Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File:                     12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier:          oD65S/NfrskEg4hz08/AB3tuVxxuxSa96WoP9qhKIdY=
Subject key identifier:   51:FE:84:55:A3:16:BA:1E:E2:44:90:7A:BB:D3:AC:DE:21:72:56:4F
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer:       /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial:       019CABD97ADC6AE8F07BE44D0A56C2F4D690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number:          1856
Signing time:             Mon 02 Mar 2026 00:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:22 +0000
Files and hashes:         1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: qSfMPdNj7k9sEMtCwPFUseo9fFTMbvj6QdQyxJSpbZk=)
                          2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:7a:dc:6a:e8:f0:7b:e4:4d:0a:56:c2:f4:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
        Validity
            Not Before: Mar  2 00:01:22 2026 GMT
            Not After : Mar  3 00:01:22 2026 GMT
        Subject: CN=51fe8455a316ba1ee244907abbd3acde2172564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:9e:36:2d:15:39:55:79:5f:3f:1e:68:de:
                    17:a2:cd:12:d7:72:7d:76:bd:d8:f0:60:79:87:6f:
                    a8:52:eb:fe:91:32:44:cc:2d:81:6e:f5:82:14:9b:
                    48:84:f8:7c:63:b2:d9:b4:2e:8c:ab:3f:1f:ec:5d:
                    da:a7:53:59:04:ba:be:17:1a:21:a2:dd:43:9c:44:
                    f3:ea:6b:86:d8:a5:f5:88:0a:cd:9b:64:b4:2b:38:
                    c3:7b:51:8d:f3:f7:d3:f7:ed:4a:7e:d3:4b:6e:ab:
                    de:74:f0:b6:6f:2f:9a:08:6d:5a:51:8f:04:18:6c:
                    82:db:d1:cc:62:b6:28:e5:22:79:dc:8f:13:44:9b:
                    5a:ff:8b:e7:7e:7c:fb:d6:da:ac:ba:ba:c6:ca:05:
                    e0:dd:34:3b:26:5a:4f:7f:fa:67:cb:35:de:e0:17:
                    4c:aa:45:3e:e6:81:17:88:88:5e:45:4a:09:5e:9d:
                    7c:3e:14:1e:95:3d:a0:8b:77:64:a4:20:fa:f2:f2:
                    a3:fa:b9:93:b6:a9:06:5f:cc:a6:ca:a6:c7:a4:b7:
                    09:e5:dd:50:2a:9e:db:2f:c3:cc:7f:b0:e1:84:7e:
                    62:f3:62:40:54:4c:71:b7:c2:85:5a:5f:fc:c4:85:
                    28:f7:ee:a8:25:cc:5e:e3:f4:95:83:28:7e:10:e6:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:84:55:A3:16:BA:1E:E2:44:90:7A:BB:D3:AC:DE:21:72:56:4F
            X509v3 Authority Key Identifier:
                keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:71:02:bc:fe:82:99:53:e7:4a:b3:b9:78:1b:1a:24:ce:4a:
         12:a3:98:9d:1d:22:84:c6:5d:f4:c4:5a:f3:38:ba:d0:72:e9:
         08:4d:3c:c9:21:f6:11:40:81:42:22:8d:01:bb:5a:0c:36:83:
         d6:12:b6:dc:dc:de:0c:28:1d:1e:ec:c1:6e:33:e0:8a:19:6b:
         50:a8:73:da:1e:c5:96:4d:7a:a4:2a:ca:ad:9a:13:46:18:3b:
         b0:0f:14:64:23:5b:92:c9:6f:6a:77:86:8b:81:60:87:b2:e5:
         0c:00:31:f6:5a:de:ac:8c:2e:70:15:fe:11:02:7d:83:17:e1:
         68:1b:1d:8f:14:7f:88:2a:be:4f:18:03:58:1e:e4:1a:2d:bb:
         ce:4a:56:e9:74:48:15:4c:99:3e:4d:1c:c6:e1:f7:d7:50:4f:
         77:a5:97:8a:61:be:66:d0:ec:29:4d:19:cb:4c:5e:15:42:ea:
         f6:50:ba:76:c9:e8:66:28:f4:cd:0f:09:80:bb:f3:a6:aa:d4:
         50:b5:9a:dc:e3:82:47:fb:09:f6:07:51:b6:af:2f:f0:d9:e4:
         7e:f8:fa:e7:59:43:30:eb:0b:81:b1:2b:6b:18:15:54:5b:27:
         45:b9:9d:d5:ea:f9:4a:8c:33:d7:ab:34:b0:12:f8:40:0c:d9:
         62:fa:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:55 2026 by rpki-client