Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File:                     SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier:          OFfymn/J/1q4y0VoL0aHZve4bcNPeiGzsT71Q1uiupg=
Subject key identifier:   52:58:E6:F3:BF:1C:CC:A4:24:52:CA:EC:02:6E:2E:DB:C0:6A:F1:8A
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer:       /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial:       019CAC468FBBC810CB364E9966CD33A6E4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:31 +0000
Files and hashes:         1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: aFoEZjJPTGOhS4v/qaqrvEvj5W2M8s1MK/V4F85C7O0=)
                          2: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:8f:bb:c8:10:cb:36:4e:99:66:cd:33:a6:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : Mar  3 02:00:31 2026 GMT
        Subject: CN=5258e6f3bf1ccca42452caec026e2edbc06af18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:71:62:66:c4:8c:a4:91:0c:f7:60:62:7d:
                    f7:34:f6:2f:33:aa:9a:28:84:6e:d0:9d:6e:22:57:
                    b9:c2:de:12:da:a9:1d:ab:a9:58:bc:1f:b9:09:bd:
                    f2:33:4b:a7:16:55:3e:b3:0c:0a:19:71:9d:f1:1f:
                    3d:fc:04:b9:2c:c2:6c:22:b4:d2:d0:a7:2f:7f:c4:
                    7e:1d:ce:bf:3f:a8:9e:8b:ae:b4:1c:a7:a3:f4:2b:
                    68:07:de:22:03:17:66:81:08:24:9d:03:a4:2b:cd:
                    ba:be:56:47:38:d6:53:14:a0:a0:2a:d1:7d:c2:c2:
                    88:14:b6:0f:93:ca:26:ff:9d:af:21:d7:79:9c:6c:
                    91:86:57:b8:8a:eb:bf:55:90:49:a3:f9:65:26:cb:
                    1e:25:bd:c8:8b:d2:b4:35:20:84:f2:03:18:fd:52:
                    92:3a:97:97:b4:9e:09:41:a3:bc:2e:1c:51:6b:98:
                    a7:7b:47:3e:5a:63:32:1b:ef:1b:dd:76:cb:79:89:
                    bd:00:5f:ea:0d:ff:cb:62:0f:bf:b8:8d:33:f1:b5:
                    40:ed:e7:3a:73:23:55:0c:6f:c2:8d:96:24:55:fc:
                    ce:39:e5:f0:66:e5:ac:1a:92:f1:35:fd:df:00:3a:
                    83:68:1f:73:c4:a3:66:ce:4f:dd:c1:e4:68:94:5e:
                    43:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:E6:F3:BF:1C:CC:A4:24:52:CA:EC:02:6E:2E:DB:C0:6A:F1:8A
            X509v3 Authority Key Identifier:
                keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:53:6b:03:55:fc:fa:a5:af:2c:5a:e1:17:96:2b:bd:ea:d9:
         6b:cf:1d:26:bb:a4:aa:be:f8:c1:61:21:f3:9a:7c:99:3f:16:
         d5:ed:03:03:c4:14:91:32:26:bf:5c:38:0c:0a:da:63:66:6b:
         36:84:a9:21:2d:c8:5b:37:bf:dd:f1:66:44:90:84:da:b8:60:
         93:9a:5a:4f:76:cb:b4:e6:5c:74:b5:b0:ed:26:fc:5f:f3:42:
         5d:70:39:81:c9:36:18:b1:5b:01:58:f8:f1:24:71:4d:38:40:
         a2:09:88:20:d8:fa:56:31:02:68:58:91:f0:96:eb:9d:a0:e8:
         ff:7e:37:44:89:f4:c0:6d:91:d7:34:2a:73:66:d8:31:b3:9b:
         b2:a5:60:5c:78:a5:d3:06:08:8e:8d:08:e5:41:b9:9f:87:81:
         71:dd:b5:5c:64:ce:22:0f:1b:1a:6f:da:7f:22:98:b5:8e:73:
         1f:42:c7:2e:05:af:7a:57:cc:49:9b:25:16:ea:fc:d5:74:ca:
         92:b6:53:17:aa:39:bd:da:74:ad:c5:28:83:b9:c0:65:4d:01:
         17:1e:aa:f7:62:c3:0b:50:12:14:35:03:b7:21:75:dc:46:5b:
         55:3e:db:a7:ac:39:42:11:3d:03:2c:e2:e3:15:a8:97:81:1f:
         3d:f4:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:30 2026 by rpki-client