Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          MyXUlPv2PjhcWfSJ7qVQF5wwzeqKHzDhM9c7VRzzQPE=
Subject key identifier:   C6:06:08:21:85:19:D9:EB:6F:A3:06:44:8A:FD:C1:0C:39:7B:E6:0D
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       019CA97D42B7213096D7614FBF655057C6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 13:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:24 +0000
Files and hashes:         1: 6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa (hash: UlcGyQuYQRtTD6A9l9CK5v44VAfVgy8O5yhh3y24c6s=)
                          2: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: yQ2VoUAiPCo2qk++5SYuKsrfTs58sdr67mtU/XPG3X8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:42:b7:21:30:96:d7:61:4f:bf:65:50:57:c6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: Mar  1 13:01:24 2026 GMT
            Not After : Mar  2 13:01:24 2026 GMT
        Subject: CN=c60608218519d9eb6fa306448afdc10c397be60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:53:91:e3:1b:b5:33:53:0e:04:04:a7:73:
                    b8:ba:38:dd:cd:99:e9:77:bc:a4:8d:d5:50:8c:43:
                    d6:96:3b:c2:3d:d6:9a:7a:33:91:5e:29:d0:3b:ec:
                    6a:3f:8d:2f:c3:36:59:bd:76:7b:84:56:e7:8a:d4:
                    6b:23:e5:21:31:35:5a:4e:12:86:46:ae:12:a6:55:
                    2c:48:a4:17:83:3e:5d:5b:1e:95:aa:46:9e:64:1b:
                    fa:57:36:f7:df:5d:ec:c6:fe:7d:2a:79:91:76:28:
                    f7:af:2c:27:5d:cd:a0:76:db:83:28:c7:90:6b:06:
                    89:d6:05:f6:67:e4:a4:a0:ca:19:8f:73:75:bb:00:
                    59:a0:33:e5:0d:bc:cb:c4:21:e7:d4:fd:c3:99:1f:
                    0a:7d:da:1c:a9:1d:f6:ea:2e:81:35:be:25:03:c0:
                    59:fe:cf:e2:06:a6:83:c1:f9:65:52:b9:61:3e:bf:
                    d9:e2:54:18:d1:14:e6:f3:65:58:a0:20:9f:26:6b:
                    c3:7b:df:b6:21:b6:58:3c:82:53:18:8d:94:22:e4:
                    08:49:46:da:df:a7:a8:3e:ae:f6:15:91:e5:cc:21:
                    46:96:e8:6c:88:c2:c5:b4:cb:c9:1d:72:59:ac:7b:
                    ad:a7:6a:57:41:8f:b4:c8:9a:85:ac:bd:78:f2:83:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:06:08:21:85:19:D9:EB:6F:A3:06:44:8A:FD:C1:0C:39:7B:E6:0D
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:79:84:b9:7f:8d:09:99:18:6a:8f:66:db:43:20:a6:8e:
         38:68:74:16:d9:18:a7:35:26:df:73:df:62:f1:bd:cb:7b:72:
         e9:6a:78:29:f8:82:9c:0c:3b:66:90:8c:c8:06:22:b4:12:bf:
         09:94:b0:94:86:b7:75:cd:d5:de:49:fc:91:05:14:2c:70:61:
         77:00:5e:3b:0d:93:5e:49:3b:84:9b:94:40:48:aa:1c:92:cf:
         52:f9:3d:fb:23:74:54:2f:74:f9:f6:75:74:30:cb:4d:11:02:
         04:b7:f8:e7:59:e7:b2:5b:62:19:5e:71:85:33:d3:21:9f:d9:
         8e:bb:79:de:de:a6:de:45:9c:d9:a3:1c:76:48:36:c6:2d:f3:
         41:85:12:4a:48:f3:04:92:5b:fc:79:cc:d0:6e:00:e2:70:36:
         79:b0:89:14:e6:3f:67:24:fb:5c:08:4f:f6:0f:99:cb:fe:f2:
         7d:88:42:d0:5a:1f:58:15:a8:34:56:0e:e6:30:e6:c1:3a:1d:
         85:f8:b5:bd:94:05:68:f3:94:c6:ba:a1:d4:90:be:3e:38:03:
         22:49:85:c8:4a:a0:ef:70:d8:1d:a8:62:83:3f:5f:f2:77:74:
         96:a7:a2:98:17:92:63:95:b5:95:32:77:05:c9:29:0c:cc:f8:
         40:03:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:41 2026 by rpki-client