Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File:                     tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier:          ui/Gj8SQ8RPA07bNiPGYH+eCQcMisTkG7z8Iibrcopw=
Subject key identifier:   6E:B1:07:9B:AA:CB:D2:6E:4A:8B:B2:CB:99:86:7E:C7:D2:D1:8D:91
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer:       /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial:       019CAA8F6BA577939DA55BAA07475DDDA3A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 18:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:51 +0000
Files and hashes:         1: d8hxgCzh00P1vymqIssXJjsMEak.roa (hash: QPYQOVq2qG5TE7J3ZZxvLlE+oFxwiuDzLiQ9NHEre64=)
                          2: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: 9tR/7LRK8QlcAO4OYofVZmfMQKvhzwC+EmDWYb6clCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:6b:a5:77:93:9d:a5:5b:aa:07:47:5d:dd:a3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
        Validity
            Not Before: Mar  1 18:00:51 2026 GMT
            Not After : Mar  2 18:00:51 2026 GMT
        Subject: CN=6eb1079baacbd26e4a8bb2cb99867ec7d2d18d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:65:46:35:62:e5:52:37:b2:ed:ae:98:54:
                    4b:13:a2:6e:bb:47:9b:17:e2:e6:e7:d0:0e:b4:d0:
                    e4:44:6b:a8:68:73:ab:fa:c9:b6:93:e2:a7:58:ba:
                    56:4b:c0:e9:44:3c:ff:31:8b:99:28:78:0f:29:ff:
                    21:12:e9:6c:44:bb:53:cd:3d:bf:b3:40:07:a8:db:
                    2b:ea:8a:63:ac:4c:79:9d:f9:96:32:db:00:2f:47:
                    0c:0c:0f:c8:24:e0:53:24:0c:94:f8:dc:ba:06:40:
                    ca:68:c0:54:1f:28:07:2a:21:fc:47:8b:77:d4:f7:
                    9b:a6:db:98:ce:4f:62:5e:ac:78:33:70:7e:2e:de:
                    80:b7:be:84:e2:e1:b0:bb:a4:65:99:47:77:2e:08:
                    1d:70:fb:f0:7e:6b:6b:32:c1:7b:96:ba:d1:c7:9a:
                    8a:a7:b6:1a:57:b7:6e:6e:7d:43:95:05:05:6a:dc:
                    78:87:d6:f1:d8:84:19:cf:79:13:42:69:11:dd:81:
                    bf:d8:3d:d6:4d:b9:68:8e:c3:d1:17:98:85:d8:e2:
                    e6:34:10:09:53:c0:76:2c:3e:3e:61:08:8a:14:57:
                    27:bc:ac:8e:b8:ea:6e:4d:be:1f:53:be:78:80:4e:
                    97:07:61:5b:eb:ea:34:c2:aa:63:b8:0c:f2:33:9a:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B1:07:9B:AA:CB:D2:6E:4A:8B:B2:CB:99:86:7E:C7:D2:D1:8D:91
            X509v3 Authority Key Identifier:
                keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:1e:ef:07:ea:3b:44:a7:7c:93:0e:fe:f4:dc:a2:d4:2d:82:
         e5:52:d4:72:6c:bb:6b:0c:c4:51:e5:a2:e7:a7:29:e9:ef:f7:
         a9:7e:57:ce:fd:ed:56:6a:00:66:68:b3:dc:10:d0:f7:95:83:
         c5:62:29:ae:4f:7f:57:28:b7:8c:5f:d7:4e:18:98:aa:87:81:
         6e:c8:0f:0f:d8:01:66:91:34:d6:93:f5:7f:c4:0b:89:44:37:
         28:d9:8f:5d:37:4e:4d:a9:15:d6:6b:52:29:47:42:21:db:4f:
         6e:92:e6:43:67:ed:6b:d2:3c:e1:8a:ac:bf:4c:de:61:e1:85:
         43:39:0f:c9:72:92:94:3a:66:f3:26:aa:06:c4:7c:be:56:40:
         f1:13:0c:b7:1e:de:fb:e9:66:8f:2d:6f:d6:7e:69:dc:93:7e:
         5f:ea:ba:7d:0e:a9:fd:5f:79:c2:76:69:50:0a:80:2f:f4:17:
         69:66:7f:0c:2b:ed:d5:83:a5:42:5c:12:e2:8b:9d:fc:55:aa:
         46:27:56:b4:76:ef:06:09:e2:71:f0:08:4e:ad:3b:3f:3d:a0:
         90:fe:5a:bc:38:8a:e9:31:41:ba:aa:ff:2c:2a:e8:21:6c:53:
         c8:92:74:6c:c1:a4:2b:b3:f6:cb:38:cb:d1:20:60:db:bb:56:
         43:05:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:59 2026 by rpki-client