Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          hS6ez+G3vFmTqXGTeTpJOBlkaI3c6WEoBuwa1/qxspM=
Subject key identifier:   FF:F2:99:FF:4B:A4:D7:F6:B7:97:F9:91:9A:FF:1C:05:BD:7E:62:B9
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       019CA9461F4F85F8C1BE2A06D217282EE990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 12:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:10 +0000
Files and hashes:         1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
                          2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: 5beEZIvK+jBcQ59Z4//jAj/KKjkju7qmPtAi8ExEpWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:1f:4f:85:f8:c1:be:2a:06:d2:17:28:2e:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Mar  1 12:01:10 2026 GMT
            Not After : Mar  2 12:01:10 2026 GMT
        Subject: CN=fff299ff4ba4d7f6b797f9919aff1c05bd7e62b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:b8:32:b5:20:98:5c:a5:00:8c:7d:a1:80:
                    90:89:49:dd:4f:20:74:59:5c:87:75:5d:46:c5:99:
                    6a:6a:55:e1:e3:dd:42:dd:b1:26:1c:ea:10:d7:6a:
                    2c:c1:11:17:7f:2c:ac:4b:37:c7:b3:e6:b2:79:df:
                    a5:9e:5a:0b:47:5b:24:c7:08:19:86:04:8a:b9:9b:
                    3d:ab:1b:94:66:c8:12:9d:aa:3b:49:83:11:c4:8c:
                    ff:a3:15:c2:5c:67:e4:df:2d:31:97:95:bd:fb:ce:
                    b9:c2:b1:c4:18:c7:ec:d4:31:1e:fe:d3:d7:24:38:
                    a4:f9:d1:a2:66:c6:23:ec:6f:28:e9:9c:8f:41:9f:
                    9b:ee:bd:27:3c:c0:8a:39:3e:39:b4:94:fc:62:45:
                    05:f7:04:81:b0:c2:97:25:a6:ea:78:af:4a:97:50:
                    b2:23:0a:0a:38:98:73:96:cf:e6:9a:78:2d:5e:4b:
                    49:73:9e:51:7d:d3:20:26:d0:fd:29:f4:06:8c:ae:
                    5a:00:51:58:2e:13:37:bb:ab:b5:4d:ef:c8:56:c9:
                    60:f8:26:2e:f7:7e:96:03:73:1e:ce:fe:81:58:0f:
                    dd:99:38:07:55:45:31:0a:ce:de:68:a9:b1:cf:ac:
                    55:cf:6a:93:5f:05:1c:cb:ca:00:f3:2e:6e:ea:33:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:99:FF:4B:A4:D7:F6:B7:97:F9:91:9A:FF:1C:05:BD:7E:62:B9
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:10:7f:d6:87:28:e9:b2:9a:e9:bd:19:d8:82:0f:ff:32:c9:
         37:94:24:6a:6f:63:fb:47:de:59:1b:b0:af:c7:be:cb:86:ce:
         e0:1f:83:16:9b:af:57:8c:84:98:4a:ce:9e:00:53:55:e0:de:
         97:d0:1a:ad:23:a2:07:92:10:f3:0e:c4:91:22:63:a9:99:1c:
         f5:0d:60:7a:18:10:82:ac:93:04:3f:82:02:a9:2b:83:1b:fe:
         66:89:17:dd:b7:98:45:cc:67:39:0b:c4:50:40:78:36:f0:f3:
         6b:57:43:2e:9a:52:45:cf:5a:ab:11:ff:05:e9:51:dd:17:a8:
         54:d3:09:f9:0f:ea:c6:98:17:ca:89:84:e5:8f:3b:be:5b:3f:
         e2:d9:49:25:3e:bd:2a:d2:5f:b2:d5:fc:ad:c1:ca:15:46:ac:
         4c:a0:31:78:0d:6e:10:b1:4d:04:9f:ba:d6:48:49:0e:88:7d:
         14:9c:5d:a4:24:72:5d:28:32:90:61:f6:9b:e7:b3:7e:5d:1c:
         1a:b4:24:2c:a7:5c:94:96:27:50:d5:27:e0:46:4b:c7:08:be:
         ff:82:af:20:61:a2:8e:01:8e:50:19:fa:0d:19:30:68:b1:14:
         15:a3:bf:e4:8e:29:0d:8f:03:bd:b3:6b:bc:72:21:de:da:b2:
         14:e7:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:32 2026 by rpki-client