Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          mH4eriCjoSLfhZQHhbFWX0vk/eTPp77qnf6+A5vr9JQ=
Subject key identifier:   A0:6E:78:3E:11:97:D3:DF:A7:4A:82:94:C7:CA:1D:C5:EE:72:33:7E
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       019CAC4711D50F98833DC9A35DD1BE7C5A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 02:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:04 +0000
Files and hashes:         1: _ogFXsnc26cwnEEfI1RwCOLLjKE.roa (hash: T8WBXJPVj3V1XgVoalRoALm/8/55OH4oJDKe47m+Cgk=)
                          2: cisGlTDG6YbGvbXjq8ObLwOftto.roa (hash: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho=)
                          3: uWQ_yyWTJKlwMIna4dHe1PfEbz8.roa (hash: tvPaUHk8Xmgw+avX8XEILYU/M4IbkxRiILy7UdTCanQ=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: MIX2zWcJSNvZuuhwKgc1iGQaorsz16ufvYxsiFpwD3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:11:d5:0f:98:83:3d:c9:a3:5d:d1:be:7c:5a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Mar  2 02:01:04 2026 GMT
            Not After : Mar  3 02:01:04 2026 GMT
        Subject: CN=a06e783e1197d3dfa74a8294c7ca1dc5ee72337e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:b7:7f:5a:af:cd:ad:c6:95:e4:cf:1b:a8:
                    64:d0:ae:57:75:c7:ea:da:7b:b9:c5:eb:ff:70:f7:
                    1b:52:6c:b6:38:d2:7e:55:96:38:99:e0:9c:d7:a4:
                    ce:0e:fe:09:fc:b0:d8:06:80:57:9e:78:46:51:9e:
                    ca:0c:25:e9:83:25:f2:a6:bf:0a:44:dd:b2:51:8e:
                    42:4d:8f:43:01:11:32:f1:18:4b:7b:d5:8c:d3:2b:
                    ea:43:0f:b0:30:ee:8a:be:55:08:22:e4:bb:25:1e:
                    29:71:99:f7:c6:41:3b:74:87:85:b7:a1:15:38:e9:
                    f1:bc:ba:4c:78:68:49:b8:ff:83:e4:85:9c:74:49:
                    c5:f3:78:52:ea:d0:df:f0:39:d3:85:d0:ca:01:07:
                    4a:79:1b:13:39:72:36:a3:49:e0:e0:6d:11:59:c1:
                    d6:58:c2:df:7b:d6:1f:c1:43:44:dd:d2:21:6a:14:
                    71:73:b3:c8:0e:65:82:f5:ab:93:ec:f0:1e:0c:ac:
                    bb:1c:e1:a7:54:3e:9a:da:9e:83:5e:b8:f5:c8:31:
                    9c:ca:9b:ef:5b:57:4a:85:02:c9:4c:09:7a:c4:6a:
                    6b:37:98:a0:5f:b3:a3:b4:a3:20:e4:ad:48:9e:3b:
                    77:2c:12:9e:e3:da:16:c9:ee:03:ed:2e:64:ca:4a:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6E:78:3E:11:97:D3:DF:A7:4A:82:94:C7:CA:1D:C5:EE:72:33:7E
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0f:00:7e:29:59:99:79:8a:3d:2e:82:03:a3:74:17:a3:af:
         f6:02:3e:b0:5d:85:f6:47:29:2d:99:66:0f:85:9f:c0:14:a0:
         37:ce:90:58:0d:dd:7f:cb:e5:81:8b:bf:69:5c:85:01:76:80:
         59:0e:9a:86:31:09:de:ff:65:ae:72:4c:1e:6c:3c:58:59:d7:
         ba:53:44:30:18:db:ed:2d:0b:61:ed:68:df:4b:54:a6:76:ef:
         1f:a4:bf:aa:0d:b0:e6:89:20:68:ee:b2:37:d3:66:88:cd:65:
         67:e7:3a:d3:69:d3:93:9a:2a:53:88:03:c8:1a:e1:c1:0b:62:
         5c:bc:7b:5d:59:3f:c6:8f:4d:42:18:ee:76:9a:8e:c2:03:59:
         9a:d3:11:78:03:d2:db:38:4a:8f:84:5d:89:6c:dd:db:ea:1b:
         88:50:a2:35:d5:ae:9f:52:b8:60:58:1b:75:c0:b8:06:65:b7:
         2e:37:50:d3:6f:37:89:96:77:53:78:0b:3c:da:66:c0:7c:aa:
         a3:91:03:e2:1e:6a:83:66:77:33:84:06:77:28:08:06:9f:1f:
         7c:fb:23:ae:8f:e0:17:e1:09:d6:25:6c:e3:64:55:b2:3e:76:
         e2:c1:9a:8c:51:bb:eb:c4:0b:ff:18:b4:60:44:4b:52:6c:6a:
         49:89:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:28 2026 by rpki-client