Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          LB+D+JHH1fGx2WXSoKv2d9NxbhPHHPzXaPSd3o1voFA=
Subject key identifier:   F7:C7:8C:82:B3:36:78:42:22:87:B2:2F:AE:43:0D:75:DD:18:AE:7D
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       019CAA594190E3C1C92EF1199A91AF584B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 17:01:42 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:42 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:42 +0000
Files and hashes:         1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
                          2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: +mzOC7txFmvYesz5kcLBjNL+3gJCwSAUdoB4yC0+fQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:41:90:e3:c1:c9:2e:f1:19:9a:91:af:58:4b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Mar  1 17:01:42 2026 GMT
            Not After : Mar  2 17:01:42 2026 GMT
        Subject: CN=f7c78c82b33678422287b22fae430d75dd18ae7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:ae:1d:47:39:08:8a:e4:9d:ae:ef:26:d0:
                    fe:1d:e8:20:04:e3:9e:16:a7:1a:d2:28:6b:4c:7f:
                    d5:05:e7:69:a4:60:53:f8:5c:55:c0:96:f8:7a:2b:
                    9d:81:24:53:a5:c0:6d:3d:7f:6d:62:8f:56:46:c3:
                    7e:87:03:86:ec:af:2e:aa:96:08:5b:87:cc:06:3a:
                    7d:13:f5:67:82:ba:2a:32:43:ab:09:0a:c8:e0:62:
                    2e:ca:9b:5b:0d:3f:6c:bf:6b:75:00:d8:49:e7:84:
                    30:62:91:2c:0d:87:5c:19:0e:73:ee:8b:53:b0:f5:
                    93:9b:be:76:9b:8a:4d:46:ee:05:bd:83:80:ae:c3:
                    f6:87:03:49:f8:eb:03:32:3e:83:7f:6d:88:c8:75:
                    71:33:e6:df:76:26:80:05:ea:93:a8:36:02:38:5c:
                    ce:d9:3e:7e:22:89:24:51:3b:bb:1a:63:a5:15:bd:
                    d6:79:f5:ec:b0:55:1c:a0:50:fe:2a:e4:29:99:1b:
                    2e:9a:f6:85:29:28:2e:60:61:04:f7:d9:3a:87:1b:
                    e4:0e:9f:70:00:ff:19:d3:80:89:5d:d8:30:d5:8e:
                    46:9a:9b:c3:cf:d5:19:7b:4c:bb:2a:68:49:6e:f4:
                    ce:88:51:f1:dc:a3:f0:72:df:05:f7:36:33:41:c1:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C7:8C:82:B3:36:78:42:22:87:B2:2F:AE:43:0D:75:DD:18:AE:7D
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:f1:45:61:2a:86:f6:93:56:c1:17:0f:f4:23:0f:5e:a0:
         ca:35:95:7d:37:69:ee:b3:62:5d:ac:43:41:92:7a:e2:91:c0:
         60:d4:26:61:39:2f:11:dd:37:54:9d:04:0e:8c:af:a7:3c:31:
         61:5e:bd:8e:75:71:d2:ed:d4:4e:6a:f3:a9:f7:31:2e:7a:d2:
         69:5b:c5:d4:93:d3:00:29:58:31:b2:ad:42:21:10:d0:ff:81:
         0c:d9:69:fb:77:34:71:77:ba:67:37:e4:1f:be:6f:eb:43:a9:
         52:39:8d:09:bd:7f:9b:f4:89:66:25:87:56:93:52:7e:a0:91:
         cb:6b:4d:93:7a:83:56:40:2d:42:ba:1a:8d:38:ae:5d:14:d1:
         2f:af:1c:31:27:34:66:c5:a2:df:fa:92:07:0f:1e:e0:96:ee:
         90:ef:6b:af:48:4b:9b:6a:f1:1e:cc:0c:5d:71:88:63:4e:cf:
         74:85:6e:38:7e:ff:14:bf:5f:7e:9b:8c:fb:ae:dd:d1:5a:db:
         87:b4:74:a0:84:57:9f:dd:0b:62:35:f9:30:8f:0d:3b:56:86:
         ba:dc:8b:a5:19:f1:42:d1:77:f0:72:35:8b:32:ed:a2:88:68:
         42:f3:5f:6e:5f:c6:be:9a:60:25:98:2d:2c:ea:26:d0:6c:af:
         f7:c6:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:32 2026 by rpki-client