Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File:                     5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier:          wGTIMkW5TfW3OHQei/vcBUqp1E1VNcpKuqLcLQZubfg=
Subject key identifier:   F1:9C:93:72:6A:06:3B:A9:82:EF:A9:E2:A2:D8:F5:44:27:5B:84:25
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer:       /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial:       019CAAC606AB9DFE55B51A8B2A9EB52B1962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 19:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:30 +0000
Files and hashes:         1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: /DO0WYcly7vBwS4uVwTJ2M30tum2SJL6OXNyJvvwUmc=)
                          2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:06:ab:9d:fe:55:b5:1a:8b:2a:9e:b5:2b:19:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
        Validity
            Not Before: Mar  1 19:00:30 2026 GMT
            Not After : Mar  2 19:00:30 2026 GMT
        Subject: CN=f19c93726a063ba982efa9e2a2d8f544275b8425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:44:51:b2:dc:dc:94:a0:83:a0:24:f1:a6:
                    88:7f:70:fd:2b:c5:4c:17:7f:8a:1f:d5:61:11:4d:
                    c9:96:8d:f4:a8:7d:ff:fa:55:42:a0:ea:d5:ae:4b:
                    28:eb:0f:b1:95:3c:79:85:d8:d3:70:19:b0:60:bd:
                    e3:27:3d:8d:4a:25:4a:a8:a2:25:d6:22:b2:c4:ea:
                    9c:31:f7:16:a7:91:c9:f8:ef:36:7a:00:47:85:5b:
                    4a:20:79:1f:21:9d:3b:fd:22:99:d6:6a:3a:9a:75:
                    fb:3e:48:8b:59:80:02:5c:be:d7:36:d3:f4:a7:ce:
                    d2:ea:54:c2:af:0c:4a:d5:1b:d7:64:58:15:5c:2e:
                    02:0e:c2:8b:ca:d6:f5:84:54:a4:95:19:1e:0c:24:
                    55:51:1d:d0:f3:39:6a:cd:b2:dc:df:81:4b:a8:fc:
                    c0:95:72:ea:e6:17:b3:39:f0:48:7c:a9:5e:7a:36:
                    56:05:3e:b0:62:eb:bd:c3:07:68:00:3e:b1:59:bc:
                    81:6c:03:02:a7:be:7e:01:66:26:7b:1b:47:4f:1a:
                    bb:33:2a:5f:d8:f8:9f:f3:6a:97:98:2d:06:1c:64:
                    cd:1e:9b:80:f4:f4:ff:09:1d:26:2d:24:ce:e2:5b:
                    6a:31:b0:bd:9f:2f:26:64:13:0b:70:e3:73:74:fb:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9C:93:72:6A:06:3B:A9:82:EF:A9:E2:A2:D8:F5:44:27:5B:84:25
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:2b:f0:72:cc:c2:15:8a:2b:df:e8:e6:18:62:9d:cd:b8:
         87:20:3d:e7:c8:16:f4:a8:da:bd:40:60:25:89:c5:14:1f:9d:
         ae:37:6d:a4:5a:69:6d:62:61:60:0c:a8:89:b0:a2:42:0d:3a:
         61:ad:46:81:c3:5e:8c:24:d3:1e:df:88:52:35:47:61:b9:81:
         b6:ea:18:39:9f:62:02:5f:52:35:03:6d:94:e7:35:f2:a8:59:
         a1:30:aa:a3:fe:6d:b0:b7:81:fc:31:5b:3c:df:7b:b1:e8:77:
         5f:40:13:15:88:57:3f:d9:a2:08:eb:ab:af:97:ed:c1:bc:28:
         7f:e1:73:a1:83:3b:74:59:f9:93:f6:4b:d6:a7:32:f9:32:7a:
         99:a2:93:7f:91:0c:45:ea:2c:c9:ff:7c:7f:29:f7:bf:de:08:
         4a:b7:7c:e2:99:ec:d4:a3:44:ba:49:2e:68:d3:9f:39:41:50:
         31:3f:b6:12:48:71:92:ac:19:c9:46:7a:bc:ba:78:1a:05:8c:
         98:4a:c6:88:40:80:db:c9:0a:2c:c9:fc:1b:44:e8:e8:41:e1:
         ef:30:24:17:d2:db:46:7c:96:58:8b:d3:84:df:71:17:5f:e7:
         29:af:0c:ee:76:9b:f4:62:f3:38:8c:b4:53:54:08:e8:22:95:
         9c:24:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:10 2026 by rpki-client