Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          JeEoTWEWDshuvS0aus0KWBjEGwSqf9TSD44MbyUO4XE=
Subject key identifier:   97:23:6D:A6:1D:4D:7C:B0:E7:89:84:DC:43:7C:0B:1E:4F:E6:96:C9
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       019CABD9235542EA942E0BE02C20F3461ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          1850
Signing time:             Mon 02 Mar 2026 00:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:00 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: C0vWewKzWy1Kuapg0EzTzAxrsmQLdDJole5cEDxfG5M=)
                          2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
                          3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
                          4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
                          5: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
                          6: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:23:55:42:ea:94:2e:0b:e0:2c:20:f3:46:1e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Mar  2 00:01:00 2026 GMT
            Not After : Mar  3 00:01:00 2026 GMT
        Subject: CN=97236da61d4d7cb0e78984dc437c0b1e4fe696c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:75:8e:54:b4:64:61:3c:01:5d:fb:f1:67:
                    7b:01:46:4b:7a:7e:ff:c5:d4:9a:1b:33:87:97:09:
                    88:d6:6b:4e:2f:b2:f7:ab:d7:12:29:3a:7a:4e:ec:
                    04:4a:65:4c:17:5a:a5:20:ad:6f:99:46:3f:f8:ab:
                    62:d8:67:2f:b1:d1:41:9e:b3:05:e7:fe:3b:14:05:
                    e3:81:a6:7a:2b:2b:49:b9:4c:9d:31:d2:40:0b:48:
                    40:fe:c3:4b:7d:13:07:39:db:3e:f8:a1:82:84:1f:
                    7a:e4:c1:46:6a:70:03:9d:58:6d:7c:c6:e8:42:61:
                    25:04:2d:d1:a2:3e:a3:9c:87:a3:05:c6:3c:e0:ac:
                    5f:52:8f:3c:be:fd:ae:01:70:c6:25:02:b6:fd:67:
                    3e:d3:bb:86:b3:24:ee:51:fd:e4:fa:d8:c3:21:6a:
                    01:5b:80:43:da:ca:24:8b:d4:3d:24:08:2a:be:78:
                    c2:5f:9c:f4:8f:a4:8b:fb:3d:68:3c:f5:b5:fd:97:
                    7c:c7:e2:13:51:e0:4d:ef:e4:84:75:ea:24:f7:fb:
                    db:14:ba:5a:1e:7f:ad:60:92:01:2b:63:94:e0:af:
                    71:a9:a3:3c:65:fe:49:fb:27:23:92:b3:fa:29:fb:
                    fc:11:a0:f4:fa:ed:fc:91:44:e0:e6:c5:59:64:98:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:6D:A6:1D:4D:7C:B0:E7:89:84:DC:43:7C:0B:1E:4F:E6:96:C9
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:91:2d:4c:87:42:33:f5:eb:d9:3f:02:58:cd:34:ff:1a:bc:
         7b:57:e2:e9:74:fb:de:28:24:50:a6:5c:52:4f:61:5d:ca:e1:
         6b:91:6e:83:22:09:0d:75:23:cf:51:18:a9:00:13:36:5f:c2:
         00:94:88:e6:a9:cf:ea:b8:4f:81:80:ec:27:b4:3c:b4:81:a5:
         e0:8f:c7:c6:1b:5d:da:2f:08:4f:82:9a:78:dc:fa:17:3e:1b:
         5f:4a:58:e2:01:71:16:bd:27:90:d3:14:91:db:8a:e6:92:ec:
         d8:99:c1:0a:1f:33:34:f9:64:3d:d8:e0:46:de:66:dd:ce:25:
         c3:d4:23:9f:90:8c:69:45:d5:65:15:85:ff:37:60:63:17:50:
         d2:2a:a5:be:b8:ed:f9:95:60:b3:1c:09:a8:2c:50:55:91:0e:
         b7:e8:ec:6b:e3:b1:28:42:aa:6c:e2:ec:b3:22:57:ec:29:20:
         5e:48:ac:93:3c:92:36:36:6d:d0:e4:fc:6e:09:b4:db:11:ee:
         76:52:08:1b:9a:0a:80:80:16:e7:0a:fc:68:86:b8:c5:da:31:
         a2:c0:c4:4a:3b:7d:ef:9f:f7:a0:f7:9c:36:9c:01:cd:a5:60:
         81:d4:6e:fe:da:a1:84:d2:49:bd:43:66:90:52:f4:b0:81:d0:
         09:e3:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:07 2026 by rpki-client