Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File:                     3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier:          HF1/Q7C1Yu8i/lZYMB3oxKJZOtwClaw0cQECOGWg9Ek=
Subject key identifier:   92:E5:13:43:69:EC:C0:9B:C7:7E:E5:24:EA:AE:95:34:79:71:85:EB
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer:       /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial:       019CAD59B9F82301D643DCE5A4794DEEDED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 07:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:04 +0000
Files and hashes:         1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: gl4aJb0EC3iLragP2AZj7C74x12kb0gzvayHISdjY90=)
                          2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:b9:f8:23:01:d6:43:dc:e5:a4:79:4d:ee:de:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
        Validity
            Not Before: Mar  2 07:01:04 2026 GMT
            Not After : Mar  3 07:01:04 2026 GMT
        Subject: CN=92e5134369ecc09bc77ee524eaae9534797185eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:bf:75:b0:fb:2a:42:20:e4:ed:72:df:49:
                    7d:96:15:02:05:df:29:ee:d5:39:45:20:2c:15:26:
                    ba:01:d6:5d:ed:99:a7:02:28:a1:e2:29:bf:98:f9:
                    12:fd:1f:c6:1b:d1:ed:f7:af:c7:fd:8e:83:c1:0d:
                    47:b4:2f:99:05:e5:bc:73:fa:0b:c4:fe:00:35:28:
                    2b:f0:57:b1:16:e8:c8:6c:91:c9:c5:c5:03:d1:a7:
                    29:56:a9:bc:58:97:2b:58:9e:f3:97:6f:f4:7f:f9:
                    b0:7a:76:89:5b:b5:88:eb:80:c4:b9:f9:0d:11:87:
                    4a:04:5e:84:27:dc:2b:27:51:9c:69:22:83:6c:22:
                    cd:ca:f4:3f:6c:99:c8:c3:c8:c6:85:2b:77:c4:47:
                    cb:7a:c4:ff:b3:5b:d4:57:3a:10:43:a6:c3:13:79:
                    28:9c:ef:55:a5:5d:24:4a:ae:e2:d2:f8:f2:15:bb:
                    66:48:6e:3d:49:40:08:2e:99:1d:05:e6:c3:a3:1d:
                    25:ee:09:f2:22:4d:b0:9f:c4:31:ef:77:7b:ec:cc:
                    4b:32:09:21:07:28:ec:d6:22:eb:f0:45:ee:ed:86:
                    02:26:6f:1b:b4:b4:50:0b:6a:b7:1a:35:07:a9:4e:
                    50:e2:98:2d:d9:72:89:49:11:9e:c7:92:b3:a8:b7:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E5:13:43:69:EC:C0:9B:C7:7E:E5:24:EA:AE:95:34:79:71:85:EB
            X509v3 Authority Key Identifier:
                keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b4:21:15:79:aa:fa:30:60:a3:e8:8d:f4:15:91:72:31:e7:
         c9:69:b7:da:01:f4:1e:87:be:7a:29:55:aa:43:f8:72:13:ea:
         c6:8f:ff:35:4e:18:2d:a7:53:1a:27:48:37:3b:22:a4:7d:c1:
         b1:ba:d3:d6:9e:7e:98:ca:d0:b6:fa:a8:72:24:09:da:f6:be:
         c4:8f:45:12:d4:de:8b:e2:1f:cd:ac:e5:25:e4:96:61:95:8a:
         fa:d8:39:c6:13:ef:27:71:86:a1:09:37:0f:2c:b8:4d:fe:66:
         e8:31:be:e9:25:b2:f6:f6:40:46:72:d0:fe:b5:62:aa:0e:ec:
         bc:ad:7f:5a:fc:23:df:32:c5:2a:bc:43:85:4a:fe:53:2a:30:
         83:0b:9f:80:fb:be:3c:8a:de:a4:1a:73:96:0d:41:7f:21:1e:
         67:6b:d7:36:b5:7a:f7:c0:30:e8:59:28:ba:45:a0:b8:49:a7:
         ea:81:f9:b7:be:d4:64:76:fd:ad:cc:25:95:93:83:ac:77:62:
         49:76:db:12:1f:a2:0a:95:4e:a5:37:f6:8d:7d:e4:7d:f9:74:
         69:30:6e:9d:62:fc:b8:8f:e9:0e:a0:59:8f:3f:a5:8c:9e:08:
         d1:bb:19:d7:b8:ca:3b:92:86:c5:73:d7:89:51:dd:60:c8:d2:
         24:00:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:44 2026 by rpki-client