Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          6IbouYbc+EtkfSt6DrH1a3p8b6IJ9vL/TgE8sumkeb4=
Subject key identifier:   F2:A1:FD:D4:88:FE:85:FA:AB:C7:2D:17:AF:1C:8A:BF:32:2E:40:DD
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       019CABA21EF4E21C24891ECCAB7F1521C476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          1851
Signing time:             Sun 01 Mar 2026 23:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:54 +0000
Files and hashes:         1: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (hash: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0=)
                          2: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=)
                          3: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
                          4: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: yjGYyc6q0Nhk2h1EnqA7ff4ebEEyd7Mohf471B0FtSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:1e:f4:e2:1c:24:89:1e:cc:ab:7f:15:21:c4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: Mar  1 23:00:54 2026 GMT
            Not After : Mar  2 23:00:54 2026 GMT
        Subject: CN=f2a1fdd488fe85faabc72d17af1c8abf322e40dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:c6:22:03:b8:7a:bc:34:40:fb:06:ab:39:
                    c1:f1:67:3c:c0:88:62:cb:85:b3:da:fa:d6:e0:50:
                    bb:bd:06:a5:2c:64:1e:e7:14:fd:9f:16:fd:52:84:
                    2b:10:f6:e0:60:47:9c:13:44:5a:73:c3:20:88:66:
                    bc:df:2a:87:12:71:30:e7:64:4d:f5:2b:97:19:14:
                    8b:f2:71:87:a4:5e:6a:91:0d:e4:37:e6:21:c5:36:
                    df:57:57:a8:13:56:a5:54:bf:3f:b3:1a:a8:c5:a4:
                    cb:fd:b5:12:5a:8c:b5:8b:2a:b0:f7:51:d7:e7:4d:
                    79:b5:3d:5a:89:94:f5:ce:8d:a8:de:08:8e:c2:43:
                    9d:40:43:58:1a:3e:65:db:35:f8:98:c2:29:9b:9f:
                    88:4b:9a:f6:58:fc:68:90:0c:1e:17:2c:aa:f0:97:
                    b6:09:8e:83:2b:83:b7:96:07:7f:f6:ca:e9:82:f7:
                    dc:e5:b9:5a:e7:0a:e9:a0:6d:85:05:1e:a9:3a:3b:
                    32:60:df:35:0a:fb:f8:6a:8e:9a:97:0b:ba:3b:7a:
                    25:00:89:ff:4c:de:c4:0d:7e:86:f6:b0:e5:3d:18:
                    f4:03:89:63:68:0d:ee:02:af:1e:c4:a9:b0:1e:9f:
                    81:7e:5b:2e:82:97:aa:d2:6b:50:96:ac:05:d5:8f:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:FD:D4:88:FE:85:FA:AB:C7:2D:17:AF:1C:8A:BF:32:2E:40:DD
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:73:61:2b:96:12:dc:06:3f:25:0e:91:44:3f:f0:6a:af:5a:
         f8:3b:40:f6:8b:eb:0f:91:47:98:e7:b5:df:78:ea:4d:53:72:
         f6:56:07:7e:35:b9:7f:5a:94:7c:b7:03:1f:1c:76:3d:8c:4d:
         bc:57:5f:68:7d:27:3f:d8:f1:24:42:ef:21:c8:41:31:c2:1c:
         8a:90:05:a0:e6:9e:69:d0:51:78:d3:c9:f3:74:8c:bb:da:27:
         cb:5e:ab:67:b0:8e:0a:71:a2:a8:9c:79:87:3a:30:42:1d:3f:
         51:2d:8e:8e:28:82:d4:3b:d7:b3:71:19:65:07:16:09:b2:c5:
         75:aa:3c:f4:ed:17:b3:c8:66:28:a8:4d:f3:fe:4e:a1:04:63:
         24:0a:f0:11:f8:44:25:4c:c0:13:85:e3:fa:5a:a1:29:84:cf:
         c6:64:3e:8c:b0:d6:e9:12:4d:37:30:16:8e:df:60:40:c0:35:
         ca:d1:8b:f9:c9:61:44:ca:d1:71:fd:5e:0d:5f:6e:8d:4a:dc:
         8e:f5:f4:09:47:d9:63:4d:cb:50:e7:05:97:3a:36:f3:3e:7b:
         20:5c:1f:c1:bd:62:2e:31:93:ef:d6:e4:20:52:54:01:96:e3:
         30:94:7e:5b:ab:98:76:0d:96:5b:00:2a:44:96:df:86:36:d2:
         24:cc:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:37 2026 by rpki-client