Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
File:                     5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json)
Hash identifier:          5qZLn5EPKy9yM9RouJRn6LQ33uIyiaTQW6fQiG0UOYU=
Subject key identifier:   68:8E:85:A9:FB:D7:D9:0C:A9:C7:94:5F:FE:5B:2E:A1:0C:79:72:EB
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       019CAB6BC6E3F17551207C924725A9F03894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 22:01:33 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:33 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:33 +0000
Files and hashes:         1: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: YpQ0jbr6g8JM/nwsBFd/4axI9s79AO89Oc2ULM9Xg18=)
                          2: JeNUkUBnpSW-vlRNGpNwNRUA7lY.roa (hash: BiO9H+K+d0OkI09wy+9OSVdZztlHwZneYZ1DCzlG8SU=)
                          3: VSeiA30DTHd0bJ0y1tRYzj5Mt1o.roa (hash: E9YlBD3LSznk1ncytSRiAb3WU0SWHEm+bFl0B0p1e8Y=)
                          4: vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa (hash: CpHPotO66LaiTXBrpXnTFyDFuhRN5pLaJobhuRza6R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c6:e3:f1:75:51:20:7c:92:47:25:a9:f0:38:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Mar  1 22:01:33 2026 GMT
            Not After : Mar  2 22:01:33 2026 GMT
        Subject: CN=688e85a9fbd7d90ca9c7945ffe5b2ea10c7972eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:65:d2:e7:ee:c5:ae:f7:47:80:53:7b:d2:
                    b5:d0:69:4f:79:e1:11:ae:cf:6b:3b:4c:cf:5d:17:
                    09:55:7e:bd:63:38:a2:34:0a:89:e7:64:55:63:25:
                    34:48:a0:52:48:a8:ae:92:e4:7a:58:01:d5:61:93:
                    e6:ae:a7:b8:ee:97:75:de:8b:04:98:55:5a:70:b7:
                    3e:27:1f:0a:e0:23:99:e5:1b:e7:a3:f1:9e:d1:66:
                    6e:e6:19:80:72:2b:40:14:1d:bd:96:1a:7f:93:9f:
                    b1:cf:57:b5:a7:56:10:ca:2c:26:49:a4:9c:d2:36:
                    d8:37:19:1c:a1:03:51:04:9a:37:2a:fc:a5:c6:b5:
                    b4:31:06:c4:31:74:5f:0b:ec:c3:e0:b1:59:b1:c3:
                    50:4a:21:ee:cc:81:48:e4:bc:97:9c:51:d2:86:3b:
                    52:a4:e2:d2:99:c3:b4:90:e7:48:22:28:d0:40:5c:
                    eb:80:8d:12:44:47:0c:ca:d3:2a:94:d4:e4:60:f4:
                    1c:11:eb:85:9f:82:1b:33:dc:56:31:d1:a5:f1:43:
                    cc:12:bf:55:2a:75:ab:ee:ba:74:f6:37:eb:08:e6:
                    f3:71:21:52:8a:72:d2:ff:34:84:8c:ba:de:b8:28:
                    ac:18:94:44:dc:27:ca:e2:7d:a2:8f:87:f0:b9:f2:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:85:A9:FB:D7:D9:0C:A9:C7:94:5F:FE:5B:2E:A1:0C:79:72:EB
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:3c:d4:f0:0d:22:ac:9b:ba:d6:8e:ed:67:1d:29:da:48:
         91:4f:49:84:49:34:b5:76:df:4f:c4:07:45:75:6e:e9:7f:34:
         9a:1d:ed:79:f6:07:19:c0:92:67:97:03:d5:fb:2f:da:43:f1:
         21:a2:ed:c2:4b:53:78:05:fe:0c:91:b9:2b:9a:98:ec:20:88:
         08:9a:e3:63:15:7a:df:eb:e8:b6:1b:b5:0e:ee:a1:1b:11:1b:
         06:0b:3f:1b:72:f4:9e:99:25:73:b9:2a:ae:d9:2c:78:5f:d8:
         f8:bd:95:fb:cd:6e:ff:07:f6:da:d8:36:fe:c6:5c:ad:80:d8:
         33:69:b2:85:fb:f1:74:ea:0d:b5:69:ac:55:82:d1:59:55:f1:
         d1:1b:e1:4c:57:7c:e8:cd:07:1a:4d:df:00:13:6c:2b:f4:40:
         6f:e5:e9:bc:0a:fd:0f:9d:de:13:16:77:f8:75:94:b9:a8:ec:
         45:4f:99:41:6f:8d:f0:88:ec:84:ee:d5:5b:7e:4d:7c:bd:8f:
         31:bd:0c:aa:85:f2:62:fa:38:c9:f7:c6:de:a0:d2:3f:fa:e9:
         1a:98:18:02:43:ac:16:b7:0d:d9:f2:8c:06:47:81:a0:03:c6:
         40:db:23:81:e4:5d:5c:b1:e1:71:99:d8:fd:ac:da:96:e7:e1:
         c0:5a:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:14 2026 by rpki-client