Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          Drn2gF1CYQ2CenmdEJkxd3aceDol6y0FR7qq6UvPbos=
Subject key identifier:   4B:02:9D:66:0A:E3:51:D3:58:6A:8C:52:C6:A4:A0:15:7A:D1:BB:74
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       019CAB6BCAE02700C3D03FD36A6326F0AA1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 22:01:34 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:34 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:34 +0000
Files and hashes:         1: MyMck_OWz-rJpmQgWGb6jlbkutw.roa (hash: 5JHTiUXVtXyR9bkNJgqG0siIzJTx3VY+ufE9EFCZFgY=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: m5VV7qZiNAn5dlf8AUioYS4apDvs6Q9O7Kt89cDGwA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:ca:e0:27:00:c3:d0:3f:d3:6a:63:26:f0:aa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Mar  1 22:01:34 2026 GMT
            Not After : Mar  2 22:01:34 2026 GMT
        Subject: CN=4b029d660ae351d3586a8c52c6a4a0157ad1bb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:1f:32:34:7b:ad:6e:79:6a:29:61:2d:50:
                    3e:93:5d:01:07:8b:86:1d:fc:30:4f:75:39:c1:a4:
                    34:6c:65:e3:9f:c3:5f:58:06:1e:44:0a:3a:e7:7c:
                    80:16:44:92:96:14:7d:c6:5f:16:5a:32:0b:9e:63:
                    da:1a:98:29:8f:f1:2a:ec:f0:45:a4:dc:3a:81:bb:
                    bd:d5:5c:cc:63:44:26:1e:ae:0b:3e:b6:d1:da:07:
                    c9:af:72:f9:a3:95:da:d3:3d:12:9e:37:da:10:8e:
                    4a:b6:7a:ff:ad:4a:66:b8:cd:b9:50:e4:0b:2c:fe:
                    64:17:67:a7:00:bb:df:aa:a3:22:18:a3:7d:a4:36:
                    89:c6:f8:90:93:9a:b5:87:3e:e7:a4:f1:bf:d5:a1:
                    7a:aa:97:dd:18:5a:6c:a1:51:f7:9b:06:5d:49:28:
                    68:62:d7:53:4f:8b:8d:b0:dd:de:02:00:53:41:1c:
                    84:13:9b:71:a9:7f:e6:82:17:0a:9f:03:09:33:63:
                    da:1f:af:0d:35:fc:ab:78:35:2c:20:b5:78:39:a0:
                    72:25:a9:e7:47:68:97:38:b2:f8:ec:7f:79:b6:16:
                    26:2f:dc:f3:de:ae:80:f3:e9:c8:4e:da:a6:84:a2:
                    a8:bf:a1:11:2d:cf:6d:6e:55:0d:2a:e1:5c:ee:05:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:02:9D:66:0A:E3:51:D3:58:6A:8C:52:C6:A4:A0:15:7A:D1:BB:74
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:a7:6e:86:d7:17:0c:dc:28:4c:8b:60:16:e8:be:51:88:
         7b:b1:4e:ab:f4:1e:92:fa:94:4b:b3:ae:6c:e6:a3:05:0c:fb:
         33:29:d9:30:3c:50:eb:95:a9:16:43:f0:7b:57:e0:66:ad:15:
         99:8c:7a:f4:d7:d0:1d:9e:c6:8f:5e:56:c4:63:e0:28:bc:f4:
         3b:50:94:64:67:0f:ac:9c:0f:eb:17:7e:23:79:27:dd:bf:0f:
         09:e1:83:37:a9:d9:56:b8:b9:ed:9b:0a:d8:17:c7:4d:9f:1e:
         4a:1c:1f:1a:33:af:a3:e6:cf:78:28:3e:5e:05:62:34:ed:61:
         b7:f9:ba:92:4d:95:c7:e1:89:79:65:e7:2f:20:d0:5f:6f:47:
         ff:46:15:ed:f4:e5:08:ff:f3:79:a6:30:ad:b6:15:af:e0:39:
         14:11:ee:27:69:1b:25:cf:b0:e7:e1:68:a2:5c:10:3d:ef:df:
         93:33:90:6b:6c:3e:e9:04:d0:86:8d:eb:1a:10:96:4d:89:35:
         c9:52:8a:3d:3d:07:8f:5a:3c:fa:b6:b8:a4:a5:7f:ae:47:a9:
         6f:6d:4c:29:46:14:98:e1:31:e4:fa:86:0f:25:3d:59:0c:ba:
         29:a2:87:fe:af:d5:cc:16:56:78:a3:9d:fc:e7:1a:d7:30:8f:
         62:76:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:33 2026 by rpki-client