Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File:                     pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier:          qha/3rTAQQ06fhnCFNCieNrkWhzLUOtGyehIKMeKvl0=
Subject key identifier:   F2:1C:7B:48:83:82:B2:4E:6A:DD:E1:5C:B9:F6:79:5E:3B:57:41:14
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer:       /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial:       019CAAC71670366BDF812DC7575BC9C4F962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 19:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:39 +0000
Files and hashes:         1: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
                          2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: JZF64oDh1euPLK641iIOys52/KlWmRPbbKYtAqO/77w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:16:70:36:6b:df:81:2d:c7:57:5b:c9:c4:f9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
        Validity
            Not Before: Mar  1 19:01:39 2026 GMT
            Not After : Mar  2 19:01:39 2026 GMT
        Subject: CN=f21c7b488382b24e6adde15cb9f6795e3b574114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:04:55:da:42:ef:24:32:7b:4d:f0:94:75:
                    6b:2a:db:8f:e6:44:89:e1:59:a2:31:a3:09:f9:c0:
                    ae:e3:ad:fe:7e:3b:7e:b5:e8:2e:af:8f:48:d8:48:
                    1a:bd:4f:77:b3:a8:36:bc:e5:23:88:05:7c:04:94:
                    3f:91:4a:12:f0:ce:c8:bc:48:d9:a2:c8:cd:07:14:
                    b8:0f:a4:ab:7c:b6:3c:1c:a9:69:3c:ce:5b:cd:84:
                    b3:51:dd:7d:f0:d3:a8:e0:a6:0e:67:ac:40:f7:d9:
                    1b:fe:f2:9a:41:d9:1f:b4:ae:96:e7:85:bf:0d:39:
                    5e:64:66:a3:83:1c:fc:c8:01:6d:f5:99:84:c4:3c:
                    f2:33:3a:29:8d:b4:ae:e2:81:40:46:9f:c6:32:51:
                    7a:23:e4:1c:67:0a:5a:e7:00:df:57:e3:81:b6:2b:
                    33:ad:48:a6:ce:1c:61:cf:1e:31:1f:83:99:31:12:
                    11:d6:4a:e9:5d:9c:39:21:67:cb:56:58:d6:ea:05:
                    ea:cf:39:4f:66:8e:41:49:57:05:66:0d:a4:bf:3a:
                    c7:85:f3:ac:6f:4d:b8:4a:ff:19:8f:dc:13:d3:57:
                    5a:a0:b5:10:7f:7d:43:af:02:33:97:3c:72:bd:9e:
                    dc:d3:b9:b3:f7:a7:3b:a2:dd:d4:79:d2:69:5f:c0:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:7B:48:83:82:B2:4E:6A:DD:E1:5C:B9:F6:79:5E:3B:57:41:14
            X509v3 Authority Key Identifier:
                keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:e7:d8:f6:8e:c9:1e:77:dd:d3:04:48:9e:9e:93:bb:47:
         1b:14:17:f3:7a:f9:d4:3d:85:c4:f3:8c:43:51:09:70:39:62:
         52:52:be:52:06:f8:4f:58:0b:46:e9:1c:9f:50:24:62:75:d1:
         03:6e:68:54:a3:62:5c:0f:69:d6:92:86:08:c7:dc:21:d3:b4:
         f9:83:57:66:b5:ee:d0:ee:f7:2a:71:45:de:07:14:28:55:88:
         c5:0e:05:45:ee:7f:0b:c9:4d:d4:8f:ff:e5:02:94:f7:d9:bb:
         80:67:b6:89:d0:78:d5:c9:68:ba:22:fe:97:19:c8:e7:fb:3c:
         6d:71:57:89:61:17:28:46:fe:81:44:95:ee:a0:e1:22:a2:bd:
         d9:b3:76:27:77:33:c6:f3:c8:de:4e:64:89:92:25:e7:f0:82:
         e2:f6:76:1f:ba:ba:72:c6:d7:67:85:0c:ce:7b:20:fe:3a:8a:
         26:40:47:78:c5:29:1d:28:ad:46:f7:66:d4:32:76:a7:07:29:
         f6:64:45:20:cc:b8:77:60:28:e3:d4:75:83:ac:52:3a:0f:79:
         17:6b:0c:e8:e5:52:77:3e:fd:95:cd:1c:e3:aa:6e:fe:68:cf:
         81:30:bd:cc:a5:3f:9b:34:24:56:32:26:e3:4f:39:0a:f6:b2:
         ad:ae:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:10 2026 by rpki-client