Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          +OCl+zx7N6e0VlQ8mLSnrTG0siNG/sf6SaDTGDim+uo=
Subject key identifier:   5C:73:65:C1:78:76:F7:E4:F2:5E:B0:D3:B2:02:26:74:A4:FD:22:4B
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019CAC7E110D3FE330860277C31B3F6590A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 03:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:08 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: A8tahV1vIsOb7rfjIjm7NhoVR6uybciYGf64pRvat58=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:11:0d:3f:e3:30:86:02:77:c3:1b:3f:65:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Mar  2 03:01:08 2026 GMT
            Not After : Mar  3 03:01:08 2026 GMT
        Subject: CN=5c7365c17876f7e4f25eb0d3b2022674a4fd224b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:eb:15:8d:98:06:17:95:22:1a:48:5b:26:
                    1b:d3:32:96:30:a5:60:e2:2e:42:1e:ea:59:02:a9:
                    5d:18:6e:74:bc:98:de:d7:39:8a:b4:31:37:79:87:
                    40:31:f4:46:c8:1d:b9:ea:0d:be:cd:ee:0c:a9:f1:
                    7b:36:bc:7e:82:60:ba:e9:f9:56:f0:fe:59:c4:64:
                    78:03:64:1c:be:66:4e:a8:bc:1f:13:d3:f0:83:0c:
                    79:f8:9c:5e:49:08:db:1a:cd:cb:ed:a3:97:8e:f6:
                    6b:eb:b8:0d:69:15:0a:c2:10:49:e4:21:40:80:12:
                    b0:a4:4e:c4:3b:ca:47:0b:e0:cf:80:7f:56:42:55:
                    9d:fd:d4:05:ec:68:69:64:a9:13:b7:13:0d:8c:90:
                    d5:00:d6:4f:24:72:35:87:f0:92:84:4d:0f:7a:dd:
                    15:ce:7d:8d:85:1e:b1:7b:24:17:d9:81:0b:99:d7:
                    2f:a7:39:56:e3:42:9d:4f:6d:7d:ea:0e:fd:af:f3:
                    c9:c8:a3:a9:ef:ff:42:2e:f9:aa:68:f0:e2:0a:36:
                    09:11:21:ac:51:2e:af:f0:b9:b4:5b:cc:76:17:a2:
                    c2:ef:9a:7d:5c:3e:f5:36:4a:28:87:08:ef:1a:bb:
                    55:53:e3:2c:94:74:e6:ac:80:35:a9:d9:5a:68:13:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:73:65:C1:78:76:F7:E4:F2:5E:B0:D3:B2:02:26:74:A4:FD:22:4B
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4e:25:29:3c:5b:9d:08:23:6a:38:4a:4e:57:10:ed:7b:d1:
         62:62:7b:d0:20:6a:61:20:35:ae:14:fe:32:a4:1a:1e:8c:4a:
         d6:5f:b7:c9:70:64:09:3e:b1:14:3a:93:35:3f:ce:16:27:6a:
         9e:6f:3e:27:b3:f2:77:7c:64:d2:0d:58:39:4d:1c:9b:84:0c:
         2c:0d:c3:70:2c:a3:55:32:0a:26:b6:e7:9e:51:3a:8d:1c:d8:
         fb:e2:2c:01:a2:00:04:36:59:fe:d1:e8:09:c8:e4:e8:55:aa:
         12:89:be:d9:59:6b:47:3d:13:b8:41:38:29:59:8b:12:4e:70:
         ce:79:9d:2e:d2:ac:b1:ad:83:9c:0a:da:96:65:76:b7:fe:4b:
         d8:6b:c3:d5:58:d2:7d:dc:4d:18:03:6c:8f:31:55:00:07:52:
         64:07:40:a7:6e:6b:51:01:04:3e:2f:18:4e:5a:19:f5:b0:14:
         8a:04:ca:2e:6a:32:b3:ee:21:0d:77:51:89:36:e5:c7:92:d1:
         b1:7f:50:bd:6e:89:f2:b1:48:e0:fd:5b:8d:ae:dd:a1:bb:31:
         a8:19:92:21:75:a3:f3:a1:fa:1d:37:b4:f4:25:b3:ce:0d:4d:
         91:28:7c:e6:48:1d:a9:1a:a1:20:ec:a4:c2:3b:3d:0f:d6:a2:
         d6:29:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:09 2026 by rpki-client