Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File:                     cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier:          Cqdw+DektPujRLOqR+EqCBNFmT8yMr2luNp3ahTrjg0=
Subject key identifier:   19:38:2A:44:30:83:6C:95:8E:9E:2F:D4:E4:6F:AD:E0:83:CA:AD:99
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer:       /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial:       019CAA58C8881DE7DF6C81DC0ED9AFE2CB40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number:          1449
Signing time:             Sun 01 Mar 2026 17:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:11 +0000
Files and hashes:         1: T-Qpf2laS9B4oqA-l43pYYoUJBk.roa (hash: t46DpvrWC/vui809tnn3ajl3f+hjX2aU4WQg5zWnjoA=)
                          2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: QJb5V4X1tKzL9V3qRsnzDUasBhT0MKiaEwdAHGYNbHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:c8:88:1d:e7:df:6c:81:dc:0e:d9:af:e2:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
        Validity
            Not Before: Mar  1 17:01:11 2026 GMT
            Not After : Mar  2 17:01:11 2026 GMT
        Subject: CN=19382a4430836c958e9e2fd4e46fade083caad99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:7d:9e:ca:e3:d3:6a:e3:9d:e4:b2:33:a5:
                    1b:7c:90:d0:81:ff:c1:ed:0b:c8:2b:1f:59:ed:6c:
                    a2:c9:8f:15:94:78:52:09:d7:30:cd:c8:f3:69:40:
                    98:2c:47:aa:45:0d:1f:c2:e0:c9:3b:b2:19:b3:6d:
                    67:10:9d:cc:22:53:2e:83:5e:35:ef:51:90:fc:d8:
                    fc:24:24:76:e0:7e:22:7b:13:70:d2:3b:57:82:ae:
                    fd:5d:06:0c:71:0b:c5:93:b0:d2:8e:92:93:fb:b2:
                    31:35:fb:7f:0e:c7:5c:55:1a:90:0d:96:1e:b7:46:
                    6d:36:20:3c:10:8e:6b:e8:f0:1a:38:8d:07:78:10:
                    36:5f:2e:b7:e9:59:50:71:c4:1e:ed:0f:71:9c:9a:
                    bd:ea:cf:b4:73:11:6e:59:94:c8:26:85:af:c7:17:
                    c8:6f:b8:3b:bd:f9:d8:bb:ad:74:0e:42:f0:d5:4d:
                    b0:a0:b8:54:91:44:45:0f:76:00:d7:87:0b:cd:9d:
                    b4:61:7d:68:cf:3b:2b:88:3d:76:2b:71:dc:68:2c:
                    c8:1d:fd:36:97:b8:a7:1c:e7:5e:00:9b:0c:df:51:
                    84:88:3f:3b:a7:2f:fc:98:50:da:21:57:dc:19:f4:
                    c7:71:cc:af:ee:ff:da:0f:63:c1:9e:da:e9:b2:94:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:38:2A:44:30:83:6C:95:8E:9E:2F:D4:E4:6F:AD:E0:83:CA:AD:99
            X509v3 Authority Key Identifier:
                keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:f2:ff:50:e7:90:52:27:a9:91:e1:b3:d3:dd:6b:53:d6:
         f1:91:1a:80:27:24:fb:ac:db:74:ba:33:e6:a6:c2:1b:ca:a6:
         cd:68:39:04:2d:44:d0:3f:df:db:0f:f9:3c:83:1b:f8:45:51:
         a3:6f:48:db:13:38:fb:60:7e:69:30:8c:5a:c4:c7:10:99:25:
         15:c3:98:b8:8e:28:c9:f4:d2:57:0b:ae:e4:75:61:5b:78:8e:
         37:f2:78:76:c5:e5:07:88:8d:a7:41:d1:9d:14:02:92:b0:15:
         41:ee:c7:a1:cc:7c:45:c6:f7:0f:02:16:1b:20:74:00:f0:59:
         5c:76:b2:3e:a3:e8:6d:95:3d:31:c3:19:80:8a:c5:46:ed:7f:
         fc:39:c7:a1:b7:e8:35:79:06:c3:f8:8a:9f:ee:c9:18:39:c6:
         a0:f3:ae:25:ea:b4:bf:70:39:95:5f:d2:1a:78:95:5d:90:78:
         9f:47:6a:b5:8b:b0:11:95:33:d3:0d:c7:c4:a0:49:eb:a7:08:
         ca:08:0f:a6:c0:bf:ab:d2:54:77:e6:92:e7:0a:b9:e3:c3:b4:
         d8:9f:72:13:ef:0f:ef:ac:5b:fd:a0:f3:70:e7:ca:26:4e:8f:
         85:c8:15:a2:4b:23:a3:f6:2c:56:36:40:2e:85:22:0b:88:ba:
         e2:e2:aa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:27 2026 by rpki-client