Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          GLlF/P0iJfMYLMdPvDcdBbPLq7J0tG9Rnffysx9haqk=
Subject key identifier:   E3:C6:D0:38:DD:62:BF:A9:7C:BB:CB:E1:E7:7E:B3:3D:47:1F:6C:A7
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       019CABD9D907C7E54049E3FF58478F5180CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:01:46 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:46 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:46 +0000
Files and hashes:         1: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: 5R48GFY62wdthCFwwtvTWAeHRTGHe+p98W5kQfaIHew=)
                          2: daxj-MhkiZarWyN8EVbWUahA0Nw.roa (hash: DXI6WwfxF6esJ4bJvCIfH7p2ed5ZUha18BtslnvRoss=)
                          3: n7q5NwtaL8-zEQXH647Qf4RaQks.roa (hash: n40KhH8cPfP863DY99KhVmZjjBSxGcmy9+bxffCu9sY=)
                          4: v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa (hash: +/eUsv8fNjsa5iAvEDJgYJR3r1TegvUrhwXeQYQizWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:d9:07:c7:e5:40:49:e3:ff:58:47:8f:51:80:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: Mar  2 00:01:46 2026 GMT
            Not After : Mar  3 00:01:46 2026 GMT
        Subject: CN=e3c6d038dd62bfa97cbbcbe1e77eb33d471f6ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:4f:53:75:d7:c5:11:63:a8:06:1e:53:07:
                    9e:aa:32:6a:01:7b:fc:4c:b2:01:d7:7e:5e:42:04:
                    14:ea:10:d9:9f:30:fe:72:a2:8d:0e:34:48:ba:a0:
                    7d:ed:a3:a6:cf:79:64:9a:27:e9:13:38:e6:36:ff:
                    da:f4:8a:4e:13:a4:9b:cf:1a:14:53:55:8f:09:1a:
                    95:55:95:74:6f:fb:19:32:6d:e6:57:df:0e:77:e8:
                    a4:72:59:9d:e3:38:00:f9:c7:26:a6:5b:7f:c8:2c:
                    bc:05:7c:56:df:8d:6a:16:67:e8:6a:e1:8e:eb:af:
                    59:af:cd:e4:28:38:d4:39:aa:54:5c:d0:de:49:a4:
                    a0:3a:e1:63:21:ff:6e:2f:aa:67:c9:ff:35:cd:a7:
                    f5:53:6b:31:54:20:31:ec:e4:e3:0e:42:2d:01:e8:
                    af:c5:3e:d8:dd:ec:64:ac:49:e5:c0:cc:84:4b:7d:
                    aa:19:30:99:b5:33:d8:b8:64:96:e5:cc:16:96:a2:
                    bd:0c:a7:56:a2:bd:54:87:96:41:75:4b:50:a8:2a:
                    3b:5e:57:09:17:a4:b3:19:6d:c9:16:4e:8d:90:9a:
                    45:2e:8f:8a:bc:b5:bc:bd:ef:a1:99:1d:f5:df:56:
                    68:6c:11:c0:6c:77:e8:79:3a:7e:54:f8:40:4b:97:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:D0:38:DD:62:BF:A9:7C:BB:CB:E1:E7:7E:B3:3D:47:1F:6C:A7
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:64:3e:6a:62:f5:1d:7e:fe:ec:23:5b:15:0e:89:da:98:70:
         69:48:38:62:23:f7:82:19:85:9c:8a:a1:de:e7:6d:60:bd:b3:
         fb:57:c2:88:cc:96:5f:55:64:b7:12:5e:2d:6c:07:d8:95:62:
         30:68:22:80:ce:34:fd:36:7e:8b:eb:a9:de:ad:f2:8d:2a:38:
         77:78:3c:8c:6a:d6:6e:5a:83:e9:f5:8a:23:e8:a2:10:8f:74:
         46:14:19:e8:d8:4c:4a:da:d1:93:02:10:59:2b:c5:f2:bb:03:
         9b:d5:0e:34:a2:95:6d:dd:a5:9f:77:df:e5:92:f8:b8:88:17:
         f9:74:bb:b0:42:6f:42:b4:cc:82:64:26:2b:42:c2:b9:c4:0c:
         e2:cd:5c:0d:03:8d:07:ef:ab:eb:07:2a:e1:08:6c:f1:9c:2e:
         07:6b:fe:d0:b4:c4:9c:d8:fe:58:8b:6d:bf:50:ff:c9:fd:0f:
         bd:89:e7:13:3f:49:97:06:87:ea:8b:cb:af:2a:67:b9:33:42:
         9b:59:74:67:fb:cb:70:c0:e6:1e:a2:10:d3:e8:68:c8:97:84:
         d4:3f:3b:12:b3:12:91:ee:d8:a3:54:44:33:da:ed:67:59:fc:
         fe:b6:17:59:e6:6c:0d:36:bf:e7:64:d5:e0:b4:d2:8a:90:54:
         2e:d0:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:10 2026 by rpki-client