Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File:                     Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier:          efEEWGCGiJJ8dRh3nn5j8W0PMgO6s89m1UHv23D9eIc=
Subject key identifier:   42:8A:A9:70:78:DE:DC:CF:10:E5:BB:7F:83:91:EC:14:7D:83:6D:82
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer:       /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial:       019CAC0FE096D2FF2E4A4C8FBF0BFA82AB74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:47 +0000
Files and hashes:         1: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: jHxCMLYPYRo0lN463j4YLEd5BLgfHtizOvXCFLFYR8Q=)
                          2: eAsQi27gOXjF_3AkuEMYU4-EJ7s.roa (hash: 0gnlaTOkuhgz//iK3cJQOoROXqgFENfW3q9eAblXZeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e0:96:d2:ff:2e:4a:4c:8f:bf:0b:fa:82:ab:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
        Validity
            Not Before: Mar  2 01:00:47 2026 GMT
            Not After : Mar  3 01:00:47 2026 GMT
        Subject: CN=428aa97078dedccf10e5bb7f8391ec147d836d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:0f:4c:79:fe:e6:99:49:f3:62:98:93:c8:
                    eb:7b:c3:87:68:02:13:e7:90:5f:d9:4a:36:77:2d:
                    43:77:4d:7a:eb:ea:10:1b:91:88:ca:a3:53:7f:67:
                    75:ca:cb:93:96:ee:51:33:51:d6:13:66:a1:2a:2c:
                    51:a2:65:24:c7:3c:da:6d:1f:6f:11:de:59:e6:f3:
                    60:75:25:8b:39:4f:93:fa:1f:a1:55:82:07:96:6d:
                    62:7c:1d:9d:6f:63:db:d2:17:53:70:22:e5:1f:98:
                    b5:fe:df:85:aa:f2:28:35:15:4b:a4:f1:f7:cb:51:
                    4d:1d:ae:7d:01:51:cc:ee:7a:62:63:71:cd:c5:6f:
                    45:03:7a:a8:09:06:11:9f:45:3a:9c:79:50:ed:7e:
                    2c:b8:f5:78:57:dd:1c:c0:ca:4e:0b:6b:d9:a8:9a:
                    cb:cf:6a:c2:3c:0e:f5:fe:81:e1:11:78:44:45:fe:
                    12:dc:6c:be:26:75:1a:d3:b1:16:d8:1d:b2:93:04:
                    2b:98:5c:e7:f9:ee:d8:62:f9:5e:99:91:50:91:84:
                    e4:1c:fe:11:28:79:d2:62:7a:b8:33:45:22:be:44:
                    a2:6f:0c:89:4e:94:2b:18:35:00:d3:00:a7:76:38:
                    10:aa:df:58:31:2f:80:d0:cc:49:0f:96:d6:af:ba:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8A:A9:70:78:DE:DC:CF:10:E5:BB:7F:83:91:EC:14:7D:83:6D:82
            X509v3 Authority Key Identifier:
                keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:cf:7a:78:30:fe:af:d5:8f:43:47:be:35:5f:1c:51:58:
         db:a3:0c:a2:11:55:77:69:e3:b9:e0:d2:f5:e3:6c:01:c9:e5:
         f4:a9:70:09:f1:b2:85:16:94:70:e7:e9:7b:9d:86:be:83:87:
         b4:02:94:b0:a6:58:d1:70:78:a9:a5:4e:7f:09:4c:ec:a6:73:
         7b:7e:8e:99:ee:32:1c:c8:24:9d:04:79:f3:3f:18:6e:46:6c:
         b7:78:64:bc:a8:64:2b:04:8a:05:2e:7f:7e:ec:63:12:aa:7f:
         17:92:19:cf:3c:e6:bd:b6:39:27:d3:c1:da:ef:fa:cc:ef:18:
         94:7d:a4:31:d5:b1:30:35:43:d9:49:9c:ba:6b:cd:57:f9:bc:
         d7:42:9f:6e:5c:d9:b8:eb:41:c6:ae:b5:19:60:34:3c:69:9f:
         f9:2a:90:80:36:12:0f:c7:23:81:45:54:a1:c2:b1:1c:da:05:
         7a:cb:6f:4b:62:43:17:12:5b:1c:10:26:4c:a6:6b:7b:39:55:
         5b:84:ab:3e:2d:bc:d8:29:5d:59:25:8e:81:45:50:fa:f8:0b:
         c0:5b:e9:e2:e1:78:e1:3f:57:b2:ad:bd:e6:1d:8f:6e:77:a2:
         49:3f:0c:eb:99:88:9a:79:e9:fa:bf:29:4f:0a:53:25:aa:a2:
         94:31:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:19 2026 by rpki-client