Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File:                     EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier:          Ng3NnTZ2FfkVBMan+82Jla2cwGJ1LKy1MLYO+xxikpM=
Subject key identifier:   A3:2C:21:02:F1:CC:2E:F7:32:AB:C0:FB:45:13:90:F6:FE:DA:ED:08
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer:       /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial:       019CABD9045E197936D8BCB7BCE53FAEC0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 00:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:52 +0000
Files and hashes:         1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: V5F+HvrxddxEu7A41/ngi9e/B+B4SnOU/OCE1uGD/JY=)
                          2: zPL9SpEzbgv5hV90JadQIHwlZEo.roa (hash: oUod7lCzpgjd0dTnd1D/3YCd+gyJLYZuycYofSWlLPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:04:5e:19:79:36:d8:bc:b7:bc:e5:3f:ae:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
        Validity
            Not Before: Mar  2 00:00:52 2026 GMT
            Not After : Mar  3 00:00:52 2026 GMT
        Subject: CN=a32c2102f1cc2ef732abc0fb451390f6fedaed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dc:5c:8b:49:4d:a0:ce:09:c9:bd:4e:83:b4:
                    f2:13:c4:9e:98:d3:e1:f2:47:72:f3:0c:9a:15:f5:
                    31:d7:4b:30:c0:0d:c1:6d:4b:52:f4:61:18:26:c7:
                    6f:d0:b5:d1:e6:63:37:64:a0:ed:1f:f3:0e:0c:b4:
                    3a:3f:c1:2e:3d:99:b5:83:18:58:20:4a:7b:07:d5:
                    cc:53:be:e5:63:6d:a1:c3:24:61:23:b1:e9:8b:29:
                    6d:fb:8b:c0:b9:38:3b:24:46:ff:25:e4:86:b0:b0:
                    c1:fd:24:ba:e9:13:0f:58:d2:e8:32:2d:b5:36:f5:
                    73:e8:92:de:0a:40:98:8f:da:e0:c4:72:14:21:a5:
                    13:99:04:a3:0d:09:13:bc:f0:63:6a:27:16:83:1a:
                    3f:da:b2:4f:6b:e8:13:83:c8:0a:56:0f:09:63:f5:
                    f8:a4:70:53:51:e2:98:69:97:bc:5a:11:09:ae:50:
                    5a:77:25:33:da:ff:2a:db:dd:63:7b:f2:7c:49:6d:
                    d5:d4:9e:10:6d:1d:ab:06:ed:3b:49:67:e6:13:6f:
                    6e:28:80:b5:17:16:bd:52:c1:81:cc:c0:02:6a:63:
                    ef:f3:f1:dd:2f:fc:42:16:00:50:6a:a4:ce:20:23:
                    c1:4d:59:40:ac:f0:68:f6:8b:4d:c7:5e:9b:fa:1e:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:21:02:F1:CC:2E:F7:32:AB:C0:FB:45:13:90:F6:FE:DA:ED:08
            X509v3 Authority Key Identifier:
                keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:ba:72:2a:95:02:b3:bd:1e:ac:20:d1:77:fa:af:3a:41:
         b3:1d:08:a7:49:9f:84:dc:f3:49:75:41:5b:1f:79:89:a6:ae:
         bd:1e:b8:b9:7e:f0:f2:2a:c6:7e:94:79:c9:6a:ad:6f:2e:43:
         8c:44:35:33:4b:74:38:76:a8:89:58:40:68:16:f1:c1:68:4b:
         89:09:95:00:bc:39:b5:d2:1e:d6:d2:b9:6a:49:7d:10:ea:e7:
         32:02:88:e7:50:5f:ea:cd:ac:1b:bb:e4:cc:e6:e5:c0:15:f8:
         ad:c0:33:57:2b:2e:2b:16:97:b1:f9:46:31:9f:1d:31:3c:fe:
         e1:42:6f:83:09:c5:f4:f8:41:57:90:e5:ab:88:0c:f8:1c:ad:
         4a:63:c4:a0:72:e3:07:17:84:87:e3:06:7d:e1:c4:e0:8c:fb:
         6b:e3:26:78:3b:99:63:3e:03:80:c2:e2:25:91:a8:cc:f5:3f:
         03:d4:f3:f3:d9:48:7e:7f:3e:e9:6c:08:39:fc:56:0f:84:b5:
         d0:63:da:81:6c:fb:97:57:2b:e6:97:2e:a4:07:e4:ed:e6:7f:
         26:20:32:8d:eb:e6:0f:a3:21:63:2e:ec:38:59:aa:97:ba:f3:
         6b:f8:32:be:06:6b:2d:0d:2e:88:ef:f5:8f:88:e3:b8:eb:a3:
         2f:33:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:30 2026 by rpki-client