Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          uLYO59ghLBbDXIz8WH1bwNsVai1Ti00fGv3xw5D5ORY=
Subject key identifier:   66:9C:95:30:E2:03:23:FC:D4:B7:01:22:71:B9:D3:A4:93:89:47:47
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       019CAF4855A3D06DFADA367FA481784BF489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 16:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 16:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 16:01:19 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: HlhNWOdbspZPBqpfBeBe25S6kCoaOR0q9mtGyHRdRi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:48:55:a3:d0:6d:fa:da:36:7f:a4:81:78:4b:f4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Mar  2 16:01:19 2026 GMT
            Not After : Mar  3 16:01:19 2026 GMT
        Subject: CN=669c9530e20323fcd4b7012271b9d3a493894747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:6a:70:27:7e:eb:4f:03:eb:11:23:87:46:
                    6b:33:59:c8:84:d3:c5:33:13:bf:1f:f7:72:d1:a0:
                    57:e0:1a:10:65:cf:58:2e:4e:0b:df:e3:10:9e:28:
                    ed:64:20:5d:d2:1c:3b:05:a8:66:be:5e:4d:68:33:
                    15:d2:2c:9f:9c:bd:b7:cf:55:cf:a2:95:19:d9:1c:
                    b3:6b:22:d1:5b:c1:0f:41:ed:a4:79:1d:5a:d3:fc:
                    f5:29:3c:0b:82:46:b8:84:2c:a8:88:9f:d3:7a:35:
                    a8:f9:2e:65:40:11:e6:06:df:10:58:32:b7:db:e6:
                    ee:1e:aa:ef:31:9a:43:fb:3d:64:de:ad:5f:a2:2f:
                    b9:d5:eb:32:bb:c3:49:94:0d:42:e6:c2:ca:3b:82:
                    15:a6:c0:2f:ab:23:91:f1:cf:98:c3:40:7b:c4:ad:
                    a3:86:e6:0d:22:8d:2d:31:3f:d4:d6:bc:bb:bb:fd:
                    8a:43:19:0e:e9:61:47:db:30:04:ed:27:4e:09:7f:
                    38:d0:f1:83:e4:a2:7f:75:ae:dd:d0:a5:14:6d:c6:
                    84:fe:72:a3:fd:0c:59:e1:e8:9d:c5:bb:99:08:a2:
                    70:7c:67:b5:66:5e:26:71:b6:1d:15:66:af:23:a4:
                    a5:fc:34:02:04:1a:74:9e:7a:70:63:f6:45:42:99:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9C:95:30:E2:03:23:FC:D4:B7:01:22:71:B9:D3:A4:93:89:47:47
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:de:09:9e:e1:8c:49:52:38:f7:50:6a:1b:5f:c4:fa:db:52:
         41:d4:e6:67:2d:e1:01:e0:00:45:5b:e8:7c:ed:d4:35:bf:11:
         3c:2b:a6:65:40:cd:e0:8a:5e:cb:32:1f:17:cb:ef:dd:42:e4:
         43:33:f9:3f:64:9d:3e:f2:29:f3:71:84:60:a5:21:e2:63:c4:
         0b:01:73:59:30:0d:b0:e8:46:f5:6f:7a:0c:e9:46:da:61:5b:
         23:d1:16:a7:6e:88:88:6c:ee:b2:74:a1:32:a7:42:c2:c6:c3:
         4c:57:70:f6:20:d3:15:ef:d9:bb:e3:96:7c:d7:3f:52:b7:49:
         23:2b:3c:93:a6:42:d7:2d:60:81:25:2a:45:d0:68:9d:b1:d3:
         51:ac:e5:c6:f3:67:34:3f:9b:2b:fd:52:cc:f3:89:9a:08:30:
         cd:39:29:3d:62:90:5a:cc:d8:37:37:9e:10:c2:24:f4:ab:9a:
         74:55:3c:7e:2c:8b:9e:8f:84:34:9d:b0:fd:81:b1:95:af:cb:
         33:7d:cd:66:34:e0:8a:d1:ad:d9:67:27:6b:d4:26:84:3a:64:
         be:79:62:24:2c:33:8d:18:32:e7:51:0c:4f:de:88:c7:37:12:
         ee:29:ca:e1:a4:d1:a1:66:72:56:88:ed:1a:02:be:39:76:9b:
         43:91:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:55:15 2026 by rpki-client