Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          fm7NpiaryQwpxOdbVQjk0OfTf3QeXl/8fBA5/zhTv9g=
Subject key identifier:   95:32:81:40:19:3D:60:2B:9B:02:A7:C6:4E:2B:4E:C8:6D:A6:FB:39
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019CA7FC3B48F17F5D72F330B8FEDAC4BBA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 06:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 06:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 06:00:51 +0000
Files and hashes:         1: 3JZHqPsWutux5J8tHXPSTpnIdjE.asa (hash: VJyftmErWIHuJi9O9+UcgaAO+btvOOaS+hqj+dP6C7o=)
                          2: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          3: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: fYoNSr0jzRM88xmkGyQxgd5vO8cSqv8NG6HRYsb4AH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:fc:3b:48:f1:7f:5d:72:f3:30:b8:fe:da:c4:bb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Mar  1 06:00:51 2026 GMT
            Not After : Mar  2 06:00:51 2026 GMT
        Subject: CN=95328140193d602b9b02a7c64e2b4ec86da6fb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:19:d7:37:b6:93:b9:0b:9d:85:c6:ba:b4:
                    08:3c:3b:6a:12:e3:1b:52:60:51:9c:18:49:1c:c1:
                    c3:8f:b1:e2:46:8e:43:b5:a3:6c:8c:2e:26:2d:52:
                    75:3b:52:b2:8e:ed:67:bf:04:69:12:05:2c:b9:c9:
                    2e:b6:5f:a9:ca:1e:80:74:26:d6:09:87:8a:5d:b7:
                    13:68:e3:eb:9f:4d:a6:66:b2:e5:a7:e4:de:b8:9a:
                    74:a9:0e:b1:58:4e:26:f5:6a:d3:82:3e:cf:fd:b3:
                    b4:76:55:35:b9:48:d0:86:9c:6c:89:e0:b8:1d:55:
                    ea:c7:f2:7a:69:38:22:85:2c:85:54:03:b4:2b:e5:
                    2d:69:9f:d5:9a:3d:58:c1:d0:a1:da:58:19:65:75:
                    cb:22:b5:5b:63:30:c9:3c:bd:38:46:1f:16:5f:1d:
                    81:22:4f:1a:e6:83:a2:b5:75:1f:0a:2a:20:ba:47:
                    90:ac:16:1e:dc:a2:07:00:a4:3c:6e:96:78:07:8e:
                    a5:e9:fa:90:63:0d:0f:6a:2b:4c:8f:f3:5b:da:39:
                    52:c7:8d:39:30:71:9c:c6:cc:de:ff:2c:d3:29:85:
                    8d:d3:71:e3:7e:cb:38:13:c8:d1:02:f1:7d:79:92:
                    88:48:da:53:f6:2b:44:97:69:10:48:58:20:c5:53:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:32:81:40:19:3D:60:2B:9B:02:A7:C6:4E:2B:4E:C8:6D:A6:FB:39
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:cf:4c:83:07:fa:9d:2e:f9:d2:b5:4d:5d:d2:71:34:af:
         4f:12:45:e3:a3:c8:7b:d4:5a:d5:26:2b:9e:62:92:d1:fe:50:
         ed:e7:56:a6:18:5a:ec:53:f7:cd:4f:77:a6:46:13:a7:56:59:
         e5:31:b5:ef:a8:ad:f2:aa:bf:57:5c:ab:56:ce:c8:c2:2e:9e:
         e2:8c:99:aa:9c:ff:19:17:46:4a:8f:db:19:16:23:2d:e7:bf:
         ca:e5:75:52:c8:82:a9:a2:ac:61:26:8c:b1:4d:7b:64:d9:b5:
         35:bb:da:5a:7f:ce:d6:ee:a5:73:b5:30:b3:6c:c4:26:fd:c9:
         21:f2:33:f2:0a:24:0c:48:18:89:77:c3:42:ec:03:b9:01:02:
         5c:29:7c:47:64:1f:46:29:b9:7a:7b:2b:ba:99:08:e4:bd:35:
         45:e2:b6:f7:8d:f7:f0:31:36:e3:21:23:30:0e:5c:60:d6:19:
         2d:2f:04:3a:00:f3:44:a1:ec:fe:5c:98:7b:2a:1e:ec:0c:24:
         eb:3d:3d:5c:80:20:00:e5:8a:00:30:91:4b:35:5c:29:28:44:
         26:b4:81:1e:fa:eb:55:cb:7f:29:61:c1:f7:07:a5:9a:fa:3d:
         fa:53:8e:33:9c:68:cd:b9:19:c4:7e:a7:7a:46:28:ce:fc:20:
         90:23:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:45 2026 by rpki-client