Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          nBzucxW5Q9KUgSHL+5ncXQ8JVYjPz5OKQrhZd85SXbM=
Subject key identifier:   E8:F1:8B:13:78:69:65:B6:36:67:93:03:68:56:6D:E6:DE:91:BF:30
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019CABA25A74E44672C5895464E93DF2DEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          1614
Signing time:             Sun 01 Mar 2026 23:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:09 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: yWPF6bANfJEsmfQIqHdk/+/tBZC6N078/0rKAyEzVdw=)
                          2: A9X4cShQaD_mK0qE56RcWv1n6WM.roa (hash: 9IXqUIjUTj9O7jC2WLB7h7sR0zwiNThCiC66By6Zpvg=)
                          3: E-8LwQ3nkmMPj6iBH79pH_Ioo7Q.roa (hash: H+Jw3qwj6HENxblKk3mtHeFWeilk4ouDaO2sDtbof3Y=)
                          4: jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa (hash: YC9Zk7AeEy/U3DouNdWT44SnwPIkBw05lQ2yggZvMZA=)
                          5: kbTz7ppbQ7oPVGXlVGsMEuIRKgQ.roa (hash: RN50qd/QjamGrCWyNEXJiSMZd1C/NPpkaF05FYlWOGk=)
                          6: t6DzHC5ObGj73UBZaITEwpeCUM8.roa (hash: 5ZqcYp/UH/RCnCIGSUqXeJuIlZCE+amVIkJSZa+FRKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:5a:74:e4:46:72:c5:89:54:64:e9:3d:f2:de:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Mar  1 23:01:09 2026 GMT
            Not After : Mar  2 23:01:09 2026 GMT
        Subject: CN=e8f18b13786965b63667930368566de6de91bf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:9d:6d:d2:59:fe:3e:6d:b3:b6:41:b3:3f:
                    28:79:5d:15:0a:85:83:d5:81:ee:22:bd:d3:22:12:
                    67:d7:3f:9d:5a:c6:8b:0b:a4:42:93:68:58:27:fe:
                    17:dd:66:76:51:49:33:74:66:ea:d2:70:0c:17:83:
                    3a:84:72:1d:bd:25:86:94:3a:a6:74:ef:4d:9c:2c:
                    ac:24:f0:3e:bf:52:fb:a8:f9:c4:fe:9a:1e:7a:39:
                    4c:91:97:70:5d:4f:df:a0:88:54:a2:4d:62:90:08:
                    e7:09:6b:8b:0a:ea:10:85:fb:40:1e:f1:97:06:66:
                    63:54:49:38:90:fb:56:5f:8a:6b:e8:99:7d:26:54:
                    b0:7f:24:19:b3:3d:2b:d4:db:5e:a2:99:1c:6f:81:
                    5c:c1:e7:66:42:ca:3f:b8:2f:4e:20:2f:31:19:71:
                    8c:41:03:4a:a6:65:05:25:35:f9:f6:0d:d4:68:87:
                    6a:2b:a8:17:48:9d:0a:49:1d:e2:55:1b:6a:42:a1:
                    0e:3f:e9:c7:4b:c4:e5:a9:12:be:89:b5:61:20:f5:
                    81:bf:9f:62:e0:5a:41:72:a9:1e:fd:5d:e2:f6:83:
                    16:8f:10:80:c7:2f:cf:78:df:ad:05:30:5c:56:72:
                    41:ef:17:58:14:af:17:f5:b5:d2:8b:10:05:76:28:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F1:8B:13:78:69:65:B6:36:67:93:03:68:56:6D:E6:DE:91:BF:30
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:96:b5:9d:d8:ad:36:a0:6d:79:f0:64:ea:c5:a4:ca:5b:46:
         f8:e7:4b:94:9e:01:aa:9f:e1:fe:a9:65:ec:80:55:3d:c6:a7:
         89:e8:2a:e7:6e:89:d3:bd:44:73:32:ed:81:30:88:30:30:d2:
         5a:31:40:43:b0:96:64:c2:a5:ac:d1:5d:1a:33:72:d8:56:43:
         ad:0a:57:e4:04:17:d8:c0:71:20:98:a8:4c:b2:c6:fe:37:71:
         7c:3f:65:00:05:63:ac:84:df:9c:22:d5:29:50:90:c6:fa:92:
         57:0e:ec:14:74:a5:05:e2:d8:1a:a1:6f:b0:90:ae:3d:73:37:
         a9:ff:cb:3a:ba:bf:59:dc:cb:9b:33:a4:b1:c3:af:b4:02:78:
         b5:84:6f:56:f2:c3:53:97:d6:bf:0f:00:d5:5d:d5:67:6f:45:
         6d:4b:cb:38:b8:e6:e8:0e:ff:c6:36:35:57:56:b0:fe:d4:9f:
         eb:4e:90:a6:2b:4f:c3:c9:41:b5:a2:a7:9c:94:05:aa:7d:f7:
         a4:e1:0d:97:5b:b2:ce:39:eb:71:fd:31:86:fc:2b:70:a7:52:
         40:8c:ac:fa:0d:47:56:51:b9:9b:d3:89:ef:97:c5:20:2d:c0:
         0a:86:95:ac:48:4d:23:38:61:08:a1:83:74:c0:96:7a:6c:38:
         30:b9:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:09 2026 by rpki-client