Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
File:                     51B9sIinyBoNvsjxrdtS-VvRAUM.mft (raw, json)
Hash identifier:          OUf/Xabbh4L2BjBM0S8EFYB1YveYXSSz5raPFLsrDIY=
Subject key identifier:   6C:90:B2:9B:C4:AB:41:CD:04:03:47:70:8E:EA:A3:60:5D:69:9D:DE
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Certificate issuer:       /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial:       019CAC46C0F359DC77CA24B077294CA1DE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 02:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:43 +0000
Files and hashes:         1: 51B9sIinyBoNvsjxrdtS-VvRAUM.crl (hash: UJsjEidzhyLkvJEtaEwiw72Gb/++1AcePWDH8bBwo+Q=)
                          2: 7kYVFuyM-RfK26RLFo6DMjfTwzk.roa (hash: KbmoPpiA6XOiH7OL5wKdZhHaSYMgcT7lmpKJIFLFmlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:c0:f3:59:dc:77:ca:24:b0:77:29:4c:a1:de:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
        Validity
            Not Before: Mar  2 02:00:43 2026 GMT
            Not After : Mar  3 02:00:43 2026 GMT
        Subject: CN=6c90b29bc4ab41cd040347708eeaa3605d699dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:a5:f9:49:53:ff:ba:47:1e:77:b3:0b:f0:
                    88:46:c8:c0:2d:29:56:d5:49:a2:7f:07:e0:f3:5b:
                    06:f3:7d:9f:df:75:5d:1d:48:2f:00:ed:69:c1:95:
                    d8:9e:23:76:77:c1:76:df:dd:96:e0:56:f8:ac:e2:
                    17:6c:9c:cb:dd:e9:30:17:8d:c7:33:97:a8:61:45:
                    c4:e7:eb:d7:2d:a4:4c:f6:81:7c:03:cf:fb:df:9a:
                    da:f3:dd:54:4a:c8:44:cf:c9:c9:c0:36:cb:3e:81:
                    66:7a:8e:9f:43:3d:02:88:e2:d4:ad:9e:52:e0:a7:
                    16:62:27:b5:e1:16:0a:c2:38:8d:3c:de:4a:65:5b:
                    0a:ea:cf:58:f9:9a:91:87:58:7f:0a:f8:db:cf:fe:
                    98:84:04:19:0a:a8:90:b2:cb:a9:0c:21:f2:0e:25:
                    10:b4:26:7e:a1:db:4d:fa:80:68:b5:b3:bd:5d:e6:
                    ff:25:7c:93:73:07:d6:ef:ef:ea:f5:37:02:ce:e3:
                    21:de:3d:b4:4e:0e:a7:61:8b:aa:a3:d1:c8:c5:9b:
                    e3:73:fa:5a:27:ae:29:ad:f7:2c:af:3f:43:64:d7:
                    cb:d6:96:9a:1c:40:f2:16:b4:b6:b2:d5:c1:9d:8a:
                    82:10:6a:55:ca:30:a9:b7:bf:b6:f2:a8:10:ef:c1:
                    a4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:90:B2:9B:C4:AB:41:CD:04:03:47:70:8E:EA:A3:60:5D:69:9D:DE
            X509v3 Authority Key Identifier:
                keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fe:6a:5a:db:9d:ce:d1:06:5a:8b:f8:75:6f:2e:33:88:9a:
         bd:ae:3b:73:6e:22:05:e1:03:3e:04:f6:5e:10:87:db:e5:6d:
         81:d1:f1:b4:7c:48:8a:ad:ff:dc:de:88:eb:b5:a2:c4:ca:1f:
         24:3f:18:0b:d6:db:ed:41:dc:cb:56:11:61:fb:a6:ea:de:9d:
         77:79:73:b2:80:15:81:05:2f:ac:9d:6a:22:d5:a7:45:af:ce:
         cd:e6:91:b3:4a:c6:ac:ba:c5:38:09:83:47:e0:39:92:a3:7f:
         6d:b8:f5:55:4c:5c:11:03:7e:31:1c:1e:26:8d:99:36:a2:7f:
         61:48:fe:30:6d:c5:69:4c:a2:0e:7a:56:b2:3e:17:9c:32:95:
         d3:32:4d:ba:f4:01:af:51:73:94:9f:34:48:21:90:16:b2:23:
         9f:3a:c3:f4:73:dd:12:40:b9:fa:e5:14:ba:a4:17:c5:1b:99:
         2a:33:04:aa:74:23:ad:c8:24:de:36:27:b1:a5:a9:91:77:8a:
         14:fc:60:20:0a:79:08:0d:af:cf:23:ba:ea:2a:c0:f0:2e:54:
         4e:4c:02:0a:78:c2:6f:7b:23:3b:5b:1d:b6:dc:97:80:ff:7d:
         17:c6:75:9b:4b:37:1b:e1:e1:bb:c2:42:51:c5:b7:84:cd:af:
         5e:de:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:36 2026 by rpki-client