Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File:                     I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier:          drxXqLCwS3Ws7GDIHpRw90Nk5gTxdASazZFB9kdPcuM=
Subject key identifier:   8C:3E:90:5F:6F:B1:CB:66:9D:28:EF:6D:04:EB:11:D4:92:D7:91:77
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer:       /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial:       019CAAC70C44A47660EEB74FF1771E354722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 19:01:37 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:37 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:37 +0000
Files and hashes:         1: 0fY2-frVSg1jq699GFwRUoCBlNc.roa (hash: eUT643x5xx8hSJT1XefBsreuEw6p88bqGvTup19SiEs=)
                          2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: PJ0HhthZPWkfL9uexH/nKOAnKN9wM7v8E1z07HQX2gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:0c:44:a4:76:60:ee:b7:4f:f1:77:1e:35:47:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
        Validity
            Not Before: Mar  1 19:01:37 2026 GMT
            Not After : Mar  2 19:01:37 2026 GMT
        Subject: CN=8c3e905f6fb1cb669d28ef6d04eb11d492d79177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:3a:9b:eb:0e:fc:e6:e8:db:74:3a:48:fd:
                    87:25:b8:d2:78:14:b5:ab:a9:eb:8d:c4:c9:a8:c6:
                    06:13:b1:58:61:ba:1a:99:9b:3f:30:c9:80:5e:d8:
                    1a:0f:3b:96:7e:8a:75:3c:9d:87:5d:ec:40:d8:81:
                    e2:09:8e:b5:e3:73:2c:91:80:09:a3:8f:2d:98:55:
                    f4:ab:7b:17:c0:d2:5e:09:03:e1:29:eb:c9:a6:84:
                    9a:11:7c:ed:f2:14:97:37:a7:af:d4:0f:46:94:5d:
                    1b:a6:e6:5c:52:43:76:c1:47:ac:98:6f:80:03:20:
                    c2:7d:49:e1:f3:95:ff:63:d9:88:47:35:71:95:31:
                    e9:86:67:9d:45:04:b6:5a:d8:d2:6d:66:03:79:e1:
                    4e:67:87:e5:63:87:f0:dc:4c:7a:93:40:d8:0a:24:
                    f8:17:7c:a6:c4:26:77:40:e8:b8:2d:0c:07:a7:9e:
                    c6:d3:79:c6:e9:a6:f7:ff:1c:cd:bf:50:5a:fe:7b:
                    e0:fc:6c:a1:c4:d3:dc:e8:35:0f:b2:4b:0f:79:57:
                    4d:60:f3:ae:d5:cd:e5:05:a3:31:be:28:0b:ad:75:
                    a3:93:10:d6:f3:ed:7c:d7:11:63:57:a5:d1:ef:7d:
                    72:1c:83:dd:18:33:c6:08:58:07:ee:e0:58:df:4f:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3E:90:5F:6F:B1:CB:66:9D:28:EF:6D:04:EB:11:D4:92:D7:91:77
            X509v3 Authority Key Identifier:
                keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:66:1f:f1:2c:2f:cd:36:16:32:3f:c7:3a:6d:ed:8a:f6:
         ea:9a:3a:47:59:4c:9e:fc:65:5c:65:2e:25:bd:bf:eb:ad:95:
         8d:65:6d:2e:5c:52:63:2c:3a:86:0d:65:0e:d5:85:1e:8d:1d:
         c5:8a:33:b9:d8:5e:7b:93:42:80:34:aa:9d:92:5b:f1:a5:ba:
         f7:23:c1:57:c9:75:d3:f7:e1:c0:22:ae:ce:85:9d:d4:7c:7d:
         cf:21:4f:ab:77:f7:cf:86:80:a0:8a:a0:55:b8:35:73:00:32:
         b9:e3:5e:58:6b:d9:03:93:95:f7:6f:93:c7:7f:fb:be:78:3c:
         c3:3a:5d:77:49:79:75:f1:02:29:1c:3e:ae:fd:77:e3:d5:a7:
         fe:23:f1:b1:01:ad:d0:5e:80:f3:ed:05:a2:d0:92:28:1f:3b:
         84:62:35:1a:9e:85:db:15:d5:20:a0:ca:5a:d4:f2:ce:b0:34:
         bd:23:b4:14:7c:ba:0e:44:84:0c:59:32:f8:51:0d:8e:ca:0f:
         24:07:a2:55:b0:0f:14:fe:bd:43:0f:4d:1d:03:fc:ee:cf:71:
         05:ca:0e:1a:cc:e3:03:ee:53:34:4d:f6:b5:23:82:89:e5:ad:
         12:f3:f4:2e:ae:24:99:56:4f:ad:8b:ae:c1:cc:64:af:82:c6:
         de:10:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:03 2026 by rpki-client