Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          qBTFUrZDb7aH2H+Mb/uI03aLuO7vAECRmD0CPkBEiFA=
Subject key identifier:   D6:FD:37:65:89:39:91:53:1D:18:5E:E3:6E:16:F0:78:38:91:DE:D1
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       019CABD925DE6993E38ADF6B8D51167F26CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          1745
Signing time:             Mon 02 Mar 2026 00:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:00 +0000
Files and hashes:         1: F0LzkFVGMTBWApSs_wM978YwiCQ.roa (hash: eqGhiZkloBkRtfkxnH/kF16wbkGdYNJEpml7PevLHH4=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: KBbWzJGXLRLZ3QfkGoXeV3gFv1FnuqmuJ4tRdRsfbT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:25:de:69:93:e3:8a:df:6b:8d:51:16:7f:26:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Mar  2 00:01:00 2026 GMT
            Not After : Mar  3 00:01:00 2026 GMT
        Subject: CN=d6fd3765893991531d185ee36e16f0783891ded1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:ef:c1:e0:2c:a9:f0:0b:46:d0:3d:06:6c:
                    8c:c3:aa:3c:a2:78:19:1f:56:1e:fb:af:cf:58:e3:
                    4b:55:5f:ce:56:82:c6:3e:c9:c4:6e:b8:87:7a:1a:
                    82:2b:6d:9d:f5:35:66:c5:05:73:c8:38:c6:8d:b7:
                    c3:2a:05:e3:ee:80:f1:d4:e6:27:52:f3:45:30:d7:
                    09:45:ce:9b:e1:90:7b:76:8d:c3:4b:f9:4c:b1:c5:
                    ca:56:82:3c:38:97:c6:fc:90:3d:76:b8:57:84:45:
                    6a:16:b6:53:b3:f9:69:4e:78:6f:f6:5e:27:d1:ea:
                    65:57:b3:ec:37:29:9b:bc:66:23:6e:ab:2f:d6:36:
                    33:4a:41:81:f5:fc:22:07:84:34:63:89:90:7d:4e:
                    75:2e:12:e3:00:8d:fa:7b:9a:d5:5c:1a:f3:c0:dc:
                    ae:a2:04:38:ad:2b:f2:2b:ad:ec:29:69:67:d8:04:
                    89:be:fc:b7:9e:51:7c:0d:f2:85:4f:a5:ba:0f:7a:
                    7c:2a:4a:b5:75:a3:47:b5:4d:21:4b:eb:ca:6a:89:
                    46:55:cc:f1:cd:ef:4e:47:b2:12:4e:34:ca:81:a0:
                    c9:a0:45:10:cf:75:00:44:dd:45:8d:fe:82:99:86:
                    0a:a1:9b:73:6f:8f:34:8f:49:89:e8:6e:83:dd:85:
                    a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FD:37:65:89:39:91:53:1D:18:5E:E3:6E:16:F0:78:38:91:DE:D1
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:36:b6:ef:19:a0:e8:cd:90:8f:51:ca:96:44:3c:b0:d4:
         21:26:1e:6d:59:76:fd:39:3e:52:c4:9e:2e:68:96:db:89:2b:
         b7:e8:86:de:12:35:c3:7c:9b:82:43:23:ff:bd:08:f6:cd:fa:
         27:39:f3:5c:1e:56:9f:21:8d:c4:3c:6b:0b:4b:86:b9:ee:0d:
         dd:07:3a:00:49:fe:b7:d1:57:bf:8d:6a:09:56:32:fb:49:33:
         c6:b9:90:f9:cb:4f:be:13:ac:4f:06:2d:8e:68:36:a1:f2:5f:
         19:90:50:e9:68:ea:06:d3:65:27:f8:56:de:4c:ae:ed:4d:1c:
         81:e4:c4:95:e9:ed:ec:ec:7b:3a:c8:53:52:7d:0c:ab:9b:14:
         67:35:28:93:21:d6:ba:24:67:38:2e:57:23:fe:93:a0:9a:f3:
         10:12:c2:ae:20:6b:59:c0:ab:bd:85:96:f2:55:25:b8:ca:da:
         ec:69:4a:fa:44:d1:e3:e0:c6:99:12:10:a3:38:fb:78:d7:57:
         b4:0d:96:ea:52:dc:0a:c2:04:93:a7:6c:2b:95:8a:4c:b0:cf:
         e2:ab:64:76:d8:3c:37:fc:1f:d9:29:25:c4:95:96:3f:5e:1d:
         f3:07:e3:eb:7a:1c:1d:bb:3e:dc:0f:0e:eb:43:8f:57:40:9e:
         d6:7d:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:00 2026 by rpki-client