Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          ZCkZgCATnbR0X0nbxfR1hqwRvQwGrH6/wanDtwHBq/o=
Subject key identifier:   D0:56:64:EA:4A:53:5D:D8:52:FE:73:49:AB:56:EE:7C:69:F2:31:98
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       019CAD5A3E811AD525A368FAADF823C9A30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 07:01:38 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:38 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:38 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: xQf0kDigrDyTA8FDoUBaiDa8RgKUEDizxe0nckJtugw=)
                          2: 3bAp3q_3awus_cxtdm3xlCp_Kro.roa (hash: MeFCYRnaLN9vGZ2yrhZuS6ZkusuOmCKGC/cofWy68Cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:3e:81:1a:d5:25:a3:68:fa:ad:f8:23:c9:a3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: Mar  2 07:01:38 2026 GMT
            Not After : Mar  3 07:01:38 2026 GMT
        Subject: CN=d05664ea4a535dd852fe7349ab56ee7c69f23198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:87:bd:75:a0:39:1e:30:73:4c:d5:c9:38:
                    20:67:da:b1:38:2b:be:69:39:29:24:02:27:55:4c:
                    f9:94:e2:5e:3f:14:fc:ac:21:5b:e1:db:50:84:32:
                    f0:6c:22:c5:f6:dc:7e:91:12:fc:d3:3b:42:a0:34:
                    ab:af:f3:b4:6c:b7:4d:30:9c:c0:38:3d:02:63:e0:
                    95:fd:c9:79:ff:c9:72:84:a8:2b:a0:15:46:4e:ed:
                    e1:43:5d:f3:1c:c6:b4:ea:aa:b9:8b:a4:67:fc:a8:
                    4a:de:38:f7:c8:8b:a6:fc:c6:dc:38:43:b7:94:20:
                    fa:72:14:0b:8a:21:8f:d1:45:11:7a:28:9a:3f:6e:
                    34:4c:70:16:2c:98:72:f9:3f:f7:b0:6b:36:04:ac:
                    2a:c2:5d:03:ac:91:56:e4:ac:1b:56:20:d3:b7:4a:
                    69:e6:6f:d4:b2:9b:82:d6:2d:81:4b:90:ab:e4:de:
                    b5:73:5a:56:2c:b2:5b:31:45:27:f4:16:04:42:a3:
                    0d:81:f6:3e:d8:96:ce:bd:d8:e3:b9:27:1e:a1:74:
                    68:72:36:c6:9b:c2:7b:ce:d2:91:64:c8:d3:ae:46:
                    fc:12:03:ae:de:e5:6d:47:38:fe:88:c9:63:e8:f7:
                    c5:86:fa:33:f5:83:ea:b8:14:a3:ee:a2:ae:a3:a6:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:56:64:EA:4A:53:5D:D8:52:FE:73:49:AB:56:EE:7C:69:F2:31:98
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:59:68:ad:a2:75:c1:48:35:36:98:63:17:5d:78:50:c1:1a:
         fd:54:08:84:a4:18:61:52:e9:56:31:8a:9e:ad:a3:57:8a:86:
         a6:ae:62:54:4e:f1:f2:07:65:21:06:e5:99:9a:79:97:b9:66:
         d7:39:bd:a7:b0:24:d8:fb:b0:08:d2:71:2d:1d:34:1d:16:ac:
         30:20:dc:c9:9e:80:ba:29:01:c2:fd:ee:28:d4:a5:56:a8:e6:
         69:69:42:08:61:71:b9:2c:5a:65:18:03:86:13:76:7d:a5:c4:
         3a:e5:10:48:c1:73:95:f2:14:d6:0b:dd:02:5f:ef:a6:6c:fb:
         e6:3d:e0:6b:29:10:57:ae:41:3e:df:c3:fc:8b:7c:bf:25:5e:
         3a:3f:c8:20:12:3e:f2:e9:60:4e:be:31:51:63:ce:d3:84:97:
         c3:cf:bf:a0:a5:3a:a3:37:d9:b4:dc:0f:fa:4f:99:d3:bc:20:
         d3:f9:8a:a1:51:ed:b7:87:e6:9a:66:b0:b8:da:4c:7d:5d:e3:
         c9:e8:12:64:e2:1c:4d:a9:04:1f:c9:b4:01:9d:79:0c:31:c9:
         2d:a8:50:20:ae:d6:3b:c2:d7:03:c4:7a:6f:6e:ee:47:99:d6:
         ab:0c:f4:32:98:77:ac:72:c0:2f:a8:93:af:a8:9e:e7:ad:03:
         ee:2a:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:25 2026 by rpki-client