Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          Jc0HPHoCtGqE4o+WmeW/5j/MEVmsuwBUadDGwCJ+2dc=
Subject key identifier:   13:AF:10:7C:1F:5C:1F:B6:17:F9:35:F6:F9:7D:25:3B:09:92:8A:2F
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       019CAA58817D2787DFB37E8170A8B21FD24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 17:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:52 +0000
Files and hashes:         1: ANa1GBLoP5xu32cExEGS1ucyPeI.roa (hash: 03Pv5w9P0hLlvZZZpgrIUfLMLj2sMsn6vZZ11knaFKk=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: 0ENETYz26RGRigEJJGlCdbcYwbapz91TNETLwe2W+as=)
                          3: e-lNAT2KWm6Z8P-XhIwHGDE5-pU.roa (hash: iVr8GEUOn1LFuRAheK6PX05d/ZM6MxTPjHOQdxUzn8Y=)
                          4: hzOfi7xasUduK6-Dsf-xHmLVWNU.roa (hash: 4jhdSegQbPfAmbaR3QHv7zCisX3cfxYoTmno1EUf1HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:81:7d:27:87:df:b3:7e:81:70:a8:b2:1f:d2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Mar  1 17:00:52 2026 GMT
            Not After : Mar  2 17:00:52 2026 GMT
        Subject: CN=13af107c1f5c1fb617f935f6f97d253b09928a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:d1:32:93:86:02:58:c9:00:a4:91:b4:72:
                    b0:68:5d:c1:9f:ad:fc:33:64:df:ff:2d:cf:0d:d2:
                    30:84:6a:a2:ef:06:1d:7c:50:2d:26:7a:8a:ff:60:
                    dd:91:0d:3d:47:22:0a:42:f1:97:6e:28:2c:e8:84:
                    bc:de:5e:3d:53:9a:04:32:75:4a:b9:42:ce:e0:56:
                    19:27:e1:b1:ba:80:d5:72:8a:36:ce:93:ed:1a:de:
                    86:d9:e1:df:03:2f:76:d5:49:b6:16:28:ec:e0:06:
                    96:4e:81:4a:aa:67:6b:b6:69:e5:ba:de:38:cc:56:
                    12:d5:23:39:76:bf:a6:e5:dd:b9:42:95:1c:47:b5:
                    29:65:f1:f7:5d:38:7a:cd:35:11:26:41:63:be:9c:
                    a5:4a:15:31:6f:60:ac:84:18:e4:f2:bb:3c:55:20:
                    32:c9:e4:5d:60:64:f3:4c:a8:39:f4:1d:d9:ff:88:
                    cd:6f:66:9a:f7:a0:a1:07:80:81:f3:c2:bb:02:29:
                    a6:f2:35:8e:c0:a6:2d:f4:df:2b:b5:d5:33:c7:a5:
                    77:67:54:df:be:fe:b3:61:5d:ba:1b:2b:ee:07:42:
                    5a:0b:ad:f8:48:42:bb:ee:17:0a:ca:8f:52:b9:a9:
                    45:5e:13:b1:47:43:64:33:4e:bb:69:c8:2f:82:48:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:10:7C:1F:5C:1F:B6:17:F9:35:F6:F9:7D:25:3B:09:92:8A:2F
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:7b:1f:90:49:c2:ee:ea:57:b0:db:2d:14:d4:b5:c9:02:
         91:f1:1c:24:2e:7f:8d:d5:21:5c:7f:3c:95:bb:f9:90:8c:65:
         dc:b3:2b:89:68:cc:d6:1c:41:e7:96:08:6a:d4:91:6b:7f:6a:
         74:c2:a2:87:fc:94:33:27:5e:f4:80:e7:fa:2e:8c:d3:14:71:
         21:35:ac:0d:bb:d4:09:28:14:43:d8:b1:d5:e6:c9:1e:61:ba:
         40:f3:92:97:fd:5d:9d:45:be:c8:aa:aa:5c:b1:51:fd:97:27:
         c3:27:73:25:7d:90:dd:53:fc:67:7d:ba:43:74:6d:9a:be:59:
         49:5c:b1:42:98:6c:bb:31:b4:06:dc:d7:44:af:44:29:ea:83:
         ee:d2:fb:a2:6d:a8:88:78:b7:d6:52:3f:74:05:1f:85:99:7d:
         0f:54:1d:68:b9:83:0d:eb:d4:67:3c:14:55:40:7c:54:54:0c:
         c5:47:55:aa:32:a2:7e:ad:e8:4f:f3:fd:83:f9:21:cc:ae:ec:
         26:f1:c4:2f:6c:db:c9:14:6e:ea:6e:9a:97:f9:ac:ce:86:ad:
         d3:b0:4c:1d:53:42:fa:78:21:69:4b:0d:ea:60:97:e9:b7:96:
         11:44:4e:b6:15:52:b0:34:65:c1:9e:40:1c:08:87:75:69:d4:
         5d:76:79:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:31 2026 by rpki-client