Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          kTC367MgauvyxITMLJi93bCPnKwDyYD+Roeav88Yf04=
Subject key identifier:   93:DD:A1:1B:70:9A:33:4C:23:14:2D:68:B4:65:B4:F5:12:F9:34:0E
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       019CACEBEC7A1BEBF66EFDCD228FECA864CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          158D
Signing time:             Mon 02 Mar 2026 05:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:08 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: vBf811A/icj/iVNMA5Ek9O9veSk3NGo3ytKe0xJg2LY=)
                          2: tNjZH9-x1g7HqUfJGt0InZjB23w.roa (hash: RRoUsNS1EP4tRlbwAyzXgXLAhFiDzTM4MGWjbgquZiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:ec:7a:1b:eb:f6:6e:fd:cd:22:8f:ec:a8:64:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Mar  2 05:01:08 2026 GMT
            Not After : Mar  3 05:01:08 2026 GMT
        Subject: CN=93dda11b709a334c23142d68b465b4f512f9340e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:40:09:7a:a0:d6:b7:14:61:ee:52:bb:47:
                    10:a0:93:f8:36:8a:57:e5:77:ca:db:d8:34:fd:08:
                    43:70:29:20:cb:3f:34:96:b8:79:bf:53:f3:61:e2:
                    dc:b2:74:dc:ad:92:cb:3b:15:57:8c:a8:45:e9:58:
                    1b:59:e5:15:92:dd:43:cd:09:aa:91:e0:34:e3:08:
                    b7:95:1e:0f:22:fa:5a:c8:9d:8f:57:69:90:21:a4:
                    9a:be:c6:fa:2d:de:26:1c:7e:92:73:5e:b7:5c:e7:
                    de:48:9b:04:17:8c:3a:5d:c7:b7:07:1d:5d:d3:34:
                    cc:55:19:bc:11:0e:25:72:f4:86:6d:ab:40:25:95:
                    d5:63:67:05:b1:0c:2c:44:3e:57:1c:e4:50:4a:f6:
                    65:34:c9:a3:94:a2:f1:bf:f8:08:0c:b0:ba:7a:e7:
                    21:f4:ca:e9:fb:d5:08:f6:fb:37:5e:00:62:93:f3:
                    35:d1:86:dd:50:58:47:e0:be:61:e8:20:47:4e:80:
                    fb:63:64:f9:27:5e:3d:2d:c0:cf:de:b0:5c:10:4d:
                    b2:02:91:f5:46:09:1d:70:1f:7b:1b:c8:f1:cc:f6:
                    82:b5:41:48:6a:ea:13:57:ee:0b:72:15:5a:64:2f:
                    f5:fa:37:d6:53:fe:2e:78:34:04:ad:36:c3:15:28:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DD:A1:1B:70:9A:33:4C:23:14:2D:68:B4:65:B4:F5:12:F9:34:0E
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:b8:71:b9:7f:7d:3c:04:0a:ce:21:36:eb:6b:85:e4:6f:
         af:61:bc:2b:56:f7:e7:73:35:fa:7c:a8:6f:3d:d6:b3:dc:4d:
         a4:83:20:49:f4:4a:90:80:a9:e3:61:b8:4a:37:44:07:50:34:
         06:ef:3f:b4:6c:99:ea:cb:61:81:fd:a6:c3:cc:87:19:3e:3e:
         04:5a:ae:8c:91:f1:8b:3d:73:df:63:79:99:d3:09:4d:3d:d5:
         61:11:b4:3f:4e:3d:62:b4:c1:38:5b:18:b7:cd:7f:c9:fb:42:
         f6:f8:2c:99:aa:9c:ff:77:2b:66:e6:7e:e4:07:b5:07:57:bb:
         08:4e:1f:14:d2:aa:19:1b:77:7e:a6:e1:e8:ef:58:14:2d:7b:
         e3:32:b7:83:e8:e6:ac:ed:a5:a7:4d:08:36:51:6a:0a:ef:e6:
         03:21:15:c0:f0:ad:77:ad:e7:8c:f4:e1:ca:fa:70:1b:31:c7:
         98:25:44:1d:54:72:60:b6:9b:8d:b6:0f:fb:2b:8d:6f:a8:b2:
         30:e0:a3:2a:98:4b:ec:5b:ba:66:84:ae:da:c6:2c:92:8c:02:
         9a:d5:dd:c9:ae:9e:50:e5:13:da:2e:bf:7b:ae:30:82:8c:b5:
         30:0b:43:1a:f9:7d:d0:f8:4f:a0:ac:92:d8:3a:f5:b7:d5:88:
         fa:22:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:14 2026 by rpki-client