Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
File:                     1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft (raw, json)
Hash identifier:          /JPdHYdSZce/Vigj3R6u6+qbakBTjf1ccuAMsR6y2vw=
Subject key identifier:   1A:9F:D6:CE:97:55:31:94:A8:E0:5C:BC:5A:20:2B:44:37:37:0B:47
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Certificate issuer:       /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial:       019CABD9DEBB0459B485B7E48E377DEBF8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
Manifest number:          158F
Signing time:             Mon 02 Mar 2026 00:01:48 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:48 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:48 +0000
Files and hashes:         1: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl (hash: pzDqurtpsxvglt2KWarDRFo9z7mJDjwl2iBeVH4PEIQ=)
                          2: 9-lOR-hr6xX4Iqb6TkWpzgWJVtM.roa (hash: QFUCnItf2DXd0w61i2uA3KR8HGTe8KP/hpaTD9qLq9I=)
                          3: FUSrBx5nHnlTGB6ewg5v8yqgXPU.roa (hash: 2MUjqPWuE0Az4HiuRSuLiJ3ZQ8HNjqYEJSlT6u/vtLo=)
                          4: GwCzD9FFv6UW4pNA3eaQKR9j9mI.roa (hash: TA9caw06vX3cAwsvnlfzFIGIz9Jk4HhI13HJqaNn7p8=)
                          5: J_ldszbL0k3PQMB-yvrWgDzEcus.roa (hash: Tgjn0inAyBtfHKiRwOLkG5q/UL6Pd6XY6ZxkS49r860=)
                          6: M1haVXqPOvnr0M8YD8F0YeZUvPQ.roa (hash: 1273tbmqWVfCsPa/v1kUBewWpBdKXZmtQ2j4FIBXvLk=)
                          7: qTpf6S-Df4WnD3GxtEZFBJ7i82c.roa (hash: OuzXwAbmKAynIDu/QFRmd7J+ekh/mEkHcmMZ5BTrW/E=)
                          8: s5Aba34aWqyN0NdTLOhM3Uae9Ks.roa (hash: 9SQoDZzqv1EeYPtHTjtGPqXq8iWnUavkQUs9luuG8XE=)
                          9: u_51fQD42al7LsisB7PSRjRKNWI.roa (hash: ZKYYBG5jADPnWWb+8Mf3B2+le8UTdbTbVrJsQVvAL6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:de:bb:04:59:b4:85:b7:e4:8e:37:7d:eb:f8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
        Validity
            Not Before: Mar  2 00:01:48 2026 GMT
            Not After : Mar  3 00:01:48 2026 GMT
        Subject: CN=1a9fd6ce97553194a8e05cbc5a202b4437370b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:91:48:1b:c5:99:84:66:62:c3:14:d1:9f:
                    30:73:8d:22:55:54:de:d6:e5:a4:63:5b:4d:12:08:
                    c3:04:0e:be:f1:c0:cb:55:0b:37:ed:50:96:01:e0:
                    41:4c:77:6e:a1:31:75:cc:9e:ab:26:32:7d:ad:a5:
                    c1:22:f2:5d:e1:7e:77:d5:5a:9b:7e:80:06:fb:32:
                    c4:b2:ee:f4:f2:cc:60:ca:03:42:e6:99:2b:d2:cc:
                    33:54:a4:e2:41:b0:7d:cd:df:76:74:83:9b:95:65:
                    1e:fa:da:d5:3c:c3:b1:33:87:3e:78:56:21:c1:df:
                    7b:5b:b6:ea:63:fb:55:36:06:9a:46:4c:e9:0f:7f:
                    16:14:3a:84:7f:86:9d:65:56:c2:51:bc:ff:fd:6e:
                    f6:f9:0f:2e:a8:1f:67:a1:13:b2:c3:67:12:aa:0a:
                    f9:74:c8:94:9d:16:9c:e4:30:b4:17:74:6d:04:a4:
                    21:53:b0:f7:6d:ba:80:92:13:ff:2c:bc:95:37:db:
                    e7:54:9a:14:1b:22:fe:3b:09:54:99:63:f4:98:0b:
                    69:fa:bd:9e:ce:e8:50:02:73:f9:36:23:4e:09:84:
                    a2:52:49:a7:c8:9c:74:81:68:42:8b:f6:b4:03:54:
                    33:a7:6e:a6:64:9c:96:e4:3b:60:12:41:22:d5:2a:
                    be:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:D6:CE:97:55:31:94:A8:E0:5C:BC:5A:20:2B:44:37:37:0B:47
            X509v3 Authority Key Identifier:
                keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0b:ed:e2:5b:22:f6:c8:aa:b5:23:d5:8b:2e:49:3a:da:b6:
         52:89:07:fa:61:89:d4:22:28:7b:f2:8d:39:7e:64:59:93:d8:
         c3:9e:9f:18:7b:65:85:19:68:8b:88:b0:3a:b4:37:72:d5:3f:
         c2:f4:9b:c5:a8:13:d5:a4:09:3e:7b:73:5e:30:de:ec:35:87:
         81:28:c4:6c:22:80:7b:ce:58:98:f9:16:46:03:56:08:43:ba:
         6d:44:12:be:d7:6c:df:36:b1:f7:63:bf:18:7a:ea:b8:2b:f7:
         ff:c3:c5:6b:ee:58:24:67:9f:89:3a:04:61:ec:5a:a7:6f:85:
         ac:72:dc:e7:72:1b:84:b8:1c:1e:dc:fb:f1:9a:21:77:27:be:
         7a:bb:1f:06:39:09:dc:04:72:b3:44:12:4d:af:bc:fd:73:15:
         e6:95:2e:a5:84:7b:69:00:a4:ee:09:99:f8:70:6d:63:6e:2a:
         a7:94:9c:eb:9d:d5:76:fb:e5:57:dc:9b:29:eb:ba:47:4b:69:
         db:ae:e0:c2:78:66:22:74:c5:92:15:75:40:a9:d7:ab:ef:34:
         c8:fd:a4:1e:eb:dc:59:2c:aa:1c:0e:ac:df:9a:f3:45:f0:c4:
         4a:0d:1b:14:e0:44:c8:1a:c0:a4:5e:71:4e:a3:fc:3c:f8:1c:
         f3:86:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:30 2026 by rpki-client