Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          LQuEWeIf3V3TSwhy44Vx9XPtR3bTN8p1cbZZAdkQP/Q=
Subject key identifier:   47:F3:EA:62:35:72:F8:15:47:91:C2:26:F0:97:F1:55:A3:C7:09:A0
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       019CACB4C4AE6B895127F4CECB0E1361A44D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 04:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:53 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: 54yCJWD6DNzGxvwklzoVVnwWH9zvKroEirQi4oqXYxQ=)
                          2: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (hash: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=)
                          3: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (hash: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=)
                          4: pUQRSDfWqJEoJFfVuZVUVOmlYsk.roa (hash: 9jvQHXY6BnSchwKk/mPiFTBcmMYYo7JbR6ZjMBc/ZDo=)
                          5: uLHH6IqO22bZWZTgO9nKR2wQbJE.roa (hash: laj7eTzK3jKEChy9oG/lzbHF9H3dpCdbB2ksudV3h+Y=)
                          6: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (hash: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:c4:ae:6b:89:51:27:f4:ce:cb:0e:13:61:a4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Mar  2 04:00:53 2026 GMT
            Not After : Mar  3 04:00:53 2026 GMT
        Subject: CN=47f3ea623572f8154791c226f097f155a3c709a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:cf:46:60:53:31:ca:c5:24:2d:e3:e2:80:
                    c9:20:18:10:df:85:71:5b:77:90:72:aa:bd:2c:12:
                    e5:57:28:6d:4c:76:a1:bb:33:a9:87:51:ae:7d:8b:
                    80:a8:98:d0:48:db:b2:02:6b:0c:a3:bf:76:ad:9d:
                    6f:20:1b:25:fd:49:3a:b3:67:f8:ef:a2:6f:c3:85:
                    8b:14:17:17:6d:3f:77:83:77:57:a5:de:38:52:d2:
                    82:1d:d1:ff:9f:5e:24:d7:db:af:eb:86:d3:8a:43:
                    6e:36:c4:ca:9c:2a:ed:34:2a:dd:b1:ad:32:c8:6b:
                    d7:58:ee:a8:d8:5d:8a:a8:40:be:96:7d:08:ac:18:
                    1e:8c:42:dd:77:e0:fe:cd:3e:3b:47:9d:dc:35:93:
                    ee:5c:06:18:17:6d:3a:d5:95:01:55:cb:42:fa:0d:
                    bf:1f:92:76:5d:95:bf:2b:32:d3:a2:49:9e:ee:a2:
                    db:a3:f9:f8:7b:2c:44:d6:0b:cf:59:64:63:08:53:
                    ce:66:f9:7a:9a:a1:9a:5c:9a:fd:af:5a:7f:1c:3c:
                    a2:08:5c:56:a5:0d:df:12:87:3c:6a:97:08:38:03:
                    71:39:1a:14:08:21:a6:ea:1d:63:9d:45:3b:d5:53:
                    f7:13:1c:fe:6a:0a:3c:e4:82:b2:ab:95:70:65:e8:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F3:EA:62:35:72:F8:15:47:91:C2:26:F0:97:F1:55:A3:C7:09:A0
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:09:c0:9c:f9:50:58:b6:51:aa:76:f3:70:d1:0a:73:3c:a7:
         a8:0e:df:cb:90:1b:c3:ae:59:a7:e1:48:c0:b5:ea:43:e5:47:
         a6:90:d1:04:5f:8d:65:04:50:ee:15:20:64:f4:86:24:fa:eb:
         e3:cb:4d:82:2e:b7:f3:05:eb:0e:33:4e:ed:0b:74:38:21:58:
         3a:e7:e6:2e:d6:91:a0:bc:88:a0:84:73:13:45:ce:f8:71:ce:
         5c:7b:d2:94:79:0b:cd:4b:c2:ec:1a:e3:c7:9b:a2:8d:be:79:
         ce:31:c3:9e:da:1f:6b:c5:3b:58:93:d9:37:3a:73:16:a5:d5:
         94:1b:28:e4:8f:d5:eb:75:7f:5a:b6:7b:34:7c:65:4a:fe:33:
         50:e8:16:f4:36:6b:83:c8:90:19:0b:46:18:1f:8c:91:0e:27:
         1a:43:ff:cc:8b:5d:78:f1:f7:4e:e4:e4:b3:8e:3e:63:7d:dd:
         03:37:54:b2:12:d3:2c:aa:0e:b3:04:75:a6:80:6b:74:b2:ff:
         16:bf:bc:d6:23:70:80:9d:c8:e7:d8:98:25:36:7a:1d:f8:75:
         a1:f4:73:30:7a:a9:f5:43:9e:bb:18:66:a8:ae:cf:a8:b7:cf:
         3e:b8:e2:a1:5d:33:11:4a:35:ad:53:a3:9e:af:43:d9:9d:4b:
         39:0f:03:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:40 2026 by rpki-client