Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          YP1C2emKH91QrcG/xJJKEXTeSTfslkdVUQQSpBf9PKY=
Subject key identifier:   A5:5D:3D:73:70:3D:58:24:5B:F9:4C:B0:9D:30:AA:A0:5E:92:84:37
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       019CAE35BB843DAD87355F1528B8160EC9E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 11:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:22 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: nB2hC8vAWm745WaJO1AIrFIUngUG1UN5caIiXPRIWvg=)
                          2: yhCwjfMZQm7fd9jkt80pOtuEFGo.roa (hash: hs2p0KXq3AByfrOTWurPjFi6ySD7XrB1GNNKZ5BnbRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:bb:84:3d:ad:87:35:5f:15:28:b8:16:0e:c9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Mar  2 11:01:22 2026 GMT
            Not After : Mar  3 11:01:22 2026 GMT
        Subject: CN=a55d3d73703d58245bf94cb09d30aaa05e928437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:e9:1f:0a:6f:a2:8f:8a:48:15:9e:b4:c0:
                    fb:7c:45:9f:3f:f1:a3:c4:cf:7e:4d:7b:01:dc:f5:
                    af:45:58:43:fb:a1:31:9d:b5:f3:47:35:1c:6a:b8:
                    01:48:ae:8f:35:8d:c8:6a:c6:ec:77:6f:a3:b8:60:
                    f6:26:cf:3a:23:bb:ef:b4:77:7c:a2:ba:a2:24:87:
                    eb:10:69:07:1f:b8:f9:85:7e:fc:ae:2f:4f:ba:85:
                    30:8c:a2:9d:36:4d:e5:31:b6:c6:8e:09:c5:bf:f9:
                    8c:33:7c:c4:90:62:14:db:bb:9d:46:e8:f4:2a:93:
                    85:51:04:df:c4:fd:57:0a:5a:33:66:e0:27:02:0e:
                    c3:47:ab:8e:6d:4e:b0:6a:50:f7:0a:0d:2f:0b:75:
                    e5:a8:e4:d8:f3:4b:82:77:c5:a1:39:f6:0a:8a:43:
                    cf:78:33:ac:76:e2:f2:3a:a7:28:da:bf:4d:90:91:
                    b2:8f:7c:36:20:30:57:6a:e2:0d:74:91:bf:ee:b0:
                    7a:61:53:16:aa:77:83:e1:6f:9f:eb:4b:c7:ee:5c:
                    d3:1f:a8:26:6a:9c:66:01:5c:df:a0:77:61:d0:cb:
                    28:f5:90:e2:79:ed:2b:fc:e5:a6:81:f3:01:20:59:
                    03:4a:7b:52:43:39:b3:43:e3:d0:43:01:2f:c8:5b:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5D:3D:73:70:3D:58:24:5B:F9:4C:B0:9D:30:AA:A0:5E:92:84:37
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3f:40:f6:84:69:61:c1:18:28:24:25:5a:bf:8c:87:87:1c:
         5d:a7:21:76:df:a1:60:db:ae:26:e0:64:b5:de:b1:41:a7:a4:
         32:ff:bb:0b:aa:3a:12:11:de:c7:f5:1e:b3:e8:ef:48:cd:17:
         a7:da:5d:74:4c:48:65:f2:1f:e2:9c:3d:d4:ef:e4:b6:22:44:
         72:6a:36:ad:6e:c4:e3:6e:67:9b:07:90:7f:e7:c9:c3:24:1b:
         b8:cb:fc:b3:23:69:f9:df:c3:a2:76:33:ae:88:aa:79:62:89:
         fa:f4:ae:78:29:55:be:1f:a6:b5:37:e4:48:2c:b0:93:a9:f1:
         79:d8:27:25:c4:3c:6e:58:98:ae:9f:86:23:a1:2a:de:f9:6d:
         19:0f:7b:3a:01:61:de:f9:c9:17:db:35:23:b3:7a:f9:df:45:
         df:79:5b:ee:04:f9:25:5a:2c:15:22:7d:04:86:63:e4:65:a4:
         f0:84:98:e9:ba:64:0b:fc:bc:48:bd:f9:0f:68:1d:a5:d4:b8:
         32:89:4e:fd:aa:69:17:fb:79:b3:a9:42:7c:5f:ca:21:fe:2e:
         1b:a3:8f:07:d3:fb:08:ba:ee:aa:b2:b6:fd:a3:4e:f4:2e:c8:
         e7:9b:28:e5:c2:a4:ea:9f:3a:83:2c:01:28:b3:a7:aa:3c:b0:
         a1:6f:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:50 2026 by rpki-client