Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File:                     hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier:          yni4Wtl8CKmkT8o5XKFkZqJTwY+TuMGcSnOcVl5oA5M=
Subject key identifier:   63:04:95:DD:98:93:2E:8E:79:07:85:27:7E:8B:2E:3E:8F:0B:B8:DE
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer:       /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial:       019CAC1039C56B68B983A156873969C15DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:10 +0000
Files and hashes:         1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
                          2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: E601+AXoAtJKFvpzxnFytXlWJivB45mGUa29pkSzx8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:39:c5:6b:68:b9:83:a1:56:87:39:69:c1:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
        Validity
            Not Before: Mar  2 01:01:10 2026 GMT
            Not After : Mar  3 01:01:10 2026 GMT
        Subject: CN=630495dd98932e8e790785277e8b2e3e8f0bb8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:bb:ec:ef:59:79:2d:93:50:2b:a0:12:94:
                    57:f6:3d:ea:dc:d7:e9:b7:42:0b:fa:45:21:92:d1:
                    b2:c0:db:f5:c4:fe:0a:97:2c:25:ed:dd:47:a1:22:
                    51:78:50:81:23:f7:18:a6:32:e7:83:0c:55:2a:24:
                    20:0d:59:ee:e2:73:db:88:42:b0:3d:75:d1:5b:57:
                    f8:84:04:b9:a4:6c:73:83:bb:7d:cf:6b:f6:bf:83:
                    16:58:29:1a:44:b2:51:c9:c7:a0:75:6d:4c:7a:6f:
                    32:e3:65:86:67:e9:f7:0f:a2:00:de:6d:90:f2:60:
                    16:1a:6e:17:46:4b:5b:c9:45:01:ed:24:dc:d0:dd:
                    b7:07:e4:b5:68:77:72:8a:71:5b:07:15:21:a6:7f:
                    79:da:74:34:a8:36:b5:4c:6d:97:60:64:01:c1:0b:
                    6f:92:08:84:8d:98:99:25:42:df:38:2e:27:d3:6b:
                    e6:45:62:99:d0:e1:92:e6:df:66:93:cf:0c:c3:86:
                    16:bd:b9:cb:3b:56:6d:cf:69:5d:8c:ab:26:c3:54:
                    83:1f:1a:b4:20:19:b7:98:ba:24:78:df:70:6e:21:
                    77:f3:7d:52:67:89:d0:39:00:44:ab:38:03:2b:5c:
                    42:e8:a0:34:47:ce:5f:0c:8b:a6:67:bf:82:da:14:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:04:95:DD:98:93:2E:8E:79:07:85:27:7E:8B:2E:3E:8F:0B:B8:DE
            X509v3 Authority Key Identifier:
                keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0c:3a:14:4a:47:32:1e:36:84:65:ed:6e:5a:d3:fc:8c:2e:
         fd:ba:15:6d:db:6c:72:0b:e2:79:a3:80:5c:c9:60:6e:c8:10:
         29:da:28:2d:60:a7:f3:8d:ae:56:d4:c0:14:48:94:3d:85:5b:
         96:10:10:f2:4d:4d:77:56:d4:5d:7a:f2:0f:83:1a:9b:57:ad:
         a8:a0:99:f0:ce:74:32:77:73:e8:2f:2d:b5:fc:9f:f9:b9:38:
         7c:31:17:96:15:f7:12:c6:e9:8e:71:26:46:46:c4:78:32:ae:
         1e:46:72:14:84:72:3f:16:ce:2e:ac:09:63:a1:58:39:e7:18:
         89:14:77:7d:95:2b:4f:46:44:a5:a9:50:87:bc:a1:a1:7b:5b:
         7e:a0:bb:00:4e:5b:da:e6:60:81:f1:0e:07:e9:26:8c:49:29:
         9e:50:4c:77:43:86:95:96:db:d4:65:dc:15:c3:e6:53:00:3e:
         4d:84:1e:cc:1f:fe:c9:f3:bb:3d:ed:12:0b:2f:ae:09:5a:22:
         b7:e5:d4:04:6c:39:13:e6:78:eb:be:71:5e:4d:d8:1d:5a:81:
         12:e5:c8:3d:a7:d6:19:0c:33:1a:90:d0:23:3b:ce:d0:d8:08:
         59:b0:ac:d4:b7:ea:ed:bc:6d:53:48:98:c6:e3:2d:ec:5a:91:
         22:57:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:00 2026 by rpki-client