Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File:                     mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier:          nSa5B7Q9rYVo6CWQzj9CPo8AUzd/NqbNFrxclbinwpo=
Subject key identifier:   66:2A:54:72:D3:48:C3:FC:C9:83:07:F2:E5:A9:D2:C1:40:DB:81:76
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer:       /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial:       019CAC7E60699B2E9EAE4F37E9EBCDC0ED7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 03:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:29 +0000
Files and hashes:         1: H-yVjLNehbZXND4w0DdBNVdmOOw.roa (hash: ICTmsvotmJK1iUZ3KxS7gNW3cwr6Lx/dr2uhczVnraM=)
                          2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: XKf8sH1QhCoaqNrz5MA2EM/hzVdv1C8s2FEDjIM/WVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:60:69:9b:2e:9e:ae:4f:37:e9:eb:cd:c0:ed:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
        Validity
            Not Before: Mar  2 03:01:29 2026 GMT
            Not After : Mar  3 03:01:29 2026 GMT
        Subject: CN=662a5472d348c3fcc98307f2e5a9d2c140db8176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:bf:61:e5:1f:52:a1:b2:f4:d6:fe:8c:fb:
                    7c:dc:1c:54:be:f3:53:df:7b:13:f9:33:36:6f:8d:
                    c2:69:d5:cc:ab:48:a8:b3:34:cb:ec:fc:7b:6a:38:
                    9b:72:55:3e:82:ae:ef:79:5e:c4:b3:3b:40:78:0a:
                    17:23:66:c9:a2:e4:3d:93:df:69:83:3d:0d:dc:ae:
                    09:f5:cd:c6:2f:0f:9f:a2:c4:46:b7:e3:f2:97:88:
                    52:dd:72:96:ae:b9:a7:cb:3d:96:64:9a:ef:9f:a2:
                    4a:14:d7:cb:9b:76:d2:ea:28:98:4d:eb:d9:64:e7:
                    41:0e:94:dd:9d:8f:09:1b:73:88:31:b6:69:e6:7c:
                    b7:f1:5e:28:fe:da:f4:76:18:ba:f3:df:dd:2a:c8:
                    cf:dd:9c:a7:16:46:28:e5:a7:0f:21:e2:a3:69:50:
                    33:95:06:f8:bc:37:e0:0c:04:1e:ed:84:68:63:33:
                    3a:fe:69:18:a8:3e:d9:7f:ab:e2:f7:17:fd:d1:97:
                    d1:a5:b5:d0:40:bf:ea:d6:35:1c:08:f2:83:dc:88:
                    16:61:65:77:01:98:f2:ff:8b:0a:f3:95:ca:57:19:
                    d8:33:d8:c1:3b:8e:8a:ed:9b:0d:52:3f:18:1d:9e:
                    44:b0:89:2e:a3:43:76:01:00:25:83:a1:2e:0d:3f:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2A:54:72:D3:48:C3:FC:C9:83:07:F2:E5:A9:D2:C1:40:DB:81:76
            X509v3 Authority Key Identifier:
                keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:25:ca:2f:9b:4d:e3:6b:80:ef:fe:8b:fd:53:7c:19:d5:2c:
         d5:47:0b:aa:cf:84:f6:71:a5:25:94:ed:3c:1c:d1:2b:a1:3e:
         53:e5:96:02:0f:74:f1:7e:35:ed:ea:44:0f:8f:21:31:c8:b9:
         46:97:2e:e1:a8:12:b8:bf:bc:62:63:46:20:c7:fd:9b:29:eb:
         8a:d7:fa:8a:88:cc:ff:64:db:27:67:a6:71:3c:e4:9a:1c:98:
         c1:e2:a9:86:de:2a:b6:60:fc:90:07:f2:68:63:61:0b:a1:2c:
         52:2c:1c:48:96:8b:40:89:1d:b0:38:91:ea:82:e1:5e:be:a7:
         7a:49:74:b8:23:3a:77:6b:cb:50:e8:0b:08:d9:d9:6f:78:45:
         1b:91:e6:69:09:99:75:d5:3f:c9:3a:2b:d9:f1:d1:63:fc:b3:
         3d:13:f9:f8:db:5f:17:ab:4c:e5:03:5a:96:1a:77:f2:21:de:
         30:5d:4a:4f:fe:59:47:ab:d0:14:ad:28:c4:07:e1:9c:de:1c:
         a4:48:22:32:72:6a:51:df:99:8a:fa:02:bd:f4:28:7e:91:d9:
         e0:c4:e7:7e:0f:9a:9b:fd:f1:e2:02:fb:dc:8b:1a:7c:9d:cf:
         3b:b0:00:b5:84:1a:18:1d:88:e1:95:63:50:9d:27:46:63:10:
         3d:fc:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:36 2026 by rpki-client