Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File:                     p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier:          W9lf9+sD6qPeexTvLnrCVMUu2QFEWjHD36fbxz6bfcw=
Subject key identifier:   B3:F5:E0:A2:A9:09:CC:0C:D3:81:F1:A4:F1:C5:91:B2:CA:E0:9E:15
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer:       /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial:       019CAAC66B40B8DF1481E9F715AFA77E416B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 19:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:55 +0000
Files and hashes:         1: hMyApwMrzeADs4JM-qIwJsPE4j4.roa (hash: N+rY5dKbfdkSmOrM2ag355sQkPNPr9/XUkupxhQWn1w=)
                          2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: 3EsmmQ91kotF7A5ZSPXJ9CkY7dmdzpAIZL1lDhxWJsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:6b:40:b8:df:14:81:e9:f7:15:af:a7:7e:41:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
        Validity
            Not Before: Mar  1 19:00:55 2026 GMT
            Not After : Mar  2 19:00:55 2026 GMT
        Subject: CN=b3f5e0a2a909cc0cd381f1a4f1c591b2cae09e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4f:50:a1:8f:ca:7b:2e:e0:ad:0e:f3:b3:d0:
                    f8:9b:e4:a2:6f:db:e9:ba:35:b6:93:e9:65:a6:83:
                    61:ff:26:e2:fa:00:84:36:36:af:40:9c:ed:6c:29:
                    2d:b4:e4:fb:fb:6e:63:a2:bf:78:fc:e3:8c:b3:90:
                    df:4b:4e:2b:30:a3:9f:d7:0e:82:4c:af:b7:5f:32:
                    e9:7d:2b:04:f4:5b:f3:f3:02:b1:f3:5e:73:da:ee:
                    4a:29:50:4c:09:dd:28:1a:c8:22:94:44:cd:45:9d:
                    36:08:ea:f3:ae:0e:7f:ae:9d:d6:3c:78:81:cc:28:
                    76:e8:5a:58:ac:44:25:d1:a4:3f:eb:c6:47:4c:75:
                    9c:d6:a8:40:c2:fb:08:52:c3:74:c6:0b:ee:f5:42:
                    e3:f9:21:df:fc:77:36:0d:53:f7:1e:01:83:76:1d:
                    56:2d:db:27:4f:c1:b8:a2:37:e9:28:d1:c1:bf:cb:
                    dc:92:cd:6b:61:0a:7b:8e:a7:c6:79:df:30:d1:f1:
                    d8:07:17:3f:ca:df:75:13:dc:49:6c:02:d0:fd:84:
                    df:d4:30:0d:d0:ce:32:ef:bd:f8:62:e0:46:15:36:
                    43:f2:52:a0:df:26:09:9f:6a:f9:6d:2f:98:6b:3b:
                    39:54:5a:db:44:6a:cb:f6:b3:ee:96:39:0d:a3:95:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F5:E0:A2:A9:09:CC:0C:D3:81:F1:A4:F1:C5:91:B2:CA:E0:9E:15
            X509v3 Authority Key Identifier:
                keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:34:89:6f:e5:73:7d:5e:ae:e6:c7:0c:40:e7:50:61:ec:
         cd:ff:63:c5:c5:0a:f3:38:60:a0:24:fa:0d:5a:48:45:78:07:
         1f:96:1e:7a:82:ab:33:dc:d7:85:de:da:56:0c:34:94:e1:d4:
         1a:a3:35:95:16:71:c8:17:2d:61:53:6f:6b:46:27:da:b5:f8:
         d5:f9:74:10:b4:1d:0e:4e:17:98:c8:d0:fa:92:5e:17:68:c4:
         8a:5c:27:5e:cb:2a:6a:44:3f:4e:c7:92:38:d7:cf:a0:37:19:
         ce:94:ea:a3:6d:48:ea:5a:35:da:a0:8f:49:bb:96:46:74:c0:
         92:cc:c5:43:ac:5f:94:9a:4b:c0:8a:48:fb:49:18:40:0c:c0:
         10:5f:ac:e7:30:eb:ca:b8:ad:e1:8f:fb:1c:60:bb:a2:73:1e:
         09:62:67:47:a3:7b:71:ac:a5:a3:40:00:a7:08:c3:d7:bf:34:
         d0:f5:c5:0b:f4:71:32:aa:ff:26:a2:15:2c:28:74:77:4f:58:
         cb:0d:f3:2e:c1:89:b7:5e:5f:6b:ac:e6:b1:81:89:a6:69:58:
         c0:56:21:77:9f:95:3d:b0:9e:8a:f3:fa:47:f6:e1:43:4e:04:
         49:8e:3a:a8:a2:04:95:5c:0e:64:e2:cd:b6:d8:85:31:e4:12:
         68:d6:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:26 2026 by rpki-client