Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File:                     eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier:          cQLRwGGsEYyO2UHsbjy8gEuatvYGjFTkCy6Gbz0geX0=
Subject key identifier:   D9:80:09:E3:57:71:66:9E:C7:F4:98:DC:C9:CA:8D:24:A6:FC:75:57
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       019CAA582FF25832B7328FEE3F55A5BE65D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 17:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:31 +0000
Files and hashes:         1: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: en3GJ6uwPM5kQr1oOayaqPVSCAmfmcxNMmHOZjcoICI=)
                          2: m3YFLRolOJzOKxQ9tZfTdlSKifw.roa (hash: i5pG82cl0NYlQscJwoNQNnDgodQ3zb/qtbRnFjtDuso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:2f:f2:58:32:b7:32:8f:ee:3f:55:a5:be:65:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Mar  1 17:00:31 2026 GMT
            Not After : Mar  2 17:00:31 2026 GMT
        Subject: CN=d98009e35771669ec7f498dcc9ca8d24a6fc7557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:bd:3c:c3:1d:5f:86:b9:b6:0a:09:eb:c9:
                    ca:82:09:f3:95:7a:df:1e:1e:a9:ff:f7:58:6c:f9:
                    ba:02:27:0d:e2:e3:99:42:b0:4a:b7:4c:51:15:8c:
                    cb:48:64:ca:88:d7:3d:cc:76:a8:6f:da:49:25:9a:
                    0c:39:82:f2:6c:81:fc:94:a0:e4:16:68:c0:e4:60:
                    81:8e:13:97:df:b0:72:5f:33:b4:fa:87:31:5a:fe:
                    8a:d8:5b:d2:87:89:f2:d5:2c:33:42:f6:b5:bd:54:
                    d4:41:99:bc:60:af:cc:f2:69:60:79:9e:44:ac:61:
                    b7:0c:14:50:fa:43:16:98:96:42:99:dd:4a:c9:35:
                    0e:13:db:a4:18:d6:01:5f:0e:25:98:9d:ba:d5:73:
                    f3:3a:ff:ec:07:3c:86:7b:b0:0c:41:27:dd:da:98:
                    7d:8c:88:2b:01:fc:a6:9a:25:cf:31:4a:7e:30:db:
                    aa:13:78:78:d3:b1:7e:87:a4:d6:3d:1a:7b:a6:d4:
                    e5:19:c3:58:00:f8:61:7b:a6:ca:87:57:41:44:cc:
                    c1:fc:33:92:f1:e3:ea:b2:38:8f:5c:81:38:e9:25:
                    fd:54:fa:e3:f8:85:1a:ff:91:6c:03:ff:14:b3:c3:
                    18:49:8a:d7:12:4e:09:de:a9:98:cc:76:49:45:62:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:09:E3:57:71:66:9E:C7:F4:98:DC:C9:CA:8D:24:A6:FC:75:57
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:4a:55:8a:3d:eb:77:e6:24:ac:9c:74:27:18:f6:3b:81:
         9c:f6:55:c1:74:8f:d9:e6:ae:fa:db:68:45:63:d4:f0:3e:6e:
         f3:c1:bd:ac:54:14:39:19:90:cf:38:13:38:63:e1:34:27:e5:
         2f:36:23:ea:34:57:d6:56:97:8b:bd:ef:8d:37:16:c0:2a:3a:
         61:18:e5:f3:eb:59:5c:37:30:0d:f4:16:8e:69:bb:46:ec:6a:
         8e:79:ff:33:dc:b2:61:40:b9:bc:97:bb:f5:f7:07:63:80:9f:
         49:88:17:26:e1:b8:6c:3a:24:47:42:c7:47:a3:9e:10:52:db:
         9a:ee:b4:c5:a3:fb:f6:d7:b3:d1:a5:78:47:f8:bb:f1:1d:88:
         df:08:00:7b:86:cc:ff:1c:fc:95:94:6c:67:c7:c6:cc:b1:74:
         7d:10:73:20:b5:c9:d2:24:65:83:3a:49:a1:e2:04:ef:13:99:
         df:b0:95:41:66:5b:64:3e:8c:ea:5a:c7:96:b3:3b:53:28:3c:
         4c:b0:d8:74:fc:e9:6a:50:74:a5:62:2d:51:b7:f0:ef:50:9d:
         a4:77:99:7b:d8:0e:c7:c6:47:64:5f:5a:af:86:1d:4d:18:1a:
         e3:f1:45:68:47:4f:4c:48:b6:f3:82:0c:4a:c8:bc:b9:8c:4f:
         db:34:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:37 2026 by rpki-client