Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          2OU9tg1PFNXLpC1xgaerdEcEHjqRRgQ3TwQ4p/K4WW8=
Subject key identifier:   E3:C2:C8:7D:76:73:80:19:99:B0:04:01:EE:F3:B7:3D:45:5E:20:6D
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       019CA8336B1414B05FFA733040F49703C87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          1880
Signing time:             Sun 01 Mar 2026 07:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 07:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 07:01:07 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: vOZSMVKlkYnOiTtwIopAVYSvoCJr5Q9jyMv48G8r2Z8=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 3ZTe0z5h14eRLH112ekGfjQZw24.roa (hash: pZ0L6Rvz7wOe/ZQ8YJjvvmKeTWfIEcRf1XKhW6PXSPA=)
                          4: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          5: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          11: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          12: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          13: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          14: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          15: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          16: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          17: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          18: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:33:6b:14:14:b0:5f:fa:73:30:40:f4:97:03:c8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Mar  1 07:01:07 2026 GMT
            Not After : Mar  2 07:01:07 2026 GMT
        Subject: CN=e3c2c87d7673801999b00401eef3b73d455e206d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:0e:ae:3f:69:a0:80:2e:7d:26:dc:49:13:
                    18:0a:46:9d:ed:72:6d:a6:7e:01:0e:4a:a5:7f:e1:
                    50:be:75:2a:b1:ad:2e:79:2d:13:84:65:56:6a:89:
                    9e:49:3e:c1:56:8c:ae:16:63:4a:df:3d:7c:4b:c1:
                    77:bf:13:29:8b:d8:44:c4:67:62:c4:7c:d8:8f:8d:
                    a0:86:2d:54:e9:97:2a:14:08:33:5b:a3:47:a0:10:
                    7f:33:6b:81:3a:a8:1e:5c:9d:0e:b6:22:2f:f7:3f:
                    39:07:fb:8c:49:88:1a:ee:3e:da:a6:40:3b:98:c2:
                    27:75:27:88:11:25:bf:a7:35:80:3a:3d:40:6a:e5:
                    be:c6:fe:df:d2:b6:20:69:1e:95:83:fd:3e:3e:c5:
                    4c:55:93:7c:92:f4:96:9a:af:77:ec:fe:9d:8a:8c:
                    f7:29:a3:54:1b:eb:09:88:f3:ec:39:1b:96:5d:93:
                    66:01:8f:32:9a:86:bb:5e:15:35:0e:fb:6a:b1:54:
                    cf:d2:85:6e:d8:9d:67:0a:97:38:66:bc:38:de:ab:
                    1d:31:26:09:36:6d:54:d3:17:74:af:a5:f9:7c:35:
                    a6:8b:39:21:e4:a4:8c:6c:6e:a0:ce:30:d7:46:60:
                    4d:54:8c:f1:ee:6e:54:bc:fb:00:87:5c:7e:19:5a:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C2:C8:7D:76:73:80:19:99:B0:04:01:EE:F3:B7:3D:45:5E:20:6D
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:32:ba:aa:29:3b:1d:0b:ed:1e:5b:ff:6d:ba:f6:09:4a:
         3c:88:2c:9d:64:7f:13:f7:63:4e:56:d1:76:a3:d9:57:bc:8d:
         f4:0a:6f:28:06:75:73:3c:1e:cf:dc:cb:3c:a0:d4:bd:cc:6c:
         03:20:bf:05:88:4e:80:3c:68:bc:c1:f0:7d:48:e5:83:b0:dd:
         f1:90:6f:40:ac:08:a7:de:7b:eb:5c:0d:4d:4a:c2:6d:a1:d0:
         c3:5d:35:d7:27:23:de:7e:75:e7:a4:0a:08:a4:8b:29:11:da:
         3f:6e:87:b7:c3:39:a5:f6:da:02:64:04:2d:13:bd:e3:26:ab:
         af:d1:c7:8c:9c:1a:f3:d2:5b:2e:53:78:9b:c0:79:61:0a:fd:
         6b:b4:3c:6e:df:82:13:9f:c1:ab:e5:5e:04:e3:70:27:c0:b5:
         c8:40:74:6f:98:5d:e9:58:3b:24:05:8f:f6:81:2b:1e:b3:25:
         e7:29:aa:80:f7:dd:67:3e:49:f4:13:b1:d2:90:84:64:3f:bc:
         f3:97:b1:33:b4:ad:b8:15:b9:76:0c:8b:2e:e1:f0:7a:0b:f0:
         25:0f:00:b2:af:f8:3d:06:c6:06:1f:06:54:21:e3:38:91:32:
         17:ec:dc:88:23:15:f1:72:a3:1f:a9:2d:5b:c9:e5:43:94:1b:
         4b:db:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:17 2026 by rpki-client