Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
File:                     614owu_zzzXDwcw9Z7qj3wUFX5k.mft (raw, json)
Hash identifier:          B9631rnhn/K1WHHZ24iydNDtOT+rz9ZmiDinWhN6goM=
Subject key identifier:   62:14:EB:B9:09:66:35:B5:93:65:13:7C:26:F1:12:2B:DA:CE:7C:83
Authority key identifier: EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Certificate issuer:       /CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Certificate serial:       019CACB4EC29B867BD959DF2E75DFDFF8014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 04:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:03 +0000
Files and hashes:         1: 614owu_zzzXDwcw9Z7qj3wUFX5k.crl (hash: MCrWcisCsY33vnO7CwlUNmrYhqx2R8r23oOHYAOeKJg=)
                          2: PlK6Gz_zz8yOe932ySLfbF7lgwo.roa (hash: 7JKBnxpSJYk4FSEy0vtBUc/r6F+DCRSjQcAobLs9g+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:ec:29:b8:67:bd:95:9d:f2:e7:5d:fd:ff:80:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
        Validity
            Not Before: Mar  2 04:01:03 2026 GMT
            Not After : Mar  3 04:01:03 2026 GMT
        Subject: CN=6214ebb9096635b59365137c26f1122bdace7c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:8e:30:a2:f0:94:68:8c:3c:f6:dc:1e:fc:
                    78:43:fa:41:13:c2:31:63:cb:00:5d:57:66:a2:4f:
                    e1:bb:1f:7f:8b:1e:04:b8:23:66:e1:c9:98:13:6a:
                    aa:a8:a0:1d:14:b2:c6:11:dd:16:f1:64:79:84:8f:
                    6c:70:a3:ce:42:9c:c7:5c:03:07:ac:3c:cf:88:14:
                    59:82:63:a3:23:1f:1c:6d:d3:3a:54:ec:6d:52:e1:
                    aa:5b:6c:0d:34:44:c0:65:2e:91:c1:c1:19:f8:40:
                    d0:b6:a2:bb:73:10:0c:28:72:ce:37:da:b8:e2:ca:
                    57:a5:7e:ac:de:cc:c0:6d:6f:b9:67:5d:2e:9b:45:
                    1d:5e:28:c7:eb:4c:13:2c:c2:0b:96:0a:ae:40:e6:
                    37:2c:4f:91:28:49:aa:7c:fa:7f:c4:c9:57:da:47:
                    e6:af:b8:3f:d4:53:60:f2:bd:b5:52:4e:ca:75:89:
                    30:ae:fa:7e:48:7c:53:1d:07:26:e8:ad:94:fd:84:
                    eb:ae:26:99:4d:35:dd:3b:38:de:0b:87:f0:ad:8a:
                    72:22:5a:90:05:9d:94:bc:2d:e3:c2:a1:2e:ce:5e:
                    0a:05:78:fc:99:0e:3a:9e:bd:fa:6a:05:c0:68:9b:
                    bc:01:c3:8c:6d:82:98:71:f4:43:2d:57:79:e6:cd:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:14:EB:B9:09:66:35:B5:93:65:13:7C:26:F1:12:2B:DA:CE:7C:83
            X509v3 Authority Key Identifier:
                keyid:EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7f:04:6b:13:81:03:fd:f1:1b:d0:c9:2d:a1:f9:32:cf:a6:
         b0:4d:16:7a:1b:5b:bc:99:3e:b0:75:b5:6d:16:a3:af:2c:1a:
         f3:ef:1c:a2:0a:a3:14:33:37:e8:45:02:46:5c:b8:43:ba:94:
         22:94:ce:7f:62:c1:54:b3:4c:2e:15:24:c9:e7:32:21:1d:9c:
         f2:e3:76:d6:68:f9:fa:a9:9b:21:67:de:a1:fd:1a:0a:0c:33:
         ce:0a:ff:2a:0e:2f:e5:59:4c:25:ba:2c:19:d6:c6:7d:d6:83:
         93:dd:4e:35:cf:ca:88:fa:58:7b:5d:4f:38:a0:ae:3e:7e:2c:
         5d:d2:b6:f2:af:06:0d:3d:1a:02:1f:66:3a:47:1e:c1:ba:e0:
         ae:4e:bc:02:ef:88:3f:db:8e:4d:30:54:2f:2c:af:7b:f7:73:
         51:38:26:98:37:b0:b6:94:f8:76:20:b2:c8:85:b0:ef:98:70:
         7a:c0:db:06:c7:7f:15:fd:02:73:22:6c:41:1b:8f:2f:0b:2a:
         55:e1:4e:06:2e:ac:3c:0b:74:35:e9:3d:81:a8:26:80:0a:8c:
         97:2a:93:d1:c6:df:d5:8b:bf:94:73:d7:fd:36:be:93:c1:9c:
         f6:77:15:ac:c5:cc:61:97:fd:25:ca:c0:a6:93:6b:e4:c0:f1:
         15:aa:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:24 2026 by rpki-client