Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          hpWtvx3Em6Hq3Dd6jJhgqwJR2BZ/nBk6PAjo3UqMjUE=
Subject key identifier:   5D:5D:F6:DF:50:81:34:9F:1A:AF:72:EC:FE:92:51:B6:7A:FE:88:A7
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       019CAB341568992462C5C58C57C859DB26D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          1860
Signing time:             Sun 01 Mar 2026 21:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:43 +0000
Files and hashes:         1: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: 8VsbUb62oia8jO5mrlXWXQq+/Ol9KoJoOysfj1uJ3FA=)
                          2: 13XDGJYyNR2DoNt3I63wL8U0Jzs.roa (hash: I+JS8FII02pQo9N3kTh18PHz112YKE00khkm+cip7eA=)
                          3: 63yOiYKwU7JqEfSC9NxVJ01fCWk.roa (hash: K4Ob2YWWp3LxgFe3+6MIi9FKOa85HqimBOJiSHujQxY=)
                          4: 6nEB7u7VDBwJvvErhhk_sp8HgHM.roa (hash: SyBKloheaGBrGvFtFMvv0iZL+4Dv+JFkW0KebHTTw6E=)
                          5: 9H1b9QtJvvO5Q7tBMNvVVoE03o8.roa (hash: 8xeDQJquFgw+UoHUSmYV/m/pwUj8nT1iQkun0bxE7+Q=)
                          6: FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa (hash: V5FzneMXIFpEivxgGPkmTl20CGF3hlX/oPutyNatcaM=)
                          7: WS24_ZfdS-p841fXys78kKEcHFE.roa (hash: mdNWTDkBQ1LOAKpfMoKowipt1skh6RMzRxFFxzvaz1g=)
                          8: cohsG3SQlcWk1HwXz_9_V1W-DnM.roa (hash: Z0rTIgtHw2j6D7sRMbadoj6J39N2b5eJp5yHD6/XmPU=)
                          9: dIH6BysLhLi3YbgR32hD9CEC-Rc.roa (hash: EKTQSkYkTx/FLfYfj9JDL2Xp6XAMkpHk8crmyAFs8gY=)
                          10: dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa (hash: +CS62sl2ChgX++5UXeYQ9A8BJy1JzvdoEucP6DULUqI=)
                          11: gjckOvmNiIbZmA-TT11ORA--iTU.roa (hash: TpmN78WgePeN399lIDAzsZi1InWuYIsnhRRV8YOoTWc=)
                          12: vF0VYWecbrRxbZK9c56uBdCo4ik.roa (hash: GSJ2HtyoNkdo5nkx3DTM8Av/uYVGzIaDwGAeMRt+F5E=)
                          13: xmMPaUT6o6zuoGJkONl9ukiVCBw.roa (hash: LEqoxiigz/XFOxjw1QTNnhB5q/85VzWFuwng23PfuYc=)
                          14: xrmNcJYM7IC02cwip42NZ9MYOJI.roa (hash: b6C56Rw+1/MSwcd/+Js8l5OXj80gDxqiFimnPx3BaLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:15:68:99:24:62:c5:c5:8c:57:c8:59:db:26:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Mar  1 21:00:43 2026 GMT
            Not After : Mar  2 21:00:43 2026 GMT
        Subject: CN=5d5df6df5081349f1aaf72ecfe9251b67afe88a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:a4:36:dd:a2:a8:df:89:9a:21:d8:21:b0:
                    02:77:d4:2c:94:99:29:f3:d3:9f:f6:92:2f:28:1d:
                    a7:45:c3:b8:1e:4a:df:8b:68:e7:8e:4c:5b:b9:47:
                    1a:1a:63:6e:84:18:0a:f7:ab:df:e0:2e:1f:6a:47:
                    16:18:54:be:4b:08:2e:7c:8a:bf:7f:73:ef:c7:ec:
                    3b:af:96:5a:e8:53:aa:46:e0:0b:6c:d5:0f:f1:1f:
                    ac:33:a7:68:71:12:2a:7b:13:91:2e:e7:85:4b:5b:
                    ba:20:f7:a4:ce:9a:0f:a7:20:c2:0f:27:ad:3a:40:
                    71:8d:58:8f:cd:c5:4d:10:7e:a3:a5:30:1b:52:fe:
                    73:a9:60:23:04:95:43:e5:ae:f9:e6:4f:61:47:d3:
                    88:d0:cf:27:f2:7b:b9:c2:6d:3b:46:f6:35:18:93:
                    ae:81:ef:24:11:90:72:58:8d:68:ab:1d:b3:1f:62:
                    57:ed:ce:04:7d:ec:92:4c:63:d7:5a:09:96:ab:d5:
                    e1:85:5a:f0:c7:1d:06:79:6e:c6:04:83:89:ba:54:
                    17:58:13:4e:d3:0b:4e:84:e5:f2:58:aa:a8:2b:53:
                    de:89:f4:90:68:3f:3a:a7:0a:40:f2:6b:28:0f:4c:
                    26:ce:9c:40:8d:a9:93:30:0c:a9:ae:18:ca:4b:da:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5D:F6:DF:50:81:34:9F:1A:AF:72:EC:FE:92:51:B6:7A:FE:88:A7
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:10:05:5c:63:6c:5d:c9:ca:fd:ad:55:c8:86:d3:71:96:6f:
         9e:42:33:e7:ec:07:a2:14:94:07:e5:e6:2f:12:9e:17:26:37:
         63:f0:b8:1b:38:0b:bc:00:d6:9d:fa:29:63:18:d8:e3:1b:81:
         32:35:5e:c0:8f:fc:b9:87:f1:28:3f:ef:4e:b6:25:f8:13:81:
         8d:b5:55:1c:f8:6f:7c:e3:30:7d:35:44:c5:73:ae:d6:2b:86:
         6f:61:5d:e3:4a:53:dc:64:86:40:02:93:19:31:f5:30:86:71:
         2b:d7:d8:7e:eb:8a:d8:05:ca:41:d5:b5:f2:80:ee:af:6c:ed:
         11:0b:46:dd:8f:7b:33:0d:d7:91:3f:c1:23:37:93:65:4d:37:
         fa:90:eb:3b:5b:40:f8:19:03:b9:9c:bd:bd:12:59:e2:15:d0:
         9a:3d:3a:29:30:27:9c:ea:03:b6:3d:04:b2:30:8d:e8:3b:72:
         d1:75:2f:4b:01:2a:57:30:61:db:86:b0:be:d7:a1:7b:6b:e2:
         5b:1a:1e:60:50:04:c5:90:0b:84:44:bc:b9:21:d4:a0:eb:35:
         e8:b7:01:b0:03:2c:07:3e:c6:07:2e:15:27:c2:be:9c:7a:cf:
         25:76:49:1e:3b:61:d9:5c:20:cd:da:c3:4d:42:07:d2:1a:79:
         5b:b3:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:16 2026 by rpki-client