Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File:                     sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier:          kvtBVn/1sFNwVQgNhyAF9TrDi77qG5bp4a1YpfJGdKc=
Subject key identifier:   DF:02:F8:F2:FB:82:24:EC:2D:7B:8B:00:DC:0F:A9:72:00:57:A5:86
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer:       /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial:       019CABA2690770872D3ED79865592A79772F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 23:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:13 +0000
Files and hashes:         1: qLJSTzTBMdJIikbxRR_u5Z_U3GY.roa (hash: iJfkw1OmyUQC6ekqyi7may7oFP/+ECL2L9/K1hz0sgo=)
                          2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: va3znHYfMWH+8sVxlNt6sf8AijOCCXZspmHjp3QCIcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:69:07:70:87:2d:3e:d7:98:65:59:2a:79:77:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
        Validity
            Not Before: Mar  1 23:01:13 2026 GMT
            Not After : Mar  2 23:01:13 2026 GMT
        Subject: CN=df02f8f2fb8224ec2d7b8b00dc0fa9720057a586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:53:9c:1d:92:6c:44:3d:74:0e:ba:e5:4f:
                    6e:b4:e9:67:a5:cf:d6:22:0b:6a:6e:4b:d8:64:de:
                    25:39:5c:e7:84:3c:ee:9f:7f:2d:2c:32:55:51:1d:
                    d5:d2:91:6a:be:71:e5:cd:1c:3f:cc:02:bc:7d:69:
                    fc:cd:6a:a0:a3:57:56:78:4f:ee:71:b4:c7:30:2c:
                    d7:bb:b0:f2:d0:aa:aa:fb:bf:41:c0:39:60:25:d5:
                    f8:95:8a:2f:ad:0d:3c:57:a0:34:de:00:24:f6:f4:
                    ec:b1:f4:ca:ac:0a:1a:8a:cd:e6:5b:c4:2f:bb:36:
                    3c:9a:87:97:26:7d:b7:57:d0:7b:16:bb:7e:85:65:
                    da:13:07:ab:ae:10:4e:a6:e3:60:8e:08:83:40:81:
                    49:94:d7:62:17:f3:b2:15:3c:8f:a3:7e:c7:96:5b:
                    09:ed:e2:00:47:a3:47:90:fe:1e:01:0c:83:f1:f6:
                    44:13:97:6f:b7:05:17:47:14:a0:18:d0:1a:49:7e:
                    05:1f:3d:70:7c:c0:71:e2:a7:7c:7e:5a:26:3c:9e:
                    b7:07:0a:0b:b0:59:48:34:ab:c2:de:d1:b4:61:51:
                    9b:85:55:62:86:6b:99:d6:59:ff:a3:52:2e:09:cf:
                    53:c5:18:b2:f1:fc:8b:aa:77:a6:e0:21:af:b7:8c:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:02:F8:F2:FB:82:24:EC:2D:7B:8B:00:DC:0F:A9:72:00:57:A5:86
            X509v3 Authority Key Identifier:
                keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:d1:da:75:be:e7:b5:4a:a8:8b:fa:e2:ac:df:2d:d0:32:
         62:40:ab:4d:b7:4a:9f:3f:d9:1c:69:0f:e7:87:ac:44:3e:65:
         ef:cf:84:97:a4:1a:41:7d:21:78:e6:47:d9:d2:2d:6a:22:38:
         f2:ea:3d:12:90:3c:3c:cf:a3:8e:07:29:49:76:d9:6d:46:2a:
         4e:4e:4a:09:cf:c4:e9:9e:00:98:41:a8:54:69:a6:2f:83:f4:
         db:75:82:60:d2:63:7b:ce:dc:a8:7b:69:91:f5:9c:17:7d:50:
         ad:d0:7c:94:87:6c:05:62:70:d3:c7:cf:2b:75:37:f6:e2:42:
         fe:71:dc:83:74:6f:fa:58:6c:f4:dc:c4:c3:c4:c2:2a:b1:a7:
         cd:69:2d:6c:66:06:6c:c6:42:e9:aa:17:93:6a:92:63:d1:51:
         e2:37:81:e8:81:28:19:59:00:cb:0b:4b:43:d9:71:07:bf:4c:
         9c:21:ad:b9:f5:55:d5:ce:52:8c:7d:c6:c1:4e:6f:89:87:90:
         78:9d:94:24:97:ea:6f:ed:72:13:61:e4:ef:7a:b9:b9:ae:12:
         05:5e:a4:5a:fe:9b:6a:1b:fa:49:fa:b4:d1:64:94:e3:35:55:
         b8:b3:7a:63:3e:b5:57:59:86:d3:6f:c5:76:ee:4f:54:78:e1:
         b2:04:eb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:36 2026 by rpki-client