Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          eCxRpEJUYQtOlcWw4ai5GqGK0N09pB3GKbK08+i+uNU=
Subject key identifier:   50:10:60:F7:CC:08:C1:14:15:D5:34:56:DC:F5:12:14:6D:C5:E1:CE
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       019CAC7DCDE61D7770D9F94E7ED9B6D4EC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          1855
Signing time:             Mon 02 Mar 2026 03:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:51 +0000
Files and hashes:         1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=)
                          2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: 4ZOw2AqEUjzEVNopt0X5AELZPUHwm/Q2DCaIIk6ybdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:cd:e6:1d:77:70:d9:f9:4e:7e:d9:b6:d4:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: Mar  2 03:00:51 2026 GMT
            Not After : Mar  3 03:00:51 2026 GMT
        Subject: CN=501060f7cc08c11415d53456dcf512146dc5e1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:1c:6f:fa:89:85:70:53:e5:f0:e8:0e:20:
                    ed:dc:1d:a6:ad:e0:28:aa:36:84:53:16:6d:e1:5b:
                    c4:6a:e2:65:df:7a:27:18:25:09:d7:52:63:3b:f0:
                    f0:8b:cd:1d:75:f6:d4:0f:25:98:aa:11:01:18:89:
                    59:41:a6:dd:8a:4f:c3:db:cd:b7:ea:d4:3d:b1:8c:
                    b6:e6:6f:3a:15:ba:5e:e8:cf:6f:e1:17:bf:36:de:
                    21:19:f2:a0:4a:fa:48:55:08:63:4a:e6:c9:88:ea:
                    17:ae:1d:d2:2e:aa:be:c1:fe:54:ba:c7:bc:a8:be:
                    df:74:bb:06:81:5d:05:42:2a:63:8a:aa:2b:be:85:
                    2a:36:96:82:68:d2:e6:fe:48:be:d7:f1:28:44:b8:
                    85:25:f6:fc:e5:ac:74:33:fc:c2:9d:ee:20:fe:12:
                    57:d6:7a:69:61:c9:68:40:89:05:de:c5:93:12:a6:
                    3e:2d:87:4d:4c:81:30:6f:74:82:28:d8:9e:26:af:
                    b4:72:f4:f8:88:8b:66:2d:04:27:5e:1b:98:02:31:
                    62:cd:80:13:18:70:01:4a:c9:e3:43:1f:75:e9:37:
                    a1:e2:64:a1:ed:b8:2d:80:a2:3d:72:6b:67:1f:05:
                    11:3c:2b:75:df:ff:8c:5b:39:3a:e4:da:83:f3:83:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:60:F7:CC:08:C1:14:15:D5:34:56:DC:F5:12:14:6D:C5:E1:CE
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:12:9c:a1:57:09:08:e6:10:ef:79:9b:d3:18:90:4a:67:
         6e:14:6e:cd:41:3f:05:15:74:bd:ef:6f:70:29:24:6c:b2:10:
         d3:0f:17:f9:e3:77:31:18:a3:59:8e:00:c9:5f:06:46:cb:95:
         dd:30:73:b8:67:e5:ba:f4:45:cf:8b:ba:b1:5b:8c:44:a6:14:
         88:be:8f:c2:e0:ea:39:1c:68:53:06:80:aa:be:da:06:9e:e7:
         96:9d:2e:64:cb:d2:6a:8e:d4:87:d0:8b:79:49:cf:c0:4b:6c:
         27:e1:bb:58:ee:89:96:65:a3:23:dc:4e:37:46:c4:85:b2:88:
         29:c8:08:cf:da:0d:a5:e9:b0:55:01:a9:2a:91:b4:2c:39:10:
         79:51:9b:a9:e2:6e:2d:3a:e0:4f:c4:19:4a:de:2f:5d:82:3d:
         fa:d8:e8:0d:53:ae:51:05:e4:35:1c:f0:84:68:62:2d:3b:26:
         d0:c8:ad:fc:5b:c6:48:1b:ff:65:1c:5e:9e:cb:2b:a8:df:63:
         74:b6:7d:6d:36:37:36:e6:3b:bc:1a:52:af:17:4e:dd:b8:66:
         08:c0:f3:9b:a2:7a:69:db:30:d1:c2:bb:f9:ae:04:d5:94:b1:
         96:25:a8:87:97:79:c5:e1:03:37:5e:3f:37:38:75:03:65:5e:
         c5:07:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:52 2026 by rpki-client