Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
File:                     M_vbsgwtlwc8Dei3yqdewe6xkbg.mft (raw, json)
Hash identifier:          3H4AGs+jSQH0tMTkT47zN+b0km/FW2ZIeHx2oLXTPic=
Subject key identifier:   E0:7F:0D:74:F3:2E:58:5F:22:76:DA:0A:FB:2D:1C:45:9E:2E:0C:83
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Certificate issuer:       /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial:       019CAA5907E0322CDFEBF5B5202C6CDF2F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 17:01:27 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:27 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:27 +0000
Files and hashes:         1: 0e4GauzDmn8kMomw7oCsTJu7m8Q.roa (hash: vhyIGyttSh6EEj+o9giIX+19O/xI+MdDj+HOEVvUjJ4=)
                          2: EjDCWHUKfrhUltEAV8v-8i4JB8k.roa (hash: a/WblqLT7o9KNQHx3jn/JOaerbJckzUgXEVjku2zPOM=)
                          3: M_vbsgwtlwc8Dei3yqdewe6xkbg.crl (hash: wMyQHTGGsso2n4nvcP7xPgiVbMkqArVSYPofqpw1mIA=)
                          4: oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa (hash: CR2p7P7nO1sdjW2WzjuqaopSJj2SPQzuG2+UV273Kok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:07:e0:32:2c:df:eb:f5:b5:20:2c:6c:df:2f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
        Validity
            Not Before: Mar  1 17:01:27 2026 GMT
            Not After : Mar  2 17:01:27 2026 GMT
        Subject: CN=e07f0d74f32e585f2276da0afb2d1c459e2e0c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:9e:6b:3a:5d:b7:83:b3:25:fd:f6:ee:4f:
                    c0:a7:24:e0:6e:b4:0c:a8:40:47:08:93:cd:be:38:
                    ed:e5:77:08:83:e3:32:b1:3e:7a:f8:fa:3b:e8:5b:
                    97:67:80:9c:8e:1a:a7:28:28:4e:ea:f1:be:f7:f8:
                    e6:c4:94:6f:f4:64:3c:e1:9a:a9:06:d7:2c:b6:99:
                    7e:53:82:7e:0a:6c:23:e9:06:88:4b:35:bd:45:d0:
                    d0:0b:ca:dc:c4:14:fe:3c:d6:87:71:07:34:c9:b7:
                    27:e1:d9:68:42:33:22:8e:83:9f:1f:80:2a:15:40:
                    69:c2:f9:7d:38:b0:a1:c6:2a:a7:16:84:ee:09:36:
                    d4:88:73:f4:45:4c:9e:f3:f6:cb:e8:25:de:d8:60:
                    11:9b:07:5c:76:14:95:26:ed:d4:01:86:20:c7:ae:
                    0a:69:59:56:26:78:7d:83:1c:e9:5f:13:54:5e:6b:
                    1b:75:f1:bc:aa:eb:08:c0:78:a2:e5:d8:28:7f:5c:
                    ed:df:d1:ac:7f:66:f0:c1:80:1b:38:57:d0:ae:c2:
                    26:4a:f1:19:60:8a:5f:e8:db:f6:5a:e9:a3:b2:a0:
                    c5:6f:71:dc:74:12:6f:40:50:84:f3:b5:55:47:33:
                    7b:b8:3b:95:7d:dd:c3:cf:da:fb:8d:55:97:c3:2b:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7F:0D:74:F3:2E:58:5F:22:76:DA:0A:FB:2D:1C:45:9E:2E:0C:83
            X509v3 Authority Key Identifier:
                keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:47:05:72:61:74:77:2a:63:e9:0b:0d:51:cc:60:64:65:
         ac:37:b7:1d:71:44:1e:96:e1:1d:9a:45:bd:f8:db:6b:58:8c:
         07:67:c7:85:90:86:ee:a8:d4:58:1a:c5:9c:0a:7b:f3:8d:95:
         61:17:8d:4a:9b:c3:89:b5:ca:3c:1b:56:ab:90:6c:ec:31:57:
         4f:36:6b:79:3d:a3:73:62:04:d4:33:21:ce:ec:90:4b:68:fb:
         57:c1:14:01:a6:a7:99:b2:37:5f:70:0a:a7:22:22:03:a5:04:
         8e:66:29:d7:80:af:fa:ae:bb:c0:43:be:af:92:31:60:bf:a3:
         ee:5b:aa:b9:4a:c3:cf:bb:0a:ef:43:26:bc:ed:c2:e2:76:63:
         41:7b:1d:4b:cf:75:79:3d:f0:5e:a5:a3:30:df:73:5a:f2:1e:
         55:80:47:1c:95:b8:26:6e:a6:14:e5:a7:5a:b6:5e:56:cd:2e:
         ec:96:4c:a9:e8:dc:bf:33:73:34:48:ab:95:bb:75:d4:b0:4f:
         57:d0:6f:80:e4:46:a4:8c:d1:3f:f8:ac:48:8f:8c:73:3c:59:
         4b:eb:f1:aa:c5:e0:5e:62:81:94:60:b4:49:a7:b3:81:1a:45:
         e9:b9:86:cc:ef:2d:8d:8a:7a:f7:87:6d:ed:d4:c4:c5:20:11:
         5f:4d:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:37 2026 by rpki-client