Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          j32uDBRNUaYYYrkN88lQCUYQ74VbH21J+Qs5tyehIxw=
Subject key identifier:   DA:95:75:93:50:08:49:9B:6B:79:B6:85:49:6D:B3:9B:F5:09:87:75
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       019CAD905596EAF4BC04CCAC2BD060D7E898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 08:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:43 +0000
Files and hashes:         1: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
                          2: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
                          3: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
                          4: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
                          5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: BzKI4WuUcnKU4saHmPzep5tn0qHQS/JeqpmQj/TmBU8=)
                          6: v7DRMSksGTlDfhs744praVhJlnw.roa (hash: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:55:96:ea:f4:bc:04:cc:ac:2b:d0:60:d7:e8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Mar  2 08:00:43 2026 GMT
            Not After : Mar  3 08:00:43 2026 GMT
        Subject: CN=da9575935008499b6b79b685496db39bf5098775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:ce:e0:82:11:ae:b1:00:07:9a:bb:8f:54:
                    fa:25:99:61:db:ba:2b:c7:94:de:4b:fe:8b:34:a2:
                    29:64:f6:e6:e8:83:84:84:a7:ac:f9:1e:6e:f0:7a:
                    de:5b:f7:67:fe:eb:15:c5:44:58:cd:5b:4e:8c:21:
                    13:6e:c2:73:6f:a6:1b:e7:ee:d1:21:ea:53:00:d9:
                    02:63:61:7c:62:2b:32:3d:e8:fa:01:f7:13:ed:b6:
                    57:c6:66:8f:c4:a2:2b:97:d0:66:c3:51:b7:fe:ec:
                    8e:1f:ca:d4:85:8d:14:7f:bf:60:3e:e5:71:40:9c:
                    d4:de:ea:f3:13:f6:5c:51:a4:90:7f:61:06:7f:cf:
                    6a:db:53:96:3a:64:dc:4a:62:b4:cf:10:81:89:3f:
                    6c:51:18:af:21:63:19:c5:11:93:01:d9:1d:a8:09:
                    08:1a:3e:0a:4e:92:e9:ae:05:df:49:26:70:b5:6b:
                    89:68:21:e2:31:4d:99:e4:d7:e7:14:db:95:2a:4e:
                    c7:3e:a8:3c:70:52:d8:74:1d:e2:12:99:6e:8a:ba:
                    5d:69:22:1e:c9:b9:88:35:f5:09:b7:d4:f0:41:a9:
                    8e:c0:92:c0:de:58:63:09:79:b1:c5:f3:53:88:fe:
                    09:89:79:8d:70:ee:a4:93:9b:a9:c0:d3:ef:e6:a4:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:75:93:50:08:49:9B:6B:79:B6:85:49:6D:B3:9B:F5:09:87:75
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:c4:73:af:9b:49:95:84:13:92:d7:3e:56:e8:97:bc:ec:
         4d:81:ab:8d:2a:5c:78:53:b2:2b:aa:97:7b:d2:c1:13:f2:6f:
         d5:36:13:4c:8c:dd:47:34:08:ea:86:13:0a:c5:86:ae:bc:e9:
         55:6e:ee:2a:fe:7b:7e:8f:de:e5:bd:56:e1:fa:ff:61:6b:a3:
         6f:c7:a0:a3:b1:89:43:9f:02:83:e3:1f:ac:77:ef:bf:79:32:
         bf:c6:c2:11:73:4e:1b:7a:f7:de:4e:bd:6d:32:ba:a2:b1:b5:
         89:ec:58:b1:df:d1:d8:32:d7:43:41:92:3d:34:67:c8:d7:b7:
         b2:c6:42:d7:e0:2b:d7:fa:e4:0e:49:fd:0a:2a:13:0b:41:c8:
         88:b0:e0:6d:9a:e7:49:02:45:6c:51:ad:65:79:89:61:dc:40:
         7b:87:a9:db:dc:24:68:6a:82:b5:1b:e4:e1:4e:58:a1:b1:6f:
         eb:5f:8b:fd:14:25:38:1a:04:32:9d:b0:0b:6d:a4:b4:91:6c:
         fd:24:98:b3:5c:65:ba:e5:ed:98:83:cf:65:93:28:c2:1a:bc:
         86:3b:f0:93:5a:fa:0f:ac:89:8b:49:11:3f:19:f7:0a:1d:64:
         9b:e8:2d:a1:3a:ba:06:9f:0c:d0:e0:ff:57:0a:55:5a:19:4a:
         c6:af:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:22 2026 by rpki-client