Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          ivdQaZIQmO4blBycq2KcIRerO5UrcchBI14lY8Pnvpg=
Subject key identifier:   B7:C8:28:34:E0:CB:80:18:C1:87:D1:3A:3C:4D:D8:43:A1:5C:6A:44
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       019CAB6B0DAC6372538C8CCBEB02A7826608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 22:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:45 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: 46n1EJdhlYiU/oVB7Yg7lor5DRDGelV0ghiUcLNElgQ=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:0d:ac:63:72:53:8c:8c:cb:eb:02:a7:82:66:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Mar  1 22:00:45 2026 GMT
            Not After : Mar  2 22:00:45 2026 GMT
        Subject: CN=b7c82834e0cb8018c187d13a3c4dd843a15c6a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:98:44:7a:5c:99:9e:57:38:c5:70:47:2e:
                    56:f6:32:c7:7b:b8:63:97:d3:0d:08:41:1e:42:f2:
                    4c:6f:b8:44:81:6a:e8:75:44:f8:69:14:36:d4:fd:
                    68:36:3d:5a:99:ee:a7:b7:c2:c5:68:99:fa:34:22:
                    62:17:82:b6:80:f4:36:2c:bf:8e:f4:e1:84:85:3f:
                    f5:34:81:96:f6:e0:3b:5e:31:49:0e:6b:31:72:2f:
                    6a:d6:01:97:75:67:68:6a:5f:60:f3:b9:c3:2f:43:
                    f0:19:2d:cd:ac:b8:ec:bd:08:15:4c:79:3a:d7:cd:
                    ea:f2:e8:91:71:eb:57:93:74:62:6a:1d:a3:c2:82:
                    85:ee:d5:56:a7:0e:31:83:1b:39:aa:6d:7a:b9:b2:
                    e7:3e:12:24:ae:d9:42:26:13:46:76:47:42:70:b1:
                    07:be:8d:ba:7e:9a:fa:fc:61:4e:f8:85:0d:d6:ea:
                    96:79:5d:9f:93:9a:a4:c6:00:23:9d:03:d2:d9:dc:
                    2e:56:29:63:e3:3c:8a:4b:97:d0:5f:50:57:ae:6f:
                    bf:49:79:19:ef:90:e7:3c:2c:5e:61:61:4e:f1:62:
                    0f:f7:6b:52:de:f4:5f:56:98:0d:7a:e9:50:98:34:
                    5c:0f:12:44:a6:58:1f:a2:dd:64:ad:3c:43:f0:14:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:28:34:E0:CB:80:18:C1:87:D1:3A:3C:4D:D8:43:A1:5C:6A:44
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:a4:8f:f7:c9:b7:da:d3:29:16:15:6a:15:9d:5e:4e:52:5f:
         3b:bc:f8:06:a9:02:9a:29:11:52:82:d9:43:f0:1b:f0:8d:e8:
         60:32:4a:b4:e5:0e:23:a4:d8:9b:04:26:84:25:42:69:a4:46:
         71:41:1c:65:6d:87:ba:8b:84:44:73:15:62:80:d2:01:af:e3:
         2e:61:f3:83:94:a9:4e:47:99:b5:3b:d0:09:dd:5b:b3:41:2f:
         cc:64:5b:f2:c3:f7:a8:15:c3:d2:96:31:e0:bb:04:98:43:1f:
         79:75:34:07:b8:66:ca:0a:fe:60:1f:5c:c3:82:51:05:02:3f:
         4c:75:7e:1b:05:4b:91:9a:8a:de:36:15:d2:ec:5a:e8:b1:3f:
         50:aa:bb:e3:bb:51:3a:f0:4f:91:72:97:11:7a:40:d6:65:60:
         d6:a8:18:fc:df:1c:e8:e3:fb:3d:ab:fb:ee:9a:a1:e2:a2:f5:
         02:44:81:1c:5d:10:17:7a:c7:5c:d5:37:74:3e:b1:8e:d4:e3:
         24:eb:15:ed:7a:32:a2:78:fc:8f:5d:c9:d6:5e:b8:63:50:d2:
         e8:d3:06:d4:d7:ab:8a:2c:33:b1:f3:6a:76:1d:a8:58:12:4b:
         eb:96:5a:79:cf:63:c3:9c:6b:b8:86:db:16:d2:b6:3b:87:a4:
         bf:6a:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:59 2026 by rpki-client