Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File:                     CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier:          GFD7DT/gIA3h+j01IzI8sB2UTaZwd1N4EFiZPz0z18A=
Subject key identifier:   A4:5E:A7:2D:EF:12:36:BC:42:D3:85:F0:F7:92:D3:7D:90:35:D9:40
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer:       /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial:       019CABD98ACEE8A271EFF338FEC9153E32A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 00:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:26 +0000
Files and hashes:         1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: /DgAKxODmG99ranp+o6BTxu8bmaIrVOKps86uOA24Qk=)
                          2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
                          3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:8a:ce:e8:a2:71:ef:f3:38:fe:c9:15:3e:32:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
        Validity
            Not Before: Mar  2 00:01:26 2026 GMT
            Not After : Mar  3 00:01:26 2026 GMT
        Subject: CN=a45ea72def1236bc42d385f0f792d37d9035d940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:c3:67:7f:6e:2f:f7:10:63:ee:81:f8:bc:
                    06:1a:50:4e:fb:38:31:2f:0d:f5:a8:d4:d8:7d:72:
                    ec:8e:3b:42:a5:ce:e8:db:f3:93:03:0e:2f:3d:07:
                    fb:e6:e2:a4:bc:dd:d6:41:de:30:a2:f6:f4:68:83:
                    c4:30:43:c2:93:46:2c:27:93:c3:1d:12:ca:60:de:
                    47:d4:ff:ef:bf:4e:69:e6:f7:ff:0d:46:62:12:a0:
                    dc:b8:97:48:14:d3:41:2e:e5:9f:ff:0e:d1:44:5a:
                    c1:f8:f1:8d:64:b8:d1:fa:41:fc:ae:2c:96:40:34:
                    9d:f0:32:8f:2b:af:9f:d5:51:45:68:d4:74:59:8d:
                    07:c9:9e:1c:de:e6:2a:89:c6:1f:4e:13:d0:eb:10:
                    eb:bd:f5:d0:11:a3:18:27:86:f3:5a:97:67:c4:2c:
                    31:d3:7a:b0:bf:56:1b:df:ca:e5:4f:43:56:54:5c:
                    2f:c3:2d:44:18:51:07:b6:e8:87:3c:7f:77:d1:7c:
                    8e:22:fb:ad:a3:c0:0e:3a:da:7c:54:48:57:2e:50:
                    b1:a2:cc:9e:06:8f:8a:79:68:59:4b:8a:eb:08:4a:
                    0c:df:92:8a:04:73:e7:9d:ab:4c:3c:47:86:9f:af:
                    f7:7a:f7:d9:78:0f:7a:f6:52:06:5f:23:3c:53:c0:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5E:A7:2D:EF:12:36:BC:42:D3:85:F0:F7:92:D3:7D:90:35:D9:40
            X509v3 Authority Key Identifier:
                keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6d:26:af:97:e0:1a:ca:cb:36:c8:3b:46:97:7c:11:aa:c1:
         01:c2:e2:83:49:ef:64:39:6a:72:c1:4f:b8:2e:d7:a3:47:3d:
         5c:37:ab:8d:b8:71:95:98:34:f0:a5:b4:0d:92:17:90:a8:2e:
         18:e6:cb:21:e5:01:c0:b8:d9:0e:07:07:7f:62:01:01:63:1a:
         74:cb:2e:dc:a3:2b:a4:82:d6:3d:07:62:5b:c5:4a:41:9b:95:
         b8:f1:2c:72:17:86:5d:fd:0c:16:7b:10:34:4f:65:8e:4b:81:
         a9:b7:6e:f7:ff:92:8d:12:cb:42:bb:8c:6a:f4:64:29:ea:13:
         aa:b1:a4:1a:11:84:fc:26:91:12:b0:74:2a:cf:28:d9:23:83:
         22:28:f5:23:e6:30:bd:db:31:14:c0:6a:a2:22:c7:61:64:a9:
         32:d8:d2:77:9f:6a:2e:67:7c:af:c8:03:91:fa:5f:ea:27:96:
         18:21:07:df:7a:b3:75:75:21:2a:99:40:be:99:1e:20:7c:06:
         53:72:6d:30:4e:52:64:03:12:f6:bf:0e:f3:77:4b:12:a4:08:
         38:43:b3:b9:a6:86:38:08:81:d4:05:bb:83:ea:e7:05:ae:0a:
         69:35:8e:cc:21:20:58:ae:65:53:11:e4:5c:be:59:b1:48:b5:
         be:0e:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:00 2026 by rpki-client