Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          y8Lz4JRZVb+xh1EWFUuB0IkCfM55p6LgT4sYoltxJ54=
Subject key identifier:   1B:C7:E7:07:A8:B2:4F:ED:3A:D3:D0:A1:61:92:9C:F6:A8:8E:15:E4
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       019CAF10E82AC3DD47D7F84EDFFFBC99981D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 15:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 15:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 15:00:46 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: jlZ/XtvMyOgGHsYP/uyNBDlSzVocYbGf4rU3rqVl3YM=)
                          2: Sa-P59ilAaBoROu7JXxgieqHHuI.roa (hash: klYsPIaTsQM9yUBEbb86aHfmxgUEhKSfXO+ZQhF9TNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:10:e8:2a:c3:dd:47:d7:f8:4e:df:ff:bc:99:98:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: Mar  2 15:00:46 2026 GMT
            Not After : Mar  3 15:00:46 2026 GMT
        Subject: CN=1bc7e707a8b24fed3ad3d0a161929cf6a88e15e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:37:fc:c6:9e:ea:0a:d5:bf:5b:cb:88:ff:
                    d4:49:33:b7:c0:09:7a:5d:c7:f2:ae:0a:52:53:bb:
                    00:ce:fb:db:73:16:fb:57:38:21:f3:c1:2f:26:75:
                    af:e2:a8:71:56:6a:c8:aa:46:12:93:73:74:1f:8a:
                    95:72:71:5e:1c:b4:99:a6:f1:eb:cd:c3:20:40:f0:
                    5f:aa:b0:7d:e6:29:20:6d:18:6f:3d:48:f0:e6:b0:
                    0d:2f:fe:ed:25:87:ed:c9:46:4d:8d:be:7e:1e:2a:
                    20:a3:4b:1c:11:26:fa:31:5d:16:3d:96:96:a4:5c:
                    9f:fc:2e:e5:14:13:f5:e7:09:a6:b3:a0:06:4a:0b:
                    48:e6:ca:67:7e:60:8a:88:bd:a3:05:e9:7c:64:57:
                    d2:3a:a9:10:dc:9d:a8:89:71:bf:6a:a9:64:54:bb:
                    f6:62:9b:e6:e2:46:87:83:55:19:e6:05:a8:52:45:
                    11:68:2a:e2:41:09:30:79:6d:ea:07:1d:e1:89:4a:
                    f7:f8:4b:c4:45:9c:2e:f4:d0:7f:3e:b8:36:e1:fa:
                    f5:cb:69:0f:02:47:5f:94:7f:81:5d:39:d1:dd:3d:
                    89:bc:8d:2f:01:2f:21:ad:f1:cf:17:fa:d7:2f:34:
                    ab:fb:c4:09:b8:95:86:40:fd:1e:9f:e3:28:52:1e:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:E7:07:A8:B2:4F:ED:3A:D3:D0:A1:61:92:9C:F6:A8:8E:15:E4
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:29:85:74:3a:ef:0f:e7:92:61:d4:2c:ad:8f:14:e3:fe:
         1b:7b:87:68:89:ec:ac:cc:fc:ae:ab:f5:7e:db:8c:cf:40:2b:
         ad:da:50:a7:98:eb:bb:23:7d:60:f8:ff:40:5b:c1:7c:31:2c:
         95:35:f4:06:d9:71:ab:f5:12:e1:23:5d:28:7b:b4:c8:7c:79:
         b3:43:77:3f:b6:1b:f5:c8:4e:90:61:5d:86:ab:34:9a:61:bd:
         1e:c4:9a:12:44:83:ac:96:48:14:69:84:ab:24:fd:78:6a:21:
         65:30:06:a1:d8:17:41:60:a4:db:fd:5f:46:36:05:b0:e4:5c:
         c9:eb:9c:e2:15:cc:c0:d9:ef:38:e1:92:c0:b9:53:f1:57:e4:
         b8:bb:5e:24:c5:50:2f:58:9a:06:06:38:0f:4c:1f:8b:0c:d9:
         54:15:47:f6:28:b2:bc:0a:ba:d0:7b:04:dd:fc:52:ee:21:b8:
         ad:43:8c:15:88:ec:46:21:e6:a2:52:2e:66:14:62:cc:0d:c6:
         51:42:d4:75:3c:77:94:1c:1c:c5:16:79:72:3d:61:20:f7:be:
         d1:cd:18:f8:b9:6b:97:21:99:9c:69:c7:73:85:7b:00:f8:e0:
         56:9c:c1:bc:c0:18:3d:59:21:75:35:bf:37:33:33:5e:17:ef:
         e8:69:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:02 2026 by rpki-client