Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          DdcDKWnHqLQO2tpEJXrpck5N3KLydDT6SYRwyIO13x8=
Subject key identifier:   46:E6:3A:D6:71:AB:4F:CB:3D:7D:47:96:4B:B0:58:B0:1A:F1:85:6E
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       019CAB345DB8C0C702223589EEFD154ABBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 21:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:01 +0000
Files and hashes:         1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
                          2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
                          3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: ql1RBOjf4cxid3xJ8Z5aL68jnD7b6G8vfIYbZzox9Rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:5d:b8:c0:c7:02:22:35:89:ee:fd:15:4a:bb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Mar  1 21:01:01 2026 GMT
            Not After : Mar  2 21:01:01 2026 GMT
        Subject: CN=46e63ad671ab4fcb3d7d47964bb058b01af1856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:9a:21:f3:b2:39:ac:7d:5f:c3:f7:53:ca:
                    31:6f:d6:99:fb:71:73:e8:48:b6:15:13:03:5c:bd:
                    27:29:95:c4:96:1d:4f:b7:05:dd:14:e4:f2:64:a8:
                    99:a4:d8:03:3e:81:bf:0a:e9:ff:78:cb:e5:3e:65:
                    d8:85:bd:43:e8:33:76:be:7f:d0:b0:9e:21:ce:56:
                    6c:da:a2:0f:52:1d:bd:1e:95:29:96:fa:89:8e:07:
                    7a:fa:1f:25:43:00:4e:fa:58:3d:0f:94:a0:36:d4:
                    3c:19:92:7d:83:28:aa:7d:4d:84:3d:72:39:55:b4:
                    39:67:2a:52:47:a2:6f:dd:e6:ec:bf:f7:75:bf:d9:
                    18:2c:ec:ae:f0:67:fc:9d:c5:87:69:b6:15:0d:40:
                    6a:70:39:dc:b4:35:2c:d5:a4:11:e3:10:8e:96:48:
                    fb:0c:88:cd:f5:63:81:fc:ad:31:2a:52:60:ca:c7:
                    b7:4b:80:4f:6f:fb:aa:99:68:fb:ad:9c:6e:57:21:
                    70:0f:4d:0f:b5:4a:6b:8d:5c:c5:79:8b:b0:6b:d0:
                    14:d4:d3:12:12:99:13:61:b0:5d:2e:2c:ef:79:82:
                    13:f4:4e:6c:96:4a:f5:10:80:27:43:84:e4:b8:8d:
                    96:1b:a8:66:e0:ee:ec:f0:79:19:28:53:cf:1c:33:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E6:3A:D6:71:AB:4F:CB:3D:7D:47:96:4B:B0:58:B0:1A:F1:85:6E
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:04:a7:e4:84:fa:32:73:e1:23:9e:c6:ff:f3:dc:ae:15:
         61:28:a2:81:c6:fe:5c:be:be:22:21:57:c0:83:f5:cd:6b:a5:
         b8:bd:a7:85:c8:f7:43:c7:98:20:8f:16:b7:12:75:42:ad:9d:
         ba:dc:6c:14:46:29:5b:00:bf:48:84:95:33:54:a5:fe:b5:47:
         d1:89:a4:a8:f4:ad:04:2e:53:62:06:dc:60:62:c9:26:37:19:
         1a:89:24:11:e8:92:06:83:e9:94:b3:4d:45:8c:0b:46:ba:c1:
         c9:f0:7b:4a:a3:ff:0b:77:ce:d3:73:28:5d:ec:66:23:61:24:
         82:c8:ca:ed:02:96:25:9a:84:8b:71:22:71:98:13:7e:9e:8d:
         40:fc:81:0b:a7:a8:df:0d:63:64:23:bf:cf:49:da:38:24:e1:
         ac:7e:b6:85:73:8e:d3:4a:53:f4:a5:0c:be:39:19:65:55:74:
         5e:0f:d0:61:b9:87:7a:73:05:d7:ac:27:d8:0d:43:98:72:db:
         fb:6d:b7:4f:5c:2e:7d:1d:18:cc:f7:9c:6a:ac:4a:b5:bd:dd:
         4e:87:8a:78:6c:11:98:97:e6:92:60:2a:df:90:35:0b:41:5b:
         70:2c:96:83:38:69:62:d2:cb:29:82:57:a4:fe:23:f4:30:d4:
         77:39:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:38 2026 by rpki-client