Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File:                     c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier:          5SVhbDIw9tJKeGwOJ5ZhiR5en4BPX9JuqueqOlxExpA=
Subject key identifier:   2A:AE:CC:6F:A9:B8:11:E1:C0:D9:C5:AB:C4:4F:88:94:6C:D4:30:5A
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer:       /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial:       019CAC47B12C1B09395E55A0E7E8D4F2D258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 02:01:45 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:45 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:45 +0000
Files and hashes:         1: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: b6/fHNuPXvLcjho9v+eyKe8Yn2Bdsyz096ofhqWWs0E=)
                          2: vaG8_QMiq-gvMMwN9ZG02j3YzU4.roa (hash: F7rxfGZiwjYWNbSFolPcJp4VrNwcoqXEugc+lLx087M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:b1:2c:1b:09:39:5e:55:a0:e7:e8:d4:f2:d2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
        Validity
            Not Before: Mar  2 02:01:45 2026 GMT
            Not After : Mar  3 02:01:45 2026 GMT
        Subject: CN=2aaecc6fa9b811e1c0d9c5abc44f88946cd4305a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:92:7b:84:1b:a6:4d:b6:4a:25:7e:cf:96:
                    42:16:f3:6b:fa:09:cc:4a:b4:dc:2c:ea:b5:23:96:
                    26:a5:af:42:eb:b9:e7:84:da:ba:87:b6:46:8d:a4:
                    49:76:03:fa:d9:7c:d6:7a:77:a4:96:8e:5e:48:fb:
                    83:bc:a7:e4:49:f7:ed:03:75:f8:53:89:14:ff:92:
                    21:27:98:26:30:38:f4:78:03:5f:45:a2:14:76:ad:
                    64:00:f0:9c:5b:2c:5c:e6:d5:7b:0d:3b:56:42:4b:
                    09:ca:1b:b9:9d:78:ff:7d:51:ba:da:5e:91:0e:4a:
                    3a:cd:a4:c3:90:58:c4:b1:48:1c:ca:e1:cf:15:84:
                    d0:0a:61:28:c9:f7:0d:ad:61:cb:5f:a3:31:c5:14:
                    5d:b1:70:ce:6d:ad:08:00:d9:ac:f6:34:04:df:cb:
                    9d:86:13:3a:40:53:51:11:5e:db:81:4c:14:e1:ad:
                    31:f4:54:82:09:3e:8d:6e:71:cf:b4:a0:57:98:3c:
                    a9:4f:43:cb:49:c2:2f:b0:c5:09:3c:59:af:98:1b:
                    37:f2:c0:65:6b:ae:ba:58:4f:08:87:cb:9f:78:9d:
                    42:bd:a5:d6:46:4e:0b:dd:34:fa:f6:d6:54:65:a2:
                    1d:87:74:e9:2b:82:45:6f:ec:9a:51:eb:74:c2:30:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AE:CC:6F:A9:B8:11:E1:C0:D9:C5:AB:C4:4F:88:94:6C:D4:30:5A
            X509v3 Authority Key Identifier:
                keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:26:bf:91:58:04:e1:4d:59:4d:e0:49:83:c6:68:75:d3:a8:
         e3:22:75:fa:06:ed:f8:35:7f:a2:bd:44:35:6c:a0:8b:bd:9d:
         82:9f:e9:1b:f5:ed:79:1c:f0:62:00:32:49:8a:d5:41:6c:c0:
         85:d6:c1:d7:af:a2:24:6d:d3:d0:fd:ef:57:33:40:da:4c:2b:
         7b:1b:53:e2:8b:00:58:88:bd:d4:ea:08:c7:92:f3:23:19:6b:
         06:bc:c8:a9:07:82:e0:3f:9d:ad:c5:93:d0:08:3d:53:74:f4:
         99:f2:b4:b5:33:9a:6b:12:c0:a0:78:78:fa:92:9d:c8:e2:52:
         58:b6:3e:fe:95:4b:9a:de:58:e7:97:fd:82:80:d8:91:0c:7e:
         19:62:58:d9:68:36:19:2e:a0:4b:ca:fb:a5:8d:af:2a:f8:c0:
         00:ac:db:00:a6:67:95:3a:3e:ef:4b:64:ee:43:7c:32:b0:26:
         10:08:6e:e9:53:2b:d6:fc:9f:0d:33:ec:e8:13:3c:5d:e9:3d:
         fd:bd:de:57:3d:b1:81:c1:8a:ef:88:40:8c:62:5d:aa:3b:ea:
         4f:74:e3:0c:51:8f:ef:ff:a3:18:66:92:95:01:4a:c5:a3:34:
         d0:1a:ca:31:94:96:2e:ed:7a:b1:fe:00:8a:9f:ce:1a:bc:30:
         30:dc:b8:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR7EsGwk5XlWg5+jU8tJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjhhZWJjMWQ0NTg1YjliMzYxMmVjYzIyMDM0NTRkNjVh
ODcyZTMwHhcNMjYwMzAyMDIwMTQ1WhcNMjYwMzAzMDIwMTQ1WjAzMTEwLwYDVQQD
EygyYWFlY2M2ZmE5YjgxMWUxYzBkOWM1YWJjNDRmODg5NDZjZDQzMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQWSe4Qbpk22SiV+z5ZCFvNr+gnM
SrTcLOq1I5Ympa9C67nnhNq6h7ZGjaRJdgP62XzWeneklo5eSPuDvKfkSfftA3X4
U4kU/5IhJ5gmMDj0eANfRaIUdq1kAPCcWyxc5tV7DTtWQksJyhu5nXj/fVG62l6R
Dko6zaTDkFjEsUgcyuHPFYTQCmEoyfcNrWHLX6MxxRRdsXDOba0IANms9jQE38ud
hhM6QFNREV7bgUwU4a0x9FSCCT6NbnHPtKBXmDypT0PLScIvsMUJPFmvmBs38sBl
a666WE8Ih8ufeJ1CvaXWRk4L3TT69tZUZaIdh3TpK4JFb+yaUet0wjB5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCquzG+puBHhwNnFq8RPiJRs1DBaMB8GA1UdIwQY
MBaAFHNorrwdRYW5s2EuzCIDRU1lqHLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2It
ZjU5NTFjN2NjYmQzLzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2ItZjU5NTFjN2NjYmQz
LzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQia/kVgE
4U1ZTeBJg8ZoddOo4yJ1+gbt+DV/or1ENWygi72dgp/pG/XteRzwYgAySYrVQWzA
hdbB16+iJG3T0P3vVzNA2kwrextT4osAWIi91OoIx5LzIxlrBrzIqQeC4D+drcWT
0Ag9U3T0mfK0tTOaaxLAoHh4+pKdyOJSWLY+/pVLmt5Y55f9goDYkQx+GWJY2Wg2
GS6gS8r7pY2vKvjAAKzbAKZnlTo+70tk7kN8MrAmEAhu6VMr1vyfDTPs6BM8Xek9
/b3eVz2xgcGK74hAjGJdqjvqT3TjDFGP7/+jGGaSlQFKxaM00BrKMZSWLu16sf4A
ip/OGrwwMNy4Pg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:08 2026 by rpki-client