Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File:                     kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier:          Qa/JMCq9KKmADtJXP3su+nyZbcL+otULfd9IPJMtLDE=
Subject key identifier:   5E:D5:E3:77:B1:2A:19:E8:80:A6:67:11:99:ED:E2:09:50:B9:99:A3
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer:       /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial:       019CA9EAC080D75DC9765E952A7DAB7A58BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 15:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:00 +0000
Files and hashes:         1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: 60428UqMWhx3ivvrCM5olCxli3aLwOihUBJodOomPIA=)
                          2: sgkOUU34-98oBXZ_m0jBmS5vUec.roa (hash: E8ZXuT+H7colqnHoMLtcicaB+wl08+ImLIK4sH1PrIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:c0:80:d7:5d:c9:76:5e:95:2a:7d:ab:7a:58:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
        Validity
            Not Before: Mar  1 15:01:00 2026 GMT
            Not After : Mar  2 15:01:00 2026 GMT
        Subject: CN=5ed5e377b12a19e880a6671199ede20950b999a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:fd:6c:3d:3b:95:c6:54:f0:8b:6d:c1:46:
                    bc:3c:bf:d4:c3:79:3e:d6:15:33:ed:4b:47:f2:6b:
                    53:b8:f4:3e:53:e3:cb:25:f8:51:ae:0e:e8:d6:18:
                    d1:46:3f:6b:74:1a:7e:b9:61:7d:f3:8d:ba:b4:16:
                    57:3b:54:cc:a8:34:ab:92:33:eb:a7:fb:5e:18:16:
                    5f:1e:95:a7:22:73:5a:c1:31:e2:0d:6d:44:eb:a3:
                    1d:35:27:28:f7:ca:f4:09:85:5d:88:5f:e9:4e:43:
                    d9:84:30:4a:82:d0:01:24:fd:00:df:9c:fa:03:6f:
                    16:ee:a5:93:01:b9:eb:fe:81:49:ca:16:c2:67:ff:
                    06:fb:fb:64:08:0b:2f:8b:df:78:bc:12:4f:bd:ca:
                    fe:df:ab:eb:0d:a5:1d:4c:00:05:f3:80:b5:34:c7:
                    61:ef:e5:d7:ca:3f:5e:d3:d3:68:fb:4b:2d:0a:b5:
                    82:03:cf:e2:4b:52:61:01:83:ec:48:55:12:79:be:
                    72:b2:66:21:50:67:1d:67:1a:7f:7f:bf:32:d5:2d:
                    c6:3a:d4:85:77:13:e9:9a:0d:22:80:3a:49:20:53:
                    c7:1c:06:41:02:8e:62:76:48:74:7d:61:d5:93:ba:
                    c5:af:a6:ba:e1:03:f6:cd:e8:7d:74:62:26:eb:72:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:E3:77:B1:2A:19:E8:80:A6:67:11:99:ED:E2:09:50:B9:99:A3
            X509v3 Authority Key Identifier:
                keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:95:0c:ff:28:cf:e8:68:41:8f:eb:de:d3:b5:d0:ea:d6:29:
         c9:cb:28:f7:1b:a1:2f:d3:52:9e:99:28:e5:a6:55:f9:62:5c:
         46:50:c1:d2:f2:22:77:7d:93:dc:08:0e:72:1f:1f:32:12:b2:
         bd:2f:05:14:58:57:6b:44:46:36:ad:13:57:ef:48:0a:9f:a1:
         47:58:13:d5:d8:9b:da:a1:1b:98:43:0b:45:de:d3:24:7a:4a:
         a7:a2:48:04:49:49:15:ff:e2:40:aa:da:7c:cf:6b:4a:4b:95:
         07:0c:60:f9:c2:53:fb:3a:70:c1:a0:9e:9e:a0:e1:90:cd:4d:
         41:49:67:dd:7a:b5:45:28:2d:df:e0:b2:94:b4:cb:e5:e5:b6:
         8c:3c:2b:95:91:ed:67:43:41:c3:b0:e6:f6:e0:c2:19:ea:0e:
         b9:24:14:d9:12:1f:00:a0:a1:c9:01:3e:b3:16:3f:83:c0:61:
         b2:3d:3c:98:31:9a:d6:a3:61:66:b7:71:7a:06:ea:91:2f:03:
         67:ca:2e:d2:dd:15:45:40:d6:e9:16:67:8f:22:45:c6:f7:1c:
         fa:56:38:29:33:9d:9f:37:69:a0:ac:42:de:7c:06:2e:e8:65:
         a6:c2:74:61:7b:db:a0:ea:f0:8e:7a:8f:fa:93:30:2c:c8:57:
         68:4c:fe:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6sCA113Jdl6VKn2reli/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMWY4NDNhYzk0NDhjYjA3NzkxOTE3YjkwMzU0MDE1ZmZl
MjNkYjcwHhcNMjYwMzAxMTUwMTAwWhcNMjYwMzAyMTUwMTAwWjAzMTEwLwYDVQQD
Eyg1ZWQ1ZTM3N2IxMmExOWU4ODBhNjY3MTE5OWVkZTIwOTUwYjk5OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM/9bD07lcZU8IttwUa8PL/Uw3k+
1hUz7UtH8mtTuPQ+U+PLJfhRrg7o1hjRRj9rdBp+uWF98426tBZXO1TMqDSrkjPr
p/teGBZfHpWnInNawTHiDW1E66MdNSco98r0CYVdiF/pTkPZhDBKgtABJP0A35z6
A28W7qWTAbnr/oFJyhbCZ/8G+/tkCAsvi994vBJPvcr+36vrDaUdTAAF84C1NMdh
7+XXyj9e09No+0stCrWCA8/iS1JhAYPsSFUSeb5ysmYhUGcdZxp/f78y1S3GOtSF
dxPpmg0igDpJIFPHHAZBAo5idkh0fWHVk7rFr6a64QP2zeh9dGIm63Iu8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7V43exKhnogKZnEZnt4glQuZmjMB8GA1UdIwQY
MBaAFJAfhDrJRIywd5GRe5A1QBX/4j23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEt
YjIwNGY5ZmNhZGI2LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEtYjIwNGY5ZmNhZGI2
LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJUM/yjP
6GhBj+ve07XQ6tYpycso9xuhL9NSnpko5aZV+WJcRlDB0vIid32T3AgOch8fMhKy
vS8FFFhXa0RGNq0TV+9ICp+hR1gT1dib2qEbmEMLRd7TJHpKp6JIBElJFf/iQKra
fM9rSkuVBwxg+cJT+zpwwaCenqDhkM1NQUln3Xq1RSgt3+CylLTL5eW2jDwrlZHt
Z0NBw7Dm9uDCGeoOuSQU2RIfAKChyQE+sxY/g8Bhsj08mDGa1qNhZrdxegbqkS8D
Z8ou0t0VRUDW6RZnjyJFxvcc+lY4KTOdnzdpoKxC3nwGLuhlpsJ0YXvboOrwjnqP
+pMwLMhXaEz+Hw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:10 2026 by rpki-client