Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File:                     CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier:          1SScTEZWU6vGZqex8vd8JWDlWOa9bnRYDJwhH83skA4=
Subject key identifier:   82:F7:CB:12:A5:4A:89:1C:53:A3:57:DF:D3:B6:E6:DB:0C:46:F7:F6
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer:       /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial:       019CAC0FE30B555D470AF6256F9F8BB5D835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 01:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:48 +0000
Files and hashes:         1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: sJ5tpbCX8zbDKuuh7tFPvAY1F0LTksMkbZMK80hh/AU=)
                          2: v89NCrFwQeDvFifuIbe7lcr1Vdg.roa (hash: 8lNS9jprfqrQ4KnCohT8hKELj4DY0q7OpHWa2tkRvdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e3:0b:55:5d:47:0a:f6:25:6f:9f:8b:b5:d8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
        Validity
            Not Before: Mar  2 01:00:48 2026 GMT
            Not After : Mar  3 01:00:48 2026 GMT
        Subject: CN=82f7cb12a54a891c53a357dfd3b6e6db0c46f7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:df:87:14:cb:60:d5:d0:3d:60:d4:7d:c8:
                    8f:dd:e1:ce:06:e8:7c:6a:29:43:d2:2b:cb:91:d1:
                    ed:cd:01:9f:c0:b7:df:7b:96:eb:8e:a2:b7:5b:21:
                    fe:6b:dd:97:c1:7a:e2:8a:20:d6:48:e9:d1:07:72:
                    71:7d:11:c8:a0:c0:ac:24:26:6e:46:1d:e3:49:fa:
                    4c:c1:6a:2a:d6:44:d7:92:ef:65:a6:b5:1f:47:32:
                    36:80:7c:2d:14:9f:fa:33:09:52:4e:69:d9:a9:c8:
                    ce:c4:6b:a9:7f:d6:99:81:1e:86:b7:29:9a:84:7d:
                    77:5a:1c:ce:55:13:aa:c9:21:e9:06:74:b5:f8:7f:
                    ba:c2:79:a5:3c:e9:f9:67:dc:ba:e0:32:2b:bf:35:
                    51:71:f6:8a:bb:cd:6b:d1:0e:65:76:40:9b:5e:2a:
                    65:e5:54:c7:96:f5:b1:5f:4b:99:1a:b9:46:8f:2e:
                    46:07:3f:71:cf:eb:25:db:79:59:dd:92:6e:e7:57:
                    f0:9a:31:9c:f4:f1:8c:be:32:11:06:13:1a:38:97:
                    18:2e:a4:0d:0a:1e:66:0a:30:3e:ec:3e:d3:94:6a:
                    95:8d:a4:69:55:2d:aa:73:ae:37:69:c1:3d:b9:4e:
                    a9:8d:d5:c9:b5:ad:dd:a1:47:70:3a:98:14:c8:39:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:CB:12:A5:4A:89:1C:53:A3:57:DF:D3:B6:E6:DB:0C:46:F7:F6
            X509v3 Authority Key Identifier:
                keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:a1:ea:53:06:cc:18:99:03:14:7a:14:12:2e:d8:95:12:
         5d:5d:24:6c:f2:58:e1:bf:7f:68:40:7f:5e:56:c4:de:32:68:
         68:fd:39:d2:e1:20:8b:e8:06:c1:e1:0b:5b:36:d8:13:ed:a9:
         9d:00:0a:75:0a:6c:90:ea:1a:e2:fb:55:1f:d3:88:84:aa:35:
         04:21:0a:77:fc:26:c6:e2:a5:20:55:7d:8c:4a:22:21:48:80:
         a3:e1:bf:4f:56:18:40:24:e0:bd:a1:33:fd:b8:3b:3a:3a:20:
         a0:63:e4:d8:69:ad:df:58:3a:f0:f8:61:32:e6:fc:b1:15:f3:
         99:12:b1:c4:01:6d:8b:b0:f1:35:53:20:39:a3:fb:6e:1b:9d:
         ac:6d:55:ae:c6:94:2c:7c:87:3d:65:f7:0c:34:0b:35:31:1e:
         36:82:f3:0c:6e:be:81:32:3a:de:de:d2:b0:7f:a6:4f:3d:5c:
         39:ad:aa:c1:fa:c7:e7:d3:3c:fd:4c:16:af:dc:47:cd:51:35:
         a8:30:96:b6:11:6a:67:34:4c:73:f5:0b:19:90:13:e2:f0:5e:
         b6:10:89:c9:f6:1c:71:cc:1f:69:e0:b4:c3:2b:68:70:3d:98:
         91:5f:2d:e7:e8:97:94:d6:71:b0:61:83:dd:5c:20:b2:5f:2e:
         9e:a8:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:16 2026 by rpki-client