:a2:f3:6c:ff:15:
                    c0:a8:35:f2:85:4d:51:e9:34:76:38:55:0b:5b:8d:
                    75:49:ee:3f:3b:69:f1:6b:83:51:86:a6:8a:13:fb:
                    26:7a:cc:b6:7f:89:bb:51:55:c8:df:59:77:39:0b:
                    fb:b2:6c:6c:78:67:cc:6b:3b:ef:9b:92:e1:b6:f2:
                    35:9f:68:92:c7:ed:8f:c2:fa:a3:17:c9:32:25:00:
                    f4:5e:c3:07:91:ed:16:28:fa:05:fe:2a:9c:18:d2:
                    6e:2c:1c:b5:71:2a:73:81:4c:11:e4:ab:26:09:ed:
                    8b:a3:77:d8:34:8d:e0:e8:25:57:96:45:51:24:68:
                    1b:c7:eb:28:08:d5:13:c9:9f:78:43:4a:c5:41:13:
                    4b:19:1a:25:62:9f:93:de:fb:46:64:11:84:12:6b:
                    b3:97:a7:f8:41:c6:47:63:da:38:d7:f0:32:10:c1:
                    39:6c:90:b1:e3:cb:fa:95:97:bb:35:bf:a8:88:d7:
                    3d:6c:0c:42:45:3e:4a:dc:12:32:30:56:f4:9c:5f:
                    2a:fe:f2:e8:d0:f2:fb:6f:9c:e1:07:0d:b0:ed:2f:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:80:0E:DB:47:94:0B:FA:A5:78:05:2D:10:AF:26:F0:FE:0E:C8:D1
            X509v3 Authority Key Identifier:
                keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:39:79:c4:bc:ea:0b:1d:a1:8d:ae:8f:87:83:ab:35:30:
         7a:19:65:74:94:45:9c:ec:26:7a:7a:26:ec:10:98:0c:ff:e3:
         82:68:1c:ee:ee:27:02:6f:88:cb:5a:4a:0d:51:0b:03:95:8e:
         7a:21:c4:bb:46:6b:40:54:13:3c:a0:d7:4f:44:b0:b8:1f:a8:
         1f:f4:54:19:b3:c2:69:0c:66:44:e1:bf:df:4c:79:a4:54:31:
         f4:74:7e:17:22:07:63:d4:5f:e4:5a:6d:eb:80:c3:18:31:32:
         e6:85:27:96:dc:6f:18:71:04:23:70:84:3e:eb:0d:8b:ea:4f:
         91:27:9d:df:ed:a6:a8:7b:84:3e:eb:49:bf:11:9c:ea:99:13:
         da:2f:b4:5b:d9:08:c0:90:71:c5:cf:ce:15:09:8f:cc:c8:d3:
         a6:27:5a:df:77:1a:3f:c5:12:88:fd:76:fc:fa:9e:79:53:83:
         91:4c:41:12:42:55:0e:c6:37:21:3b:7d:57:15:5b:9c:28:ba:
         62:39:60:5d:d3:be:58:06:87:1c:e5:f5:81:3b:2b:7b:b6:b8:
         f9:d9:7a:65:de:0b:3b:36:4a:2c:9a:29:08:d6:bd:35:87:ed:
         1c:b6:d7:cc:22:4a:90:e1:7f:72:72:23:9f:b0:ba:f3:54:d6:
         a9:5b:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:49 2026 by rpki-client