Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          3sYD7tM+JgOnNJFtdTeeEh03w/FvwWILkr0ddaIb8tA=
Subject key identifier:   C6:C5:8C:69:E8:10:F8:64:6C:EE:E1:20:F1:DC:3C:8E:B6:FD:14:12
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019CA9EADC27C89FBB72A9248B0A07CE89A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 15:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:07 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: tziZfy++dSdl7wNpRI0ci869OGtB4wCge9C3HSMfX2E=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:dc:27:c8:9f:bb:72:a9:24:8b:0a:07:ce:89:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Mar  1 15:01:07 2026 GMT
            Not After : Mar  2 15:01:07 2026 GMT
        Subject: CN=c6c58c69e810f8646ceee120f1dc3c8eb6fd1412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:11:83:e2:86:b2:c1:4e:06:6f:ee:86:ba:
                    e6:a1:1c:42:e5:8c:c4:47:f9:52:0f:69:d7:d8:e2:
                    41:ac:4b:41:16:be:59:e8:ec:d4:6e:84:06:2e:5b:
                    a2:b5:58:2e:b6:c1:cc:92:9c:09:3e:e5:a9:c5:1f:
                    90:d2:91:17:da:23:84:b0:eb:6d:3b:02:d8:7d:72:
                    b0:3c:03:83:d0:7f:69:8e:71:3b:9e:93:ae:4c:f2:
                    7b:c3:01:46:dd:cd:f5:21:81:cf:ad:40:5e:1b:f2:
                    48:5d:70:26:9c:ca:58:66:af:0e:b6:13:4f:fe:86:
                    19:1b:11:71:ff:2b:02:ec:9f:8f:f9:1a:34:cf:7b:
                    65:73:77:83:94:a3:31:43:b4:fa:77:ec:38:5e:cb:
                    a5:50:10:26:ae:37:5e:76:93:52:03:60:68:26:86:
                    04:04:25:d3:43:89:8c:50:77:ba:cf:68:a3:66:8c:
                    2c:5a:90:29:c1:f3:37:18:5a:82:dc:55:95:76:35:
                    dc:b5:76:3c:3b:e6:f8:60:7c:7f:40:78:c5:c2:77:
                    3b:e9:6d:4d:88:5a:29:a3:56:65:73:91:33:ee:eb:
                    2a:24:63:33:3c:53:9e:f8:83:c5:ed:f1:0b:52:a9:
                    fa:2b:80:0a:59:de:b0:b9:3b:ff:0a:d4:79:91:f4:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C5:8C:69:E8:10:F8:64:6C:EE:E1:20:F1:DC:3C:8E:B6:FD:14:12
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:da:23:74:76:f4:f7:a3:52:17:31:ce:d5:c5:eb:2c:7c:76:
         24:b3:98:eb:05:17:4f:ad:a1:94:6f:41:f9:1a:07:10:7c:a0:
         16:3b:3d:0e:3b:f6:a2:0a:cb:f8:42:70:bf:4b:6e:1e:4a:5c:
         90:75:8c:fb:d1:1e:ba:4d:0b:6f:98:48:33:fa:fa:ae:c6:31:
         b5:18:33:39:39:b2:24:c9:04:48:e9:22:d9:4f:0f:ed:f0:34:
         1c:af:97:96:91:8c:bb:ab:c5:6e:ba:63:44:27:2f:67:05:69:
         ff:97:5b:f5:b1:90:9b:7d:6a:16:d0:d5:4a:06:30:45:d6:50:
         e5:75:52:19:af:a9:28:67:e0:fe:4e:14:ea:fb:45:1f:79:11:
         81:11:9a:c1:fa:dc:24:99:96:9c:ca:90:a6:63:74:ac:57:b1:
         5b:6b:3a:5e:9e:f8:59:0f:df:d9:04:10:3e:12:d6:8e:b1:39:
         c3:d3:0b:9e:84:5e:ec:c4:7a:a3:83:b2:0d:83:b8:fc:ec:e4:
         ed:43:10:92:fd:76:22:98:81:12:0b:79:3c:73:7e:6e:fe:90:
         5c:4f:48:a0:df:b7:80:64:1a:78:68:39:de:29:70:ee:5b:58:
         1e:1d:be:cc:cd:08:4a:c9:fb:54:db:6d:4c:03:ac:e7:aa:82:
         71:31:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:14 2026 by rpki-client