Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File:                     XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier:          9UVhrOGt/ZG7WsxUu6rmKu05AM9jYMWJchZyxb21w/w=
Subject key identifier:   EA:AF:FE:24:C0:87:8E:1F:2C:F6:66:67:68:D6:12:4C:64:72:BC:2B
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer:       /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial:       019CAFED2EB1D87FFF6540D163725688E8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 19:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:22 +0000
Files and hashes:         1: 5ncwIjdV-lgqxsPk6TejDPmjLoU.roa (hash: gvOpAQoTeSfO+y1nRziJ19qDe2iH3kf8RYDheGEeWc8=)
                          2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: NWJ6XujPILnt2rMkCq1rfX/S6kcvupdI7FS2xpf+Y3o=)
                          3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ed:2e:b1:d8:7f:ff:65:40:d1:63:72:56:88:e8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
        Validity
            Not Before: Mar  2 19:01:22 2026 GMT
            Not After : Mar  3 19:01:22 2026 GMT
        Subject: CN=eaaffe24c0878e1f2cf6666768d6124c6472bc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:c3:91:46:ff:db:0e:ac:b3:22:21:40:8d:
                    78:33:da:b5:6b:fc:83:90:13:97:54:b8:61:d2:5e:
                    f5:0e:cf:d9:61:5d:17:60:ae:57:f0:89:09:08:e1:
                    b2:ea:59:4a:e8:4b:af:8e:c8:2c:45:ad:45:90:57:
                    0f:68:3b:3e:df:69:14:67:5f:b2:24:36:9f:7f:26:
                    db:a3:03:0e:8d:11:eb:2a:9c:d0:68:6e:e5:43:02:
                    24:1c:d5:9a:09:1f:47:30:5a:b1:57:d4:6c:db:82:
                    93:20:71:3b:d1:b3:40:10:3b:1a:33:7b:24:c6:67:
                    d0:28:e1:e3:bf:ca:cc:9f:10:57:aa:f1:1d:a0:db:
                    70:05:d3:60:8c:87:76:36:31:80:ac:1e:66:55:88:
                    89:1a:dc:18:72:2c:1d:b2:03:46:ba:b8:cc:22:fe:
                    0f:2d:2b:66:d5:5c:05:85:c5:2e:71:2d:33:e8:46:
                    06:57:68:bb:94:a2:e4:ce:f3:18:af:a5:11:5f:b4:
                    30:5b:b7:ed:73:8f:75:0d:f0:e3:21:e0:9f:87:7e:
                    3e:6e:6a:bf:67:29:96:01:2f:75:6d:d9:25:69:c8:
                    fc:2e:48:c0:ca:58:6f:c7:72:60:1a:c5:38:b4:96:
                    ae:2a:70:c1:8d:7d:9f:d2:b9:4f:0f:43:5a:79:fe:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AF:FE:24:C0:87:8E:1F:2C:F6:66:67:68:D6:12:4C:64:72:BC:2B
            X509v3 Authority Key Identifier:
                keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:1a:7e:17:38:39:9f:ed:8c:ec:ad:42:9e:82:32:eb:cd:
         f3:17:19:1d:e7:0d:e5:e3:5d:f4:de:01:58:b1:0d:2e:c9:87:
         35:83:c1:d9:5d:86:fa:6d:81:94:06:60:7a:c5:59:03:c6:3b:
         24:44:0d:b9:98:77:f4:a8:b9:a3:df:54:14:b4:a5:8b:8c:c4:
         36:bd:6c:53:01:4b:56:b7:a2:d7:d3:13:f6:ba:df:b7:cf:4d:
         1b:71:53:42:37:22:48:da:c7:e7:be:ce:9d:91:d6:59:7a:ed:
         1d:ea:15:c5:87:93:58:77:d8:bb:ef:c0:71:f5:bb:c6:e3:5e:
         c0:77:18:36:10:fa:f0:53:e3:49:99:14:2e:7a:d6:99:c7:49:
         9e:99:5f:56:26:f9:7d:e5:ea:89:47:a3:28:9f:c3:52:73:20:
         0c:8c:7b:53:3a:dd:86:e7:3e:c9:ae:28:65:5a:42:49:65:20:
         a8:6a:2d:4b:6b:65:32:41:48:22:b8:a1:c1:77:78:ef:70:cb:
         e6:46:d1:21:c0:c5:6f:e5:0d:e6:30:b3:70:c3:99:76:e5:60:
         61:6f:e2:da:9c:c6:d9:47:7f:fc:9e:ca:79:31:c1:56:c1:51:
         a5:a5:cb:93:51:c4:b0:12:31:cb:80:bf:a3:98:73:15:bd:e6:
         35:a7:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:00 2026 by rpki-client