Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
File:                     h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json)
Hash identifier:          1q87sFIwSm/7vu5tJy9N7H/15MpyOW2ShbvcKdMpel0=
Subject key identifier:   75:DC:B6:91:89:8C:0C:42:27:15:2E:E4:2F:D1:61:FD:25:93:38:E8
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Certificate issuer:       /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial:       019CAAFD0290F43D404C6881736332438333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 20:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:33 +0000
Files and hashes:         1: IGMCuKzSRZK6ojrjgQ_lMAFpYhI.roa (hash: mzoE6ZRVGF3GSOdPdeFwn8J6pWu/b3AWXWzYbVkQ5xo=)
                          2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: PskXVhRq/j0MF8eyCH5uVByEyyzxj7RDL2eFlWD9Agg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:02:90:f4:3d:40:4c:68:81:73:63:32:43:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
        Validity
            Not Before: Mar  1 20:00:33 2026 GMT
            Not After : Mar  2 20:00:33 2026 GMT
        Subject: CN=75dcb691898c0c4227152ee42fd161fd259338e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:6e:4b:4b:96:6f:9f:01:aa:0a:58:08:63:
                    70:4d:57:d3:13:d4:70:2b:96:81:fa:d4:b4:46:f8:
                    1b:44:18:c4:25:20:6b:21:58:4d:9e:f4:dd:c4:32:
                    94:4d:df:15:8e:1f:15:5f:15:a4:85:90:fc:90:d1:
                    7c:a9:12:48:d2:67:36:d8:a3:d3:18:3b:16:66:d6:
                    2f:bb:4c:c7:c5:24:8c:3c:54:ff:0a:a7:a5:ab:82:
                    62:d9:19:22:0d:b0:4a:d4:25:1d:ea:eb:c4:09:c3:
                    be:b8:5a:4c:49:2a:1c:b3:5d:e9:33:51:9c:6c:2f:
                    67:0b:e9:05:d5:04:f3:57:6d:64:93:e3:da:aa:83:
                    20:ed:0c:05:a7:58:a1:d3:c0:2f:2d:7b:1a:3d:ad:
                    f7:57:6a:62:d9:c6:77:3a:0d:24:9c:03:f6:8b:dd:
                    74:e7:12:2d:ab:12:fe:d6:ec:d9:db:07:41:62:d3:
                    5d:b3:f5:bb:ef:3c:28:d2:b4:3f:4a:b4:10:08:cb:
                    f0:10:8f:94:01:c2:24:17:60:d6:f1:e4:8e:27:61:
                    47:90:d7:d9:ba:5e:2b:47:77:4a:ab:03:2e:7e:fe:
                    8a:77:97:17:89:79:4d:18:d0:4a:e0:7d:e0:14:63:
                    89:dc:75:48:58:f1:90:4c:d6:d8:d9:8b:52:b5:77:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DC:B6:91:89:8C:0C:42:27:15:2E:E4:2F:D1:61:FD:25:93:38:E8
            X509v3 Authority Key Identifier:
                keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:00:f4:8f:f0:24:e4:3e:3d:92:16:7e:28:5a:fb:25:78:
         73:0b:a8:8e:d4:bd:87:2d:be:e7:f7:ee:6a:ae:79:8d:2a:a1:
         80:81:50:1a:9e:a3:dd:09:c4:66:c1:f1:02:b7:79:02:a7:31:
         dd:c5:eb:c2:7d:54:3c:ed:54:e0:aa:76:7d:ad:00:4e:f6:a8:
         9b:ba:51:c4:a1:29:8e:80:14:c0:33:b3:74:d6:44:36:ce:d6:
         41:26:14:7a:1b:ef:57:4b:ac:5e:58:90:0a:fb:46:bb:20:9d:
         13:88:70:c5:0f:d5:2c:7d:18:be:b1:e2:e1:d4:23:2d:b8:68:
         47:f4:9a:22:7c:37:08:c9:3c:0b:89:20:7d:65:6c:51:f7:0d:
         3f:b1:7a:97:0d:5d:6f:5d:7d:f4:83:5a:ed:96:21:b4:6a:24:
         86:39:25:0e:4b:d1:a8:d8:fb:3e:1e:eb:d6:eb:91:8c:d5:75:
         f5:d6:a5:db:ea:04:57:da:0f:86:c1:73:eb:5d:89:58:7f:8c:
         19:09:83:b6:fe:0e:70:17:48:24:1c:3d:da:25:4f:3f:3f:8e:
         35:b3:24:6e:8f:bb:85:ce:c3:57:60:75:89:80:a2:f4:c9:52:
         63:c0:8a:83:87:ed:46:7f:0b:0f:3f:ec:50:ea:e8:37:ec:39:
         41:ac:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:56 2026 by rpki-client