Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File:                     C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier:          rtVbSkxDeK9u1AUcTOKj9vDgbiaMLTHOuN6wUL08S7k=
Subject key identifier:   E7:21:14:02:E5:B6:95:6D:BD:20:34:DF:21:1E:C4:ED:71:BF:04:D7
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer:       /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial:       019CACEBC2761766BC34214DB164BB084CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 05:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:57 +0000
Files and hashes:         1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: +fc74gEvslgrdz+TQeZsZey0V+QdRWLs9IzSFnEptgc=)
                          2: Xw8MVRQJpk47EKjQkBC2UTNVzic.roa (hash: 8j4isUf9xLJyeuJnVvuAvOsNA+t8iB00CcKI1JNi3Vg=)
                          3: qpReQJ4ra9EFepoIvfI-wRbEIOI.roa (hash: rfltCZyFcGQYfJJgi8SKKMqLHfq7fdrz+C8KH3BEHFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:c2:76:17:66:bc:34:21:4d:b1:64:bb:08:4c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
        Validity
            Not Before: Mar  2 05:00:57 2026 GMT
            Not After : Mar  3 05:00:57 2026 GMT
        Subject: CN=e7211402e5b6956dbd2034df211ec4ed71bf04d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:fd:eb:d1:b3:31:ce:00:62:28:17:43:d2:
                    4f:94:ff:26:9f:01:c6:49:9c:ca:a4:ea:62:74:6a:
                    88:a5:92:4b:dc:bb:43:61:66:c5:2a:87:88:55:d3:
                    df:bc:b6:c7:b5:8a:6e:c9:5d:62:cf:3d:18:dd:06:
                    32:4c:9f:7c:7a:2a:f3:61:50:a8:3c:9a:8f:11:66:
                    4c:ca:f2:d2:1b:5f:bd:d1:82:9b:99:2d:2a:6b:8c:
                    ce:00:91:ef:43:48:ed:1b:15:be:75:06:36:22:15:
                    cb:1b:86:2f:ab:22:94:27:08:8e:10:50:a4:9f:2c:
                    11:45:81:a8:41:b7:a2:c3:26:97:4c:3a:20:37:bb:
                    14:3a:5f:13:24:5a:a0:20:c1:65:83:2f:6a:91:1c:
                    78:6f:1c:66:f1:3f:46:cd:a2:99:9e:37:b8:3c:19:
                    51:a0:cd:5b:19:76:da:bc:22:da:ab:6b:23:c2:12:
                    13:d6:fe:fd:cf:a4:8a:77:5f:89:62:2b:48:ad:34:
                    e2:74:e3:3f:1b:da:28:9a:78:b5:5c:9d:b5:c6:b3:
                    51:c1:46:2e:97:c6:c4:d6:75:d5:1a:03:d6:f6:7a:
                    88:4b:f3:0e:80:99:d5:bb:31:f4:ad:1b:f8:74:7f:
                    4c:fb:4d:7a:f3:d9:6f:ad:a1:79:b7:ce:69:d4:c3:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:21:14:02:E5:B6:95:6D:BD:20:34:DF:21:1E:C4:ED:71:BF:04:D7
            X509v3 Authority Key Identifier:
                keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:61:56:27:2a:68:f3:c1:b4:ee:f0:74:4b:0e:78:7f:58:
         35:3e:2a:24:2d:a0:36:60:88:89:0f:4f:e2:a6:79:cb:c5:21:
         14:de:43:92:c4:23:7b:c3:44:da:75:81:95:18:8b:ce:b6:d6:
         82:52:ad:b4:94:ce:35:62:f4:16:19:fa:0e:45:e3:42:84:51:
         ff:a4:2e:a9:59:17:36:06:6c:a2:ee:d1:a2:39:1b:17:4f:14:
         dd:86:90:0d:0f:34:8f:09:3e:ba:15:62:be:57:da:ba:a7:95:
         8f:73:75:84:ad:67:97:98:5a:7e:9c:4d:79:4b:13:59:31:d3:
         7c:76:f2:cd:c2:62:97:dd:fe:50:da:04:72:95:87:85:42:d7:
         fd:11:42:5c:2b:22:e7:b5:70:8b:17:a4:d1:d1:5a:39:9d:76:
         49:5a:1b:af:7d:ec:94:ab:e9:82:61:33:ed:8e:ed:6a:d1:37:
         4e:16:b5:d9:29:1a:76:f1:5b:84:59:55:cc:7a:94:e9:f0:ac:
         33:08:33:b9:6f:bc:b3:29:8b:65:a1:1b:93:31:30:71:5f:b8:
         b2:6a:08:4c:08:16:7f:88:b8:03:16:eb:1e:82:8a:f4:c6:cd:
         6c:61:e9:bc:7a:49:45:a4:76:de:39:a4:64:fe:7a:c5:6b:71:
         4e:0c:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:59 2026 by rpki-client