Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File:                     g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier:          vA9iklTl3OobadxiFh6d4rymdS6/iXrkPo21JFDzcX0=
Subject key identifier:   F8:39:E2:12:BD:38:18:FA:DC:7F:41:43:ED:6F:88:F3:79:9A:28:71
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer:       /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial:       019CACB4A5F6FC2C9571CFB3C32C86DCF46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 04:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:45 +0000
Files and hashes:         1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: 9BHif9anVCy7Ubxig/R20r61Ni8rq8IK+isvbsQ28KE=)
                          2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:a5:f6:fc:2c:95:71:cf:b3:c3:2c:86:dc:f4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
        Validity
            Not Before: Mar  2 04:00:45 2026 GMT
            Not After : Mar  3 04:00:45 2026 GMT
        Subject: CN=f839e212bd3818fadc7f4143ed6f88f3799a2871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:0a:0c:b8:de:11:8a:06:28:65:66:c1:64:
                    66:07:7f:28:a7:61:27:fa:31:0c:49:eb:0c:4b:21:
                    77:5e:35:a1:c6:44:c2:52:3a:0e:34:de:2d:ae:6d:
                    92:6f:c2:03:64:cb:c7:05:4b:86:6d:9b:57:dd:c3:
                    3e:5d:21:71:a4:9e:72:23:e1:6b:46:6b:c3:bd:bf:
                    b6:6d:3d:a1:2a:87:af:82:e9:b3:b8:37:61:5d:0e:
                    08:1a:6b:3d:eb:a7:3f:9e:c2:96:73:ae:6c:57:b9:
                    5e:b1:79:58:a8:a3:5e:9d:e2:88:97:ee:39:98:be:
                    52:bb:43:67:85:af:ca:c5:b6:ac:e5:3f:f9:b9:94:
                    e2:1e:4f:e8:8c:70:c9:be:51:67:05:01:2a:5d:e8:
                    dd:1d:c6:ed:8a:a6:90:cc:b3:aa:cc:cb:ac:8a:2e:
                    10:d6:86:30:9b:5f:29:f5:31:d7:31:30:47:7d:f8:
                    e5:9a:71:c9:40:15:7f:79:9b:e7:a8:aa:c8:a3:40:
                    09:b0:1a:5f:ae:f0:fa:0f:29:4c:c6:f8:ae:e2:4e:
                    38:a5:a6:a8:0b:85:ef:80:5c:91:07:03:0b:e5:94:
                    a4:88:a7:2b:14:fa:b7:60:56:c0:90:76:49:c3:a1:
                    e1:25:1d:2d:7c:9a:d8:71:80:80:77:5b:d2:d8:4d:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:E2:12:BD:38:18:FA:DC:7F:41:43:ED:6F:88:F3:79:9A:28:71
            X509v3 Authority Key Identifier:
                keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:37:b8:a7:6c:e5:87:c9:65:2f:41:4a:c5:fb:1d:34:66:
         14:20:01:4d:52:54:c7:7b:df:37:70:55:73:a0:20:8b:71:24:
         6a:e9:ba:33:02:b7:6d:63:69:63:43:65:b5:d9:e9:64:73:ab:
         4a:71:d1:e6:07:a1:99:87:31:b6:61:05:c5:af:03:c0:8d:1c:
         ad:9a:33:60:64:3a:3e:bd:74:f2:c1:97:8d:74:da:7f:e6:97:
         c2:8d:39:7b:1a:79:07:3f:a5:ab:5c:fa:a6:1c:94:d4:e2:db:
         aa:6d:21:ca:87:ba:33:9d:c1:15:ba:e0:90:42:85:06:93:f8:
         cd:9b:0e:01:a3:ff:1f:6f:39:6b:8f:d3:4a:70:c9:f1:9a:bd:
         14:59:da:a9:b9:f8:86:8d:79:5f:83:9e:47:c4:de:52:e8:29:
         46:40:5a:7f:0f:1b:c7:52:8f:53:d4:68:34:40:15:24:ab:ad:
         29:57:13:a8:cc:13:0d:d8:da:a6:43:af:be:ca:66:ea:33:57:
         16:d3:53:49:0a:11:4b:72:cf:78:1a:39:37:2d:9c:2a:d0:43:
         3a:ee:7e:ff:ce:be:fb:db:09:63:d4:b7:21:74:88:ec:18:3f:
         00:de:01:5f:0f:0e:ef:bd:5d:cb:ab:51:da:94:5a:85:21:2d:
         85:bc:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:38 2026 by rpki-client