Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          ZB5KqteTKbQU4CM7w3NuCeb/vTCIYF/ojRk3FXCTPZQ=
Subject key identifier:   68:51:A2:C9:17:98:46:AE:19:E6:E3:70:0E:E8:F7:06:DC:03:79:60
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019CADC7E05CFF2C5474517FBD37B1875B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          1857
Signing time:             Mon 02 Mar 2026 09:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:23 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: Ov7bZWm3mB/DnjK7ENS1QVZTmt9pExLfX9YKEh+VwwE=)
                          2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
                          3: KINZYIE6_XaYNki6NUivcoprCUw.roa (hash: qhCfbFIbX14JzdD9PrKyC8S6QJj73yUa2umRc8K8fPw=)
                          4: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
                          5: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:e0:5c:ff:2c:54:74:51:7f:bd:37:b1:87:5b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Mar  2 09:01:23 2026 GMT
            Not After : Mar  3 09:01:23 2026 GMT
        Subject: CN=6851a2c9179846ae19e6e3700ee8f706dc037960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:3e:04:28:1c:cf:95:c7:8c:76:49:41:d4:
                    29:ed:f0:e4:22:ef:2f:aa:65:0e:4a:fe:4b:1b:7f:
                    60:ac:9c:aa:cb:df:96:8d:6e:39:d4:2a:cd:05:a2:
                    73:d4:01:a0:22:fd:34:37:7f:a4:94:ed:39:3b:e5:
                    16:14:48:12:df:83:68:3b:56:6b:17:7b:59:68:90:
                    ea:c6:bf:d9:da:7c:5a:f5:03:62:b3:1b:fb:ca:8b:
                    91:eb:e5:0a:dd:90:4d:d5:94:25:7b:41:8f:6d:1b:
                    19:44:3f:86:cc:a8:2b:c9:5a:b7:fe:c2:ae:84:c8:
                    7c:26:47:d0:12:1a:2e:bc:74:ac:96:ef:40:8c:05:
                    18:e7:e2:24:94:c7:59:fe:f2:6c:75:88:42:c5:2c:
                    58:f3:c6:54:c7:bb:33:97:bb:1a:61:5f:14:b0:fe:
                    1c:39:31:15:60:4b:6d:47:df:ba:53:7c:5e:ce:00:
                    59:d6:cd:55:d0:63:81:38:b1:6f:e3:b5:a3:b7:eb:
                    b8:12:e1:19:80:b4:ce:ad:d0:65:34:86:b8:38:2c:
                    a2:22:fc:92:54:93:79:b4:fd:b6:31:35:c7:19:a0:
                    29:40:dc:be:dd:d6:99:31:b1:84:6a:be:67:87:38:
                    41:ef:d0:ae:49:2f:9e:02:d2:f7:03:40:95:ff:bd:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:51:A2:C9:17:98:46:AE:19:E6:E3:70:0E:E8:F7:06:DC:03:79:60
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:10:5e:67:84:f1:d8:df:0f:98:b7:79:a3:fb:66:c6:0e:3b:
         7c:e1:76:d7:d8:08:7d:09:c7:c4:98:ac:c8:74:a2:94:de:c0:
         19:11:8a:2c:7c:cb:cc:cb:f4:b6:12:46:85:db:9a:08:06:64:
         7b:28:02:a9:5b:f6:e3:f4:06:50:1d:fe:3d:23:b2:bd:f7:0b:
         50:58:bc:6c:ce:19:dd:19:4c:3a:8f:a9:b3:71:e2:3a:97:5d:
         b2:02:2d:3b:45:47:50:84:e5:de:c7:5d:1c:d5:14:9b:bc:a1:
         03:1f:bc:75:73:44:45:71:2b:cb:7a:67:fa:96:f8:85:a8:63:
         9a:d8:14:c7:0c:29:87:e5:da:43:12:92:fc:9f:0f:d8:b0:c6:
         a9:a2:ad:00:31:86:72:e2:e3:70:9d:2b:34:98:c9:05:a9:7e:
         b5:6d:db:7d:2d:c0:bc:1f:54:73:6e:b3:45:60:20:69:aa:fc:
         0b:8f:a2:31:23:f6:32:59:b4:d7:7f:01:24:b7:2f:3e:5c:04:
         6d:50:3b:16:9f:35:96:94:d1:7e:72:16:9d:ff:bc:1c:36:02:
         a6:4e:64:23:02:87:9a:db:7f:3a:58:a7:fd:5f:66:b2:d7:34:
         55:37:97:be:96:09:2e:7a:45:21:fd:cb:0c:d8:dc:21:a7:40:
         32:05:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:45:56 2026 by rpki-client