Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File:                     1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier:          95rJ0muR1bpmW4Km1cjA7KZy/wOfbOHW2ZN2LYhE13A=
Subject key identifier:   9D:B1:06:59:EA:6B:8A:7C:01:63:C5:0E:58:21:E2:8E:96:04:65:C7
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer:       /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial:       019CABD940EDCA20A14A73E40EA294D8359A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number:          0862
Signing time:             Mon 02 Mar 2026 00:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:07 +0000
Files and hashes:         1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: CM5DUnWNWkEjV+RW9i+hSXMuNBIA5c6njY2QRR0Hv+A=)
                          2: CsQf4uEGspv_IcbrptvdYC6FW4U.roa (hash: DTdMWaLCP+5k9hnxvlb1jl6IR7GYGn2eFq3euCRFifs=)
                          3: dUE7B1BI2eY5vxH0sjXn_eEtdiE.roa (hash: Td10cn+TUBgy7bh+w4UsjfRQk/m+lGjAwnzc4Ms7SgE=)
                          4: koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa (hash: +ihoHt66MtdHz9TjemIYSdtViPsR/B1PabBEU1L+tYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:40:ed:ca:20:a1:4a:73:e4:0e:a2:94:d8:35:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
        Validity
            Not Before: Mar  2 00:01:07 2026 GMT
            Not After : Mar  3 00:01:07 2026 GMT
        Subject: CN=9db10659ea6b8a7c0163c50e5821e28e960465c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:14:50:a1:e0:54:89:f7:f4:73:16:a5:b1:
                    84:35:02:3a:8e:11:2b:d3:26:fc:e5:55:de:47:f2:
                    e6:78:46:b8:fc:70:27:47:c8:04:8f:4c:47:8b:8f:
                    2b:b6:66:5d:a2:a2:62:05:ea:21:47:d6:18:87:46:
                    be:71:41:14:77:37:c7:32:ff:9e:48:ac:5c:cc:c5:
                    0a:46:a7:16:c9:53:06:82:7c:74:c2:e4:b9:00:fe:
                    a8:64:dc:6e:79:12:e6:8d:b7:2d:b1:c5:fc:ea:22:
                    4e:eb:99:6d:e7:a2:d6:fd:8f:53:ea:5b:70:18:c5:
                    a4:9a:18:a1:07:19:f8:46:c4:45:27:d4:76:4a:e8:
                    b2:44:8f:91:3c:1c:6b:ec:94:32:d4:8c:67:34:fc:
                    cd:39:23:8d:9e:e4:81:0e:d9:0f:d8:00:3c:e3:f9:
                    3c:16:02:e0:f9:18:96:24:ae:fe:0b:04:3d:c4:6c:
                    f8:de:89:6a:a5:d6:a6:a5:2b:8c:74:49:8b:80:35:
                    d0:18:df:fb:58:df:df:52:41:04:5b:ec:6a:dd:94:
                    eb:b5:5d:94:d8:29:11:bf:bd:63:23:3e:53:c1:3c:
                    2f:f3:ba:24:36:5d:f0:6a:2b:aa:8c:6f:63:b3:89:
                    ce:6e:48:52:1c:7a:7c:ca:54:f4:b9:bf:74:95:77:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B1:06:59:EA:6B:8A:7C:01:63:C5:0E:58:21:E2:8E:96:04:65:C7
            X509v3 Authority Key Identifier:
                keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:ff:01:9a:92:f6:2c:41:a5:c9:d2:d2:ab:1c:0a:8f:66:
         b7:6c:88:4e:60:3d:b9:22:3b:4e:e0:95:9b:a1:da:fc:68:f2:
         8b:14:ad:bc:a3:c4:94:0b:be:ef:3e:bc:d5:a0:fa:0f:e5:9e:
         84:97:50:1b:6c:8a:e6:0d:fc:06:36:15:ff:a3:e8:1e:33:64:
         eb:b5:ef:eb:4b:2e:91:58:9d:e3:e9:5d:22:6d:82:fb:be:4a:
         86:ab:e4:b3:2f:5d:ad:e0:02:65:6d:0a:5d:c3:46:93:22:27:
         44:40:08:35:d9:ce:2c:23:83:51:42:62:9c:df:b7:d6:4d:7b:
         02:04:75:91:1e:41:97:c3:31:9d:2b:4c:95:21:38:d9:98:00:
         9f:0f:9a:82:2b:66:53:ed:86:7d:b7:ce:a7:ec:07:0a:6e:10:
         aa:3f:4b:52:8e:6c:6f:f2:ea:a3:7b:62:64:69:0f:59:70:10:
         66:6b:dc:5d:e0:22:52:1a:67:2d:ee:80:6b:3a:cd:67:f6:c0:
         22:28:4b:33:7d:06:2b:f7:4e:3f:09:8c:32:e6:c3:8a:e9:b4:
         ad:34:a2:76:bb:2a:67:40:28:5c:16:39:62:f7:ac:5b:e7:62:
         24:1a:ef:e9:81:8a:9c:fe:30:e9:2b:5f:60:89:18:6a:30:d8:
         0b:3d:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:24 2026 by rpki-client