Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File:                     5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier:          /pNpwbT9LPSHkTMRFrB+mwmjNbHfQdnaoGlT9SE+lkA=
Subject key identifier:   73:FF:80:3B:26:DE:AF:86:CD:D6:31:A4:77:C3:5C:E0:52:F9:F1:1F
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer:       /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial:       019CAC468F01522A772EEBF4D177AAFDC3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:31 +0000
Files and hashes:         1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: rL1UguUww16+qpjWXED/eoUk5gOMyQldxXwyPVcFAz0=)
                          2: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (hash: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:8f:01:52:2a:77:2e:eb:f4:d1:77:aa:fd:c3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : Mar  3 02:00:31 2026 GMT
        Subject: CN=73ff803b26deaf86cdd631a477c35ce052f9f11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:38:e7:37:b3:92:13:8d:37:fb:27:fd:47:
                    95:33:1a:0f:54:e3:9c:61:cb:65:7b:04:cc:de:9b:
                    ec:bb:15:a1:0e:f9:68:96:d7:6f:66:73:f4:e0:70:
                    77:f8:d3:06:5a:5d:2b:d1:96:1e:58:fb:53:08:41:
                    76:38:2c:08:ad:32:07:49:e8:90:72:3b:ca:e3:ed:
                    b3:3d:5b:23:c8:0c:5c:fd:bf:1b:c9:c8:a4:2e:fd:
                    cb:6b:e6:bb:6d:b1:53:14:e3:e3:1a:54:4f:5f:0d:
                    4a:3a:bb:aa:06:e8:8c:4e:5c:5b:8e:9b:9f:d7:74:
                    fd:58:d0:2c:f3:98:f1:55:f5:fe:aa:1d:9c:ee:b8:
                    fe:40:7b:bd:61:bb:c0:28:21:b5:58:e6:23:b9:0d:
                    f2:81:bd:e4:32:92:80:39:62:d1:20:10:5a:70:3b:
                    89:51:ae:6a:9a:62:05:3a:46:08:b1:90:1b:14:de:
                    fa:f5:18:29:40:69:85:57:43:f0:26:6f:30:e1:e2:
                    12:d2:6c:df:c5:35:45:68:d9:ee:66:b2:93:59:df:
                    3e:2c:35:fd:80:68:2b:c6:c0:93:29:89:c7:c1:db:
                    2d:34:61:c1:06:ba:ee:d5:76:30:f4:4b:cc:ef:dd:
                    7c:e8:bf:0c:d8:e3:da:76:f1:9a:fd:75:66:b9:25:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:80:3B:26:DE:AF:86:CD:D6:31:A4:77:C3:5C:E0:52:F9:F1:1F
            X509v3 Authority Key Identifier:
                keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:13:4b:52:94:29:5b:06:9e:4a:40:73:4d:a1:11:95:83:
         f2:1d:72:20:0d:48:ac:4b:cf:57:67:1a:d5:51:e7:63:02:1a:
         9e:70:69:17:56:dd:9e:e4:99:e6:88:06:c5:e7:82:12:01:1d:
         78:e7:89:dd:b6:10:14:1c:a5:90:f3:82:03:fd:53:29:bc:64:
         00:f0:62:79:51:87:96:1e:43:93:e2:57:7e:b5:83:c3:37:9b:
         e2:92:45:30:b7:3f:57:87:1f:7b:9c:a0:70:90:67:21:50:39:
         3f:23:fa:2c:ae:de:a6:87:2c:aa:31:d6:be:de:8f:bf:d0:d8:
         f7:6e:c7:32:94:47:5e:bf:89:c8:14:0d:f7:7d:f7:c0:ef:a7:
         2f:73:23:cb:01:30:2f:f9:0a:f1:3b:ca:69:50:d8:7c:5a:e4:
         33:71:8c:68:86:6a:ad:10:9b:39:96:94:8a:48:b6:27:e2:0c:
         af:0b:fd:2f:cd:2a:d5:ff:c0:c2:f1:c3:e9:83:90:ad:4b:90:
         cd:aa:7e:fe:1e:41:0e:41:f3:9c:f7:a7:7f:80:3e:aa:0d:76:
         bb:5c:c5:8a:49:0a:6e:30:e5:44:a0:26:d0:5d:1d:1d:49:e8:
         58:8b:ec:8e:04:28:e4:fd:75:ee:85:27:24:8e:f1:a8:e0:9b:
         1a:d3:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:40 2026 by rpki-client