Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          vUm7mW1kyAB7Xj1RsT3CBV2gMTzB/K7HRVp2jOVIKsE=
Subject key identifier:   CC:E7:3B:71:FA:26:B5:14:03:B7:6F:FD:80:B0:DD:12:57:E4:D7:45
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       019CAC106D78ABFAD653824C7195DEA87923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:23 +0000
Files and hashes:         1: r9eaNKOzK8PPUei6RdKb9LkqhTI.roa (hash: +R7LC8z04wYSjkyWe1Pk5HhKfodwp2zyyiW39xvrzog=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: dXRRE2Yt2AArqRzWviswBE9H4FH6f+udt2JCcm4yIxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:6d:78:ab:fa:d6:53:82:4c:71:95:de:a8:79:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: Mar  2 01:01:23 2026 GMT
            Not After : Mar  3 01:01:23 2026 GMT
        Subject: CN=cce73b71fa26b51403b76ffd80b0dd1257e4d745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:cb:b1:d6:a9:27:6f:4e:b4:3b:6f:73:f3:
                    a0:67:25:54:2d:be:07:6a:f5:72:ef:1d:83:98:ee:
                    41:d6:47:6a:3b:d3:ca:53:35:26:66:6a:ee:36:0c:
                    ba:36:6f:3b:34:49:fd:91:fa:85:c7:7f:ef:de:cf:
                    c1:75:9e:24:bd:2c:5d:97:52:79:59:29:18:64:84:
                    97:83:5a:39:9e:0d:26:e5:61:6e:7f:f4:7d:99:77:
                    de:59:f6:b0:11:c4:7e:ea:5d:f1:b5:80:d7:31:2c:
                    ff:d3:60:f2:de:37:d7:e2:bc:92:2d:cb:0a:40:a5:
                    28:87:0b:d2:a6:4e:a7:2d:b1:37:b7:d7:48:42:89:
                    66:53:39:58:3e:90:68:36:88:13:b8:92:e1:2e:2f:
                    20:dc:96:79:b0:97:9a:39:c9:52:fe:d3:f3:ea:a5:
                    11:4e:05:74:27:af:2c:c9:5a:e8:11:4d:08:7f:b7:
                    10:e9:e7:8c:9d:a8:75:51:e3:10:fb:c2:ac:af:69:
                    74:a1:9d:6a:ae:e4:98:1b:ba:fc:59:75:12:35:48:
                    cb:4a:c7:65:6e:62:ac:7b:66:fb:f2:be:4a:a0:ca:
                    33:96:a0:3b:53:2b:ab:f1:7f:9e:e2:9d:4e:a1:e3:
                    d6:e1:99:4d:15:72:77:c2:a2:ba:d8:71:a9:4a:bf:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E7:3B:71:FA:26:B5:14:03:B7:6F:FD:80:B0:DD:12:57:E4:D7:45
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a7:41:2f:b0:1b:0c:5d:ed:86:92:de:4c:b0:18:9a:e5:ad:
         26:dc:40:bd:9c:09:2e:f3:dc:64:de:16:cf:91:e9:03:c1:fe:
         1e:28:1c:9f:30:22:23:44:de:fe:32:7d:c3:fc:7d:1e:2d:4d:
         61:d8:ef:db:fb:5d:20:51:26:eb:73:f3:b2:5f:c9:1d:cd:ce:
         4f:d9:de:1e:dd:d0:04:62:ab:46:cd:75:a8:88:1a:3b:2b:34:
         ff:98:e0:0c:9c:0c:c4:82:da:17:f9:b2:ef:47:5c:da:16:3d:
         9b:6e:56:93:80:b9:be:b7:76:be:00:de:94:71:71:a3:e7:ab:
         f9:81:9b:bd:b6:f2:6f:e4:ef:d5:0c:ad:90:e7:5c:b6:b2:8f:
         b9:83:51:9b:76:46:08:34:f1:67:c2:ce:59:04:29:a3:df:cc:
         92:fa:f7:1a:e8:c3:92:fe:0c:c7:0a:9b:b1:54:60:2d:24:4b:
         6e:e7:7b:97:e4:85:09:a6:73:47:c2:4d:a0:1b:a8:c3:81:23:
         a2:75:a1:f2:d3:ef:cf:a8:94:54:3a:5c:e2:c7:c8:a5:a0:b0:
         54:dc:e6:56:2e:22:e4:d0:88:20:f6:45:de:6f:f6:af:55:fe:
         a7:77:97:50:ba:21:4d:47:9e:34:2a:fb:e7:e5:20:fb:58:75:
         61:67:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:40 2026 by rpki-client