Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          ACh1SFwPlrs4TlapI8KjCELeL5hv0UUYHsxTKaOFt2Y=
Subject key identifier:   FF:7F:20:F2:41:49:D6:34:00:41:04:4E:1E:8D:96:AE:21:E9:20:01
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       019CAAC66B3CCFCCC180EFDEEF67E832C46C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 19:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:56 +0000
Files and hashes:         1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=)
                          2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=)
                          3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: oVmFvzB39NMt836Ik8z/u9KG6DXyqph1WzrxF9jZ7iU=)
                          4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=)
                          5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=)
                          6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=)
                          7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:6b:3c:cf:cc:c1:80:ef:de:ef:67:e8:32:c4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Mar  1 19:00:56 2026 GMT
            Not After : Mar  2 19:00:56 2026 GMT
        Subject: CN=ff7f20f24149d6340041044e1e8d96ae21e92001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:6c:f2:59:8b:53:2e:f6:61:a0:db:9d:60:
                    cd:98:fe:40:ca:47:52:67:62:65:56:91:64:60:4c:
                    60:c9:e7:91:b0:e1:33:ff:92:8e:c0:bf:41:be:a6:
                    8b:40:a1:58:7c:b4:60:e9:f8:d5:32:fa:64:64:85:
                    de:98:f9:10:ed:a8:a5:ca:4a:76:97:7d:fb:4f:36:
                    64:37:d1:45:39:36:f0:99:b3:cb:6d:bd:a4:40:3d:
                    ea:6e:1f:07:4a:71:11:59:ea:06:e6:ff:e4:b5:32:
                    b9:cc:fc:41:ac:43:18:69:6b:91:5e:a2:0b:15:42:
                    ee:73:11:f4:9c:d4:a8:31:92:cf:e3:f9:54:e0:43:
                    ac:a1:38:33:33:5d:85:b2:0f:49:43:92:48:95:9a:
                    91:4e:72:8c:51:c3:12:99:b2:6e:cf:3e:ea:20:6a:
                    a3:9f:8b:46:e0:74:20:25:35:6a:e6:51:ad:6d:32:
                    c1:72:ba:ce:00:ff:c0:61:72:72:0b:8e:61:98:d3:
                    41:e4:e4:a0:ea:28:37:00:84:81:7f:79:10:e1:be:
                    f9:65:e3:b1:4f:ff:96:fd:81:04:c4:77:b1:c7:aa:
                    25:b0:e6:9d:2a:b6:f3:fd:8a:78:3a:f4:24:a7:47:
                    3a:50:58:e5:ed:c4:f9:8b:a3:3c:8e:a5:33:84:24:
                    88:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7F:20:F2:41:49:D6:34:00:41:04:4E:1E:8D:96:AE:21:E9:20:01
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ba:53:ac:9d:d4:90:b2:e4:e8:11:eb:c8:09:5e:3b:a8:96:
         cd:82:b5:78:65:8a:b8:50:44:85:72:e8:d7:5c:a6:4d:fb:23:
         ef:e5:3b:17:b5:6d:01:6b:df:fb:50:e2:66:69:78:a1:e6:8b:
         09:ad:b9:ce:0a:1b:e8:46:83:d0:8b:76:14:e5:d5:e9:49:47:
         ee:42:97:bd:72:53:d1:92:88:92:8a:f5:96:96:8b:e7:cc:70:
         78:9a:24:07:a7:70:80:05:d3:a1:c0:79:bc:68:5b:6c:81:3d:
         9c:31:10:20:7e:cd:41:97:68:13:a6:81:9e:bb:54:e2:1e:7b:
         bd:45:f2:d1:90:5c:2d:a3:5d:97:37:cf:0b:b8:a6:4a:28:c2:
         21:6d:3e:a8:25:16:31:87:b7:8c:89:11:b1:2e:8a:71:ba:db:
         12:21:9f:91:4e:f8:31:6f:d3:cb:82:4f:f2:cc:10:e5:ba:e9:
         e0:d9:56:9d:9c:7e:1f:cf:9d:e7:00:f5:65:dd:df:02:3f:d5:
         86:43:22:c5:44:66:a8:8d:f0:d5:da:b9:2a:29:5d:51:01:b3:
         5d:f8:0f:d9:14:87:d0:13:d5:3a:88:c1:57:a6:a0:ce:a0:23:
         ef:0d:b7:ad:15:3c:76:dd:bb:b7:d0:ad:7e:9f:ae:97:50:62:
         d1:a4:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:43 2026 by rpki-client