Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          +xm3xgoQg8irxlTTY9VXlc6w7Nmpa5ejpSDCahzYqUY=
Subject key identifier:   B3:36:0F:16:04:A7:F1:C5:2F:C9:A2:12:19:06:8D:EA:11:82:84:35
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       019CA8D7B2EDD2FE8D70524039684932C42F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          184D
Signing time:             Sun 01 Mar 2026 10:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 10:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 10:00:34 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: I0maemLLBuDyhCa/l4YdIKHSBlRhI9VQlY7sdAuDcLU=)
                          2: 26QbXt6b5zHilNs1q7yDX1cYMsk.roa (hash: Tt6aUkRO9JUaW0NjcmeQVqAa3xnUCz7lJRJu/2xB7IE=)
                          3: Ezcrtmwo4iwn5JbCMNVESXorExE.asa (hash: QvhpQm5ictpOGI0Idhy4A39NC9Kpsm0fYAvwcjaUI04=)
                          4: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (hash: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE=)
                          5: eU7ipBheHWkpemRqitvR9YpXrt4.asa (hash: jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=)
                          6: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (hash: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4=)
                          7: sk3Ng7M09_merP38zbn6ZinhfyY.asa (hash: Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:d7:b2:ed:d2:fe:8d:70:52:40:39:68:49:32:c4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Mar  1 10:00:34 2026 GMT
            Not After : Mar  2 10:00:34 2026 GMT
        Subject: CN=b3360f1604a7f1c52fc9a21219068dea11828435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:bb:8f:a7:e6:82:39:6f:13:6e:4c:dd:fe:
                    d1:fd:37:ff:42:df:0f:17:62:19:5b:3b:62:3c:9f:
                    1a:e3:1e:09:34:32:cd:7f:a3:5d:22:23:8d:23:ee:
                    bc:45:2d:c2:38:2c:cd:e9:e3:b4:1a:48:34:b4:89:
                    f1:a1:a3:09:22:25:71:e4:88:b3:4a:06:b7:b5:a1:
                    69:3c:91:fb:cd:95:ae:93:0e:d2:64:7c:cc:50:8d:
                    2b:0e:00:53:67:a9:96:b3:53:21:4a:ec:35:9a:14:
                    4b:a5:2b:2d:40:27:85:f5:3b:fa:0b:fb:48:d5:e1:
                    a2:ef:a2:07:2c:e2:31:46:cf:c3:33:c1:00:aa:e1:
                    b3:3f:4c:9d:27:c1:83:bf:6b:b3:aa:68:87:85:8a:
                    b1:77:95:6a:4a:b7:a6:37:5d:d6:34:aa:fb:aa:b9:
                    67:b1:14:cc:24:fe:2f:ef:cc:c9:60:3f:d3:4f:dc:
                    f8:79:76:89:17:ed:13:2a:f6:a1:07:df:a9:6b:85:
                    16:85:54:be:ed:58:f2:e2:a0:14:c6:7a:a4:6c:7c:
                    ee:8c:3a:a3:3e:27:bc:d7:95:d1:45:32:d7:53:2d:
                    32:0e:9c:97:c0:94:b0:4b:30:53:d8:c4:1e:bd:41:
                    fc:49:71:46:49:b2:a9:d4:a9:ad:71:97:44:9b:9b:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:36:0F:16:04:A7:F1:C5:2F:C9:A2:12:19:06:8D:EA:11:82:84:35
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:23:f7:b2:13:6a:f5:ae:6f:2c:17:35:fc:57:95:bf:c1:2f:
         c7:a0:56:58:10:19:a3:af:9f:3f:89:bc:59:f7:69:40:ca:4a:
         42:14:f0:3e:8a:3b:5f:9b:e0:69:f4:de:99:d6:5f:d5:b9:66:
         65:b8:60:44:35:6f:5e:42:46:18:4b:93:52:7d:42:09:5d:39:
         3d:9b:a9:f6:39:94:17:5a:31:10:c4:17:4f:24:60:06:e4:80:
         9a:b3:c6:ab:f6:2d:77:21:be:93:91:39:cc:3f:f9:11:1c:be:
         eb:7b:d2:74:a1:d0:8c:6c:db:34:d6:93:21:a4:c2:05:2c:6a:
         93:5a:d4:71:ab:75:6d:83:37:dc:b6:e8:82:89:1e:86:d4:40:
         8f:37:1a:a8:fc:b2:18:52:9e:45:14:9f:f2:e0:77:74:4c:39:
         f5:f5:3e:e9:8b:d0:11:8a:61:c9:fa:0f:b3:08:5d:b7:f2:2a:
         3f:8e:81:b5:12:36:d3:98:fd:45:6c:d1:aa:3b:51:cd:c8:f2:
         23:01:d9:de:8b:03:c0:96:df:23:45:94:aa:f7:13:e0:ed:72:
         ae:9d:1b:23:48:83:4d:10:26:31:ba:00:e6:00:dc:e2:83:c7:
         56:9c:9d:4f:1e:3a:a2:14:3d:02:ec:f3:d3:70:3b:69:0c:72:
         9e:c9:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:36 2026 by rpki-client