Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
File:                     mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json)
Hash identifier:          qVRsSU704+ycYSBhujLZjkEHZbqbyY04qc3ITtivGZM=
Subject key identifier:   27:C5:9D:B6:A1:01:31:19:9A:B1:D0:54:65:F3:AB:FC:35:58:4F:50
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Certificate issuer:       /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial:       019CAA590420F27F2C83D4FF9D65B877089D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 17:01:26 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:26 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:26 +0000
Files and hashes:         1: Yi0Mal9l3vA4jYf7tOGmoQFT5oE.roa (hash: 4x5zhxj70POTXOMtZe2mwH2fh1I+fIXiCO3CRw0mGhc=)
                          2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: 0j11ti5v5xIPEumAHAHKixsbr3vzVBQ1yRH7T9PqIoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:04:20:f2:7f:2c:83:d4:ff:9d:65:b8:77:08:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
        Validity
            Not Before: Mar  1 17:01:26 2026 GMT
            Not After : Mar  2 17:01:26 2026 GMT
        Subject: CN=27c59db6a10131199ab1d05465f3abfc35584f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:6b:1b:7c:c6:1d:2d:f8:55:6c:43:2d:39:
                    40:85:da:a3:be:cd:d6:a0:26:f2:af:0d:42:61:c2:
                    cc:26:c9:67:f8:35:36:fd:4b:91:1d:1b:1a:d9:59:
                    0f:7b:46:83:f0:7b:84:83:a7:ec:fa:bb:ce:d5:0c:
                    fa:26:ed:d7:09:65:0d:12:24:0f:10:cb:01:89:71:
                    4e:c7:25:91:79:c5:51:59:cd:63:ac:62:3f:f8:d1:
                    f8:83:d4:eb:d8:60:ff:d4:91:97:b3:f5:72:23:18:
                    3d:82:3b:47:12:d9:c4:04:71:3c:15:b1:94:4e:52:
                    aa:51:b9:5e:04:ce:b7:2d:27:5d:66:73:df:69:75:
                    f9:1f:a1:43:2a:8a:b1:f3:35:66:92:c6:23:66:27:
                    5d:14:49:ce:a1:62:8f:54:ad:c7:2f:57:d4:76:7c:
                    5d:1e:ce:65:77:77:c3:a3:d4:64:b0:98:0b:00:8a:
                    cd:b5:7e:9a:75:7f:43:e4:ec:0b:3e:be:81:b3:1c:
                    ce:a9:67:a3:ea:e3:45:4c:d7:c5:92:cd:7a:a5:0b:
                    2f:c7:e1:b6:03:05:fe:5f:66:69:ef:44:e7:60:3e:
                    bd:32:33:d7:60:3d:e4:4c:e7:f3:04:f4:62:3d:5c:
                    13:e1:b6:1f:d0:24:75:e2:c9:ce:cd:27:cd:ef:1a:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:9D:B6:A1:01:31:19:9A:B1:D0:54:65:F3:AB:FC:35:58:4F:50
            X509v3 Authority Key Identifier:
                keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2d:0f:a3:af:3f:39:47:b2:d6:c8:4c:ce:3b:9f:e5:a9:58:
         37:5b:d1:3c:04:3e:e0:09:99:ca:a5:70:f0:34:db:46:57:d6:
         3c:13:d5:d7:47:5f:be:6d:ab:3c:c0:57:5e:65:45:83:ad:25:
         3c:58:f0:d2:48:de:1b:e2:3c:b6:6d:2e:13:4c:3d:ce:05:4e:
         b9:c6:cf:2f:43:aa:31:8f:9b:97:8e:e0:47:4c:13:7e:91:1b:
         2e:3a:56:21:7e:a8:c1:87:cb:39:ac:e6:a3:95:82:10:44:31:
         80:45:98:48:c8:ea:4c:c2:ca:d2:27:ed:f0:5b:b5:85:ee:e2:
         a0:fb:57:1d:19:5a:f9:df:64:97:3a:c8:4b:d5:42:86:60:eb:
         bc:92:d5:1b:ae:a7:0f:59:37:6d:01:5b:5a:c1:08:b2:fa:e4:
         8b:eb:06:96:40:61:11:88:d3:af:08:34:71:73:71:f7:36:02:
         6a:04:b4:b5:bc:50:58:25:21:ba:5c:ee:d5:5e:21:2e:67:7b:
         f1:fb:31:1a:55:88:ab:bf:e0:a1:86:b5:7d:ee:c7:50:0e:21:
         f4:ea:09:54:99:ae:f2:28:a8:71:06:8d:b8:15:7b:74:b6:21:
         02:21:dd:48:6d:9e:21:e8:c0:a6:48:df:ba:2e:4b:e1:dd:23:
         fd:6b:f0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:15 2026 by rpki-client