Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          1AHjrrQy0nHhhoxoRocbmyZrOPcBEyZWYf2fvCqRwik=
Subject key identifier:   F2:0B:1F:0E:D9:BD:84:FD:6D:18:42:6B:7D:87:D3:D1:BA:A4:E9:A5
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019CAD594D196681EFD4ACE5572071CB5F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          044E
Signing time:             Mon 02 Mar 2026 07:00:36 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:36 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:36 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: NVBjDjbXejf3WvAWJwRdTloV8TM9TWHrBT2h5/SfMas=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:4d:19:66:81:ef:d4:ac:e5:57:20:71:cb:5f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Mar  2 07:00:36 2026 GMT
            Not After : Mar  3 07:00:36 2026 GMT
        Subject: CN=f20b1f0ed9bd84fd6d18426b7d87d3d1baa4e9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:0b:b2:97:39:be:b8:ca:19:8e:07:cb:22:
                    f4:9e:8d:b9:9b:17:3e:43:04:61:28:56:b7:b7:4a:
                    a9:c2:f7:14:f8:f9:3a:e4:51:32:1a:ff:1c:22:3f:
                    4d:1a:d8:44:0a:b5:ba:09:54:a5:96:fc:ae:5b:0f:
                    23:a3:6a:73:6f:c6:97:dd:fd:fe:9e:8d:ae:b8:0b:
                    0d:cb:f6:36:f0:78:e3:08:c5:6a:02:63:93:a5:3b:
                    3b:96:60:ea:8b:f0:af:66:e1:62:49:76:81:79:b0:
                    9c:53:6d:c5:16:54:d5:d9:40:a5:90:82:76:60:12:
                    af:08:df:96:29:21:c5:ec:61:96:4c:8e:55:56:3d:
                    58:75:22:75:d6:95:d7:64:63:cb:8c:e6:dd:6c:56:
                    a8:66:f9:0f:81:21:ea:91:93:8f:c0:44:72:d9:9a:
                    07:cf:aa:94:0a:6a:68:58:20:ad:0b:df:cf:5b:84:
                    4e:eb:24:1c:11:3e:c3:32:e8:26:69:31:96:07:6a:
                    3b:bb:88:7c:8c:85:60:fc:9c:18:de:fa:2b:c7:bd:
                    0b:44:21:d6:60:b4:c2:49:d6:fa:b7:4f:a0:b1:f8:
                    60:9e:ba:bf:04:fa:d2:ad:2d:78:a2:fe:24:9b:ac:
                    b6:fe:c0:d9:20:80:10:76:92:33:0c:2a:ef:e3:6b:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0B:1F:0E:D9:BD:84:FD:6D:18:42:6B:7D:87:D3:D1:BA:A4:E9:A5
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:ab:a5:6f:28:60:72:d3:53:87:46:83:5f:23:c2:c1:ee:
         c3:0e:7c:3d:2f:33:d4:78:83:d3:53:87:7f:e2:60:78:74:66:
         0f:61:f2:b9:fc:c7:15:51:80:72:dd:4b:21:a1:80:2d:c6:4b:
         89:44:6c:29:02:73:ba:ac:13:92:a6:9f:49:17:db:44:c4:ef:
         f0:d9:d4:c3:da:3e:7d:67:a8:4b:b5:1a:ce:be:56:6d:90:6f:
         cb:cf:4c:d1:cf:0f:8b:6b:e3:a1:5a:bc:5b:b3:da:7e:0e:7c:
         c5:9b:4d:ed:94:22:72:a5:d0:09:34:eb:d3:7a:c4:92:05:d8:
         73:c0:14:f7:bb:8a:fd:29:e4:2b:2b:cc:a4:59:18:04:bd:92:
         96:26:06:bb:86:b2:b1:a3:27:a2:7c:7f:b1:01:c8:d7:ef:41:
         8e:60:b4:f7:58:27:23:aa:83:d9:43:58:97:0a:e7:bb:2e:3b:
         bf:29:ac:0c:8e:5a:e8:84:1e:a6:6d:ee:b5:8d:5e:3b:99:3c:
         2b:18:7f:e4:61:d7:1a:01:38:00:b1:99:bd:65:cb:32:ba:73:
         46:2e:d9:1d:55:74:77:8c:46:b5:e0:73:c8:41:be:19:0d:d3:
         e2:ba:b1:6b:34:c5:87:ae:60:d8:26:07:37:0a:53:55:23:31:
         f8:0f:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:45 2026 by rpki-client