Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          HgUaIcLJRVbmlV4R1L/wP2iTjyjNS/NfMP3KKavITDE=
Subject key identifier:   5A:E3:C7:32:F9:09:79:DF:3B:0F:ED:8A:EC:DE:40:E9:B3:DD:7B:0F
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       019CAC46D2E8DCA2D8B091593E33FF6099E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 02:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:48 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: bu9A/YcPlF6DjJLMjj9czFdZIkXrCkzN7FlWDvGIDuA=)
                          2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
                          3: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
                          4: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
                          5: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
                          6: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:d2:e8:dc:a2:d8:b0:91:59:3e:33:ff:60:99:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Mar  2 02:00:48 2026 GMT
            Not After : Mar  3 02:00:48 2026 GMT
        Subject: CN=5ae3c732f90979df3b0fed8aecde40e9b3dd7b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:09:00:c5:21:de:80:8e:f9:7b:c4:7c:45:
                    36:dc:83:a6:1b:e2:6f:0c:1e:dc:15:c1:b4:af:12:
                    10:2e:df:cf:49:03:5c:e8:60:8f:48:50:51:81:a7:
                    97:5f:80:92:b9:04:c3:62:a5:53:ef:23:f4:b4:06:
                    d7:7a:ec:c4:4e:8c:53:7e:dc:26:a6:12:57:97:d1:
                    a6:86:7b:b4:24:ff:3b:29:41:33:f9:c9:e1:25:32:
                    4c:78:bd:6a:a8:3b:d1:a0:45:e9:a4:cc:60:52:3c:
                    cd:f6:33:d0:f0:f8:04:38:19:63:9d:63:dd:21:19:
                    df:cd:5f:67:95:3e:30:d8:8d:6c:9f:99:02:b1:78:
                    8f:c4:8f:79:f1:35:b6:39:5a:17:2d:c4:e3:38:4a:
                    a6:af:8c:51:da:ad:8e:bf:65:d5:79:d7:84:f5:c3:
                    6b:67:bd:55:10:66:d1:1f:47:1c:05:79:43:58:d2:
                    b4:b5:c5:7f:43:76:09:69:27:9a:37:ec:70:01:db:
                    99:5b:26:aa:e4:06:6b:27:2a:d4:fb:90:2c:ce:03:
                    93:b8:3c:5e:aa:1f:7c:1f:f4:87:ce:c8:d0:a9:b8:
                    25:6b:87:0e:d2:36:62:72:5f:d9:76:49:a3:02:42:
                    f2:39:e7:26:59:03:2a:81:e4:28:3d:28:69:88:34:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:C7:32:F9:09:79:DF:3B:0F:ED:8A:EC:DE:40:E9:B3:DD:7B:0F
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:26:aa:14:b3:07:41:a4:63:7c:5a:fd:2b:c6:c2:38:9a:f6:
         01:57:ae:9f:0e:b6:82:b3:22:92:6c:e1:5a:60:b8:2a:73:2e:
         b3:1f:fd:56:66:30:ab:50:3d:36:f2:f3:03:e1:0d:16:d2:49:
         e2:49:9b:8c:1a:01:94:75:b6:df:e4:ca:df:a7:9e:66:ff:2b:
         3e:a3:85:67:1b:e2:0f:48:66:ec:2e:58:10:d5:2c:f5:59:7e:
         8b:b2:dd:d8:7f:9e:47:d7:44:5b:b5:91:b4:ba:9d:5e:b8:13:
         c4:a2:d3:c4:51:3b:d3:f7:c5:e0:97:be:08:ae:66:47:0f:96:
         04:c2:df:b8:7b:9f:c3:1b:56:55:66:62:ef:ec:d3:a4:15:00:
         4f:27:a0:c1:ac:8d:30:89:d1:8e:5a:bc:1e:ee:65:36:6b:fc:
         e2:44:18:60:10:0b:68:4f:68:6e:9f:04:b5:7b:af:8f:d5:9f:
         7b:f3:54:fc:15:66:2f:1f:e1:59:0c:bf:83:02:ab:d6:45:73:
         c6:52:df:77:e9:8d:34:a6:4d:be:03:a9:a5:c5:e5:19:05:9c:
         e6:d5:36:f9:f8:38:f2:2c:31:85:50:96:a5:b7:c3:58:9d:f5:
         5a:c7:d1:b5:04:e8:29:02:fc:52:40:4e:8f:cb:7b:b6:16:55:
         8f:e1:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:07 2026 by rpki-client