Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File:                     fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier:          MOAk7+F2KvV3mvjWUIZLGsSUQlW2RuMsZJDOoTzfTYs=
Subject key identifier:   60:7C:15:C4:42:71:52:4C:D0:9C:EB:2C:FA:C1:A3:CE:C8:FF:40:D7
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer:       /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial:       019CAC7DEC2C35CB7433E89CB2A9508C9848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 03:00:59 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:59 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:59 +0000
Files and hashes:         1: 77KGr-jWWnEf5X0Fk60T9XqPSLg.roa (hash: +M5bEYeEO2YC5D8B5GtUZyIzSZI3N7hUGF3x/KpZoMQ=)
                          2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: aHeLL16t5Usn8ajUYzhOP8kEYePE6HDaufYN6ZFjRtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:ec:2c:35:cb:74:33:e8:9c:b2:a9:50:8c:98:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
        Validity
            Not Before: Mar  2 03:00:59 2026 GMT
            Not After : Mar  3 03:00:59 2026 GMT
        Subject: CN=607c15c44271524cd09ceb2cfac1a3cec8ff40d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:d9:2a:41:d4:c7:31:74:81:bc:de:13:93:
                    39:69:6a:e8:07:44:b4:43:46:04:4e:aa:77:4c:68:
                    76:30:57:38:79:c1:0d:63:b9:8c:41:b3:d8:8a:ca:
                    c2:27:95:53:90:6d:9b:6e:de:77:c8:24:4a:92:a9:
                    21:f3:e7:68:79:0b:8a:e5:d5:a4:56:9b:35:8c:bc:
                    d1:89:5b:77:15:9e:5c:49:66:11:56:32:f6:3c:fd:
                    cf:70:49:e5:e0:1b:a0:ce:99:f7:1e:ef:6e:bc:be:
                    a0:c1:22:d3:a7:8d:cb:3b:fb:18:c3:65:9a:41:28:
                    b9:69:d8:7e:d6:75:cd:6d:f2:3d:f8:37:1b:fd:90:
                    92:dc:58:cc:60:11:38:a8:d7:a0:ef:d3:f7:36:4c:
                    be:aa:b2:4b:38:30:54:5b:0e:10:4c:4e:a0:e8:99:
                    cb:50:36:73:20:9f:76:70:61:af:7c:26:c6:19:02:
                    4e:20:15:ad:9c:df:22:0c:f7:cc:2e:32:77:14:93:
                    12:0a:0d:01:5b:c7:ef:96:40:eb:56:6a:64:f1:39:
                    9a:20:85:c5:bb:eb:77:b4:48:ba:a2:cb:d7:c7:f0:
                    bb:e4:44:0c:0c:e9:45:d2:26:b0:d4:78:e3:ec:a8:
                    f5:83:2f:ed:bb:94:13:39:a4:34:c6:fe:7d:a5:83:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:15:C4:42:71:52:4C:D0:9C:EB:2C:FA:C1:A3:CE:C8:FF:40:D7
            X509v3 Authority Key Identifier:
                keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:ca:28:47:7c:62:ea:01:6e:d3:c4:4e:aa:96:ee:29:fe:
         9a:0a:f9:da:80:c8:1a:c0:b1:46:32:8a:af:a7:41:2d:72:2b:
         35:ca:5d:d3:5a:1a:0a:b0:b2:96:b3:95:0d:81:73:8c:83:ba:
         8d:c0:4b:4a:d1:9c:12:3c:77:ff:ee:dc:03:33:ce:65:30:12:
         1a:b1:b0:b5:a2:0b:79:9d:b6:83:aa:33:8d:f0:48:df:b2:c9:
         6f:e2:fd:02:ef:fb:0b:e6:6b:a9:93:fd:2f:f4:86:59:df:d0:
         d8:40:83:37:a0:e7:79:34:b7:a0:62:cf:e8:69:39:bf:46:cb:
         d6:84:05:ea:e3:b9:d5:13:6b:1b:eb:f9:35:6d:fc:c5:63:81:
         a0:e3:22:6d:b6:b1:67:4c:8d:30:d3:4f:b8:2f:9e:63:17:56:
         15:a3:13:d4:0d:28:12:d1:e3:e0:39:7b:6c:c1:a2:c7:25:83:
         9a:0d:4a:81:f6:72:f3:55:40:ad:ce:7b:56:88:bf:41:6c:16:
         83:29:5f:43:44:03:3d:b2:cb:f6:75:06:5c:54:73:64:93:50:
         b0:f2:1e:58:6c:21:b1:d3:87:ec:42:99:6a:0a:1b:36:3b:b4:
         e7:2d:67:95:31:36:c0:66:de:1e:1c:d9:27:90:17:89:6e:06:
         1c:6f:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:42 2026 by rpki-client