Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File:                     0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier:          dNp2ubg/o+ATPaKy2pEbAGHnqLv3MB2G48+ALxpa9ts=
Subject key identifier:   58:9E:78:AD:6B:13:C3:93:2D:F1:D2:2A:3C:EB:D7:2B:D6:59:61:35
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer:       /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial:       019CAD227FBAE845E08889ACCE6FC0DD013C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 06:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:45 +0000
Files and hashes:         1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: C2w+c1seKMfDATJUWqIh1yijspD3+ig8NqbBjfd9Qyw=)
                          2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
                          3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
                          4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
                          5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:7f:ba:e8:45:e0:88:89:ac:ce:6f:c0:dd:01:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
        Validity
            Not Before: Mar  2 06:00:45 2026 GMT
            Not After : Mar  3 06:00:45 2026 GMT
        Subject: CN=589e78ad6b13c3932df1d22a3cebd72bd6596135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:1a:69:5c:f5:b8:58:82:1e:24:60:dc:a6:
                    97:02:3a:19:d8:e9:52:87:82:48:c4:4f:03:fb:d7:
                    9a:dd:5a:76:c5:b2:5d:6e:cb:ef:da:24:f7:d6:57:
                    a4:26:de:38:34:67:99:22:03:2f:07:61:20:a1:ca:
                    16:11:e0:5a:34:07:a0:e3:f1:69:10:3e:87:b7:cc:
                    12:d7:4c:d3:19:63:46:0c:21:dc:4a:af:de:e7:58:
                    ff:ac:35:f9:23:f2:0d:8b:47:15:fe:e5:ae:97:12:
                    35:20:16:f2:62:21:31:49:f8:a7:d9:1d:f5:21:00:
                    dd:93:e6:c9:7e:e2:09:d7:eb:52:42:6d:f7:84:27:
                    93:46:a5:52:1a:2b:e0:97:da:3d:b5:3c:b6:e4:d1:
                    93:4d:cf:b0:d0:87:3b:d9:c9:b7:14:27:88:28:ec:
                    ea:50:2e:95:42:70:a5:6b:3f:c7:a4:33:4b:61:f7:
                    5f:b3:ab:93:f4:33:3e:99:21:f3:09:e4:0d:d6:1a:
                    d1:58:a9:ac:be:aa:f6:b3:84:72:5c:50:4e:0c:1f:
                    ad:c0:b5:ad:f2:8c:84:f7:db:fd:21:12:9e:43:aa:
                    3a:21:3c:c2:08:2b:ca:ba:85:32:13:e9:4f:b7:2a:
                    4b:1b:e4:28:0c:b9:4e:19:9a:71:94:f1:e4:84:e1:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:78:AD:6B:13:C3:93:2D:F1:D2:2A:3C:EB:D7:2B:D6:59:61:35
            X509v3 Authority Key Identifier:
                keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:77:a9:d6:d1:e0:98:d0:0a:e0:04:18:ae:aa:5c:82:96:
         dc:5d:7d:2b:cc:2b:16:0d:aa:8b:1c:4e:30:00:e0:82:dd:3e:
         e7:6e:95:62:22:db:ba:34:9b:c5:22:db:83:71:21:9a:60:ba:
         ea:0b:d0:81:92:d7:d2:f6:34:75:5a:75:bb:3e:d7:7f:8a:0d:
         09:81:4f:fc:f5:1c:b7:72:cc:da:c6:02:d5:d9:f9:cd:89:e0:
         ca:5f:45:2d:0e:ce:8c:57:c9:74:0d:fe:0d:e4:8c:61:de:64:
         88:7d:ab:24:a4:6d:66:d8:43:aa:73:7f:93:26:ca:b9:f8:eb:
         28:72:62:01:ac:6e:78:c4:7e:2f:d4:51:02:17:bc:f0:7e:14:
         78:e9:db:d3:8f:87:dd:46:81:02:87:a6:e6:8d:18:08:35:a8:
         20:21:3d:e1:71:33:61:eb:a0:a2:4e:70:2b:f7:4b:62:c3:4b:
         d7:41:0e:77:5d:0f:0f:bc:9b:2d:c5:a7:61:82:27:d3:e4:a7:
         73:fa:74:31:85:89:2d:c7:13:03:11:7a:24:7f:e2:fe:9f:c6:
         53:89:0a:1b:43:2d:7f:86:a5:32:dc:74:61:3e:b5:f6:b2:77:
         01:61:83:7e:db:a1:a8:00:3d:a0:b7:30:e2:75:b9:c0:0f:04:
         d2:e4:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:13:13 2026 by rpki-client