Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File:                     PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier:          4HWHl3gegKPfUbZNiA/DAGUWiRvwdhz1kemLjshi28s=
Subject key identifier:   A2:65:40:9B:0A:DF:E6:99:79:68:CC:2D:13:17:7F:BC:21:3E:63:4D
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer:       /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial:       019CABDA06F4AF72AC86994ADF70E709B2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number:          1743
Signing time:             Mon 02 Mar 2026 00:01:58 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:58 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:58 +0000
Files and hashes:         1: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (hash: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=)
                          2: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: AC7y7zczUGtpl2580McOMVN71sBFKT+JG0VEgEb5bfY=)
                          3: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (hash: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:da:06:f4:af:72:ac:86:99:4a:df:70:e7:09:b2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
        Validity
            Not Before: Mar  2 00:01:58 2026 GMT
            Not After : Mar  3 00:01:58 2026 GMT
        Subject: CN=a265409b0adfe6997968cc2d13177fbc213e634d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:0a:f0:a5:d1:bd:b6:a5:d4:d9:17:97:06:
                    27:a4:44:21:2a:dd:ba:2d:76:f2:04:0f:b4:09:f5:
                    69:0a:3b:81:df:b1:d7:22:b9:31:ea:00:e5:ba:4e:
                    93:f1:b4:4c:51:4b:c5:c7:4c:5b:d3:a6:6f:7b:6d:
                    22:c6:b6:34:55:eb:c3:94:6f:4e:b7:62:9d:f8:bc:
                    61:ef:b6:8a:7f:ac:46:7e:be:46:e4:2e:2e:04:c2:
                    2b:56:a4:4f:61:0e:36:b0:53:d7:80:d4:b1:26:63:
                    24:7c:2b:ff:6f:0e:4f:c4:3b:61:3a:94:13:a1:22:
                    36:d5:f0:21:af:c3:8c:5b:76:74:5a:d9:03:5c:66:
                    d0:43:64:68:13:91:82:ab:8d:57:05:63:a4:aa:c9:
                    87:45:36:93:d8:4b:2d:67:d7:84:77:8d:23:5f:2e:
                    04:3d:06:c0:cd:b5:82:89:6e:eb:ef:c4:92:be:bb:
                    97:11:62:02:ce:c8:fa:14:08:57:d3:21:a9:79:6a:
                    43:f0:64:dd:08:aa:59:ab:4f:95:67:67:38:cf:57:
                    29:48:b9:1d:97:7e:b3:e6:11:f2:07:9f:72:f5:a1:
                    97:0e:bf:64:92:8b:34:7b:79:b7:8e:6c:21:64:40:
                    70:7d:5e:10:da:19:79:53:c5:a3:f1:da:db:9f:85:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:40:9B:0A:DF:E6:99:79:68:CC:2D:13:17:7F:BC:21:3E:63:4D
            X509v3 Authority Key Identifier:
                keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:b9:41:6d:1d:0e:70:83:44:6e:ea:b8:f6:2f:19:10:fe:
         68:9d:26:16:fb:33:e2:6a:54:6b:71:99:b6:34:b8:bd:50:3d:
         4b:cc:f3:91:23:13:ee:68:49:1c:0a:8f:28:ea:60:ac:2d:64:
         4c:c9:da:7d:07:3a:87:fe:99:5f:4d:b6:b5:32:e7:72:20:56:
         2d:45:2a:71:0a:76:ff:ba:10:6d:98:99:ab:ef:fd:b3:81:83:
         06:75:f7:41:1a:b7:28:e5:b3:92:38:0f:5c:8c:a1:fb:05:9c:
         76:f8:da:49:16:84:21:63:03:e9:e3:c3:30:20:5e:48:12:34:
         01:68:3d:f9:be:e8:0d:af:1d:b4:94:9b:78:1e:28:75:f4:62:
         03:05:16:d4:b1:61:11:fe:c9:b9:be:1b:ed:ad:04:28:16:50:
         77:7e:f2:e9:bf:cf:cb:61:b6:96:0f:02:45:de:df:a3:d2:28:
         42:ea:4b:8a:e0:92:a1:c8:ac:c8:0d:c2:4f:58:17:d7:91:91:
         22:68:66:97:96:de:d8:1d:48:33:89:bd:f7:4f:80:9c:b8:5a:
         71:b2:b7:42:99:16:fd:d4:9a:95:7a:3d:b5:c9:14:09:a4:31:
         99:08:cd:26:80:08:ff:1f:14:4c:db:4d:4e:be:6d:8e:bc:81:
         b7:3e:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:24 2026 by rpki-client