Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          D7Lvl3/ksCRPxVbmQTpYUzni9b6QxQfIQiimR+IZ9VQ=
Subject key identifier:   67:39:07:19:DF:92:4F:29:09:5D:3E:6C:F3:AC:D5:EA:6A:61:A5:BA
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       019CACEBF59B5D8237F0D5DD75F2EA261DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          1858
Signing time:             Mon 02 Mar 2026 05:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:10 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: zOGLBdusv6w/MP8pJD+wEjd4159/imDRF4/8poRn1pc=)
                          2: 3Yx2vfa7XpKGoKje1_1k7pHSStk.roa (hash: 4SXl0Toh/4xYp5qzMatRJXmfZoTd3stX8dho8IkBhRc=)
                          3: O_zLKAo-ZMO-tgxP2QAdS4mIV5k.roa (hash: exFmvEBwttF4QN/C/nqEjfx58jhXHu21SMR83NxxCYg=)
                          4: ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa (hash: tC1vsSl2lFcihSUrAMnGtV0LC1FxIGsGqNLEW5eQ5Gk=)
                          5: jVDrmBIoje6iRSObfGXaCjLz0xo.roa (hash: RXvov2OHxeC7UMuJbvYcTyuiz8VJj0AFn2lQavBDDFc=)
                          6: uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa (hash: 74PjhxXF+GVRA7M8a6OYT30HIUUuictdHv+lHM0QfVc=)
                          7: yBmSRS9b5lz7_xzd3NgvPyLBW94.roa (hash: 8pKcmdD26fnU0KVwOwv225VvvZWRzrn5qkT1zOJvfrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:f5:9b:5d:82:37:f0:d5:dd:75:f2:ea:26:1d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Mar  2 05:01:10 2026 GMT
            Not After : Mar  3 05:01:10 2026 GMT
        Subject: CN=67390719df924f29095d3e6cf3acd5ea6a61a5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:93:d6:a7:18:0d:a0:8d:07:f1:37:1f:96:
                    d8:f4:86:6e:cf:3a:46:bb:9a:a4:ae:81:a6:2a:75:
                    a5:49:cf:8a:64:7d:e1:6c:8b:9a:78:02:1b:5c:87:
                    5b:1f:2b:37:3a:d2:b3:39:08:f4:36:b2:8c:60:ea:
                    b4:f3:0c:dd:1f:22:dc:6e:28:10:0c:79:29:d3:e4:
                    d2:61:fe:21:32:17:89:81:8a:30:27:f7:63:7c:74:
                    3f:6d:e2:2f:ac:38:7f:9d:24:a1:14:b9:ae:e6:fd:
                    94:28:02:91:62:e9:f1:14:e5:3a:ff:cf:4b:75:af:
                    67:eb:cb:88:42:d6:65:bf:11:8f:c9:4a:63:dc:e9:
                    13:9f:35:4a:a6:cc:f7:2d:af:1e:81:c1:92:ea:cd:
                    56:15:3b:c3:21:64:40:c0:03:a7:f3:e4:6f:c2:9f:
                    1d:89:8b:cc:ea:cc:2c:40:d7:07:a5:df:e2:fa:41:
                    af:e6:1f:15:44:f1:ac:e5:04:3d:7f:5d:59:8d:50:
                    78:a1:5d:e5:60:04:8d:0b:f9:fd:a5:29:9c:9d:b1:
                    80:34:d0:ad:01:a9:13:d4:8c:93:9d:90:32:c5:91:
                    b7:42:92:b7:a1:e6:3e:02:ae:90:9c:24:4c:7e:be:
                    4b:34:02:5d:23:7e:53:b2:24:65:f1:35:b1:3d:cd:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:39:07:19:DF:92:4F:29:09:5D:3E:6C:F3:AC:D5:EA:6A:61:A5:BA
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b1:b5:93:7a:71:8f:38:46:8b:7f:c7:99:ba:17:46:2c:a5:
         20:7f:db:1b:fb:7f:d9:81:ca:8e:f2:3a:0a:84:3b:87:49:c6:
         8d:b4:ab:d8:a0:6a:08:a7:19:b7:6f:23:4b:aa:86:34:e3:04:
         21:54:dd:98:67:f2:a1:55:3b:19:31:77:5d:cd:c0:f1:52:e4:
         12:0a:02:d5:b0:51:39:33:77:d1:1b:00:7f:d8:0d:31:18:a6:
         5e:df:af:51:17:80:dd:42:c8:72:e7:e2:55:57:31:be:25:1b:
         da:11:cf:e4:1d:8c:3e:d4:3b:ab:31:d0:e6:56:d9:fb:91:f3:
         b9:17:8c:d7:7b:6b:a7:1e:bf:75:af:df:92:2f:41:63:49:0f:
         b6:0e:ac:f9:46:3f:19:0e:f1:93:96:b7:c5:14:59:89:0b:f7:
         8a:30:09:dd:03:25:46:24:9d:e5:19:82:36:e2:83:97:85:4c:
         71:11:fd:6e:66:c1:af:4c:8c:6e:97:5a:d4:18:bd:e8:3b:e8:
         ff:e8:29:aa:82:7d:b7:24:ca:64:da:19:d4:2b:76:dc:58:7a:
         e5:de:9c:05:0c:7a:13:2a:38:22:ae:8d:ef:80:44:03:88:9e:
         55:bb:80:52:d3:93:ae:9d:e3:f6:af:0b:d5:3c:76:66:25:19:
         e0:b5:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:41 2026 by rpki-client