Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          V6GXngupiiJtjy40ub2qjIE0hdLbQYq6g/qcmt3IUyw=
Subject key identifier:   8E:25:B6:2A:5D:26:58:70:4C:91:F5:22:7D:B6:F2:7F:96:2F:37:4E
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019CB46E5B87483B606B1FA65577AD328EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          1858
Signing time:             Tue 03 Mar 2026 16:00:57 +0000
Manifest this update:     Tue 03 Mar 2026 16:00:57 +0000
Manifest next update:     Wed 04 Mar 2026 16:00:57 +0000
Files and hashes:         1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
                          2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: X0MrXFRS08Hjd0rjQNO/rRvI1MiwtEpm4U0ui3Udgbs=)
                          4: YAGdK9NgvIyiz7MwVPSphsKwcHE.roa (hash: YoeO10+z7W0nmsVjlcs0IP7RbonSryjBMwi0I/lLnms=)
                          5: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 15:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b4:6e:5b:87:48:3b:60:6b:1f:a6:55:77:ad:32:8e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Mar  3 16:00:57 2026 GMT
            Not After : Mar  4 16:00:57 2026 GMT
        Subject: CN=8e25b62a5d2658704c91f5227db6f27f962f374e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:d0:8f:2a:22:51:28:82:2f:0a:42:20:a4:
                    66:98:eb:96:ab:7d:a8:8d:bb:91:a1:0a:13:81:8d:
                    2c:46:98:6d:4f:6b:fd:02:d4:5b:e4:79:89:a8:d6:
                    ca:d8:a8:79:8a:e0:dd:e0:cf:85:e2:dd:c8:42:5c:
                    53:9c:b9:97:41:7e:ed:48:06:fd:d7:a7:4d:eb:14:
                    03:52:f4:e2:b1:f9:97:b7:ef:86:93:2b:a6:2a:ab:
                    d5:f3:68:90:e0:8d:68:0f:f7:c1:34:4e:5f:6c:f3:
                    95:4f:7f:0d:a6:2a:50:97:04:f4:ce:c4:b6:df:bf:
                    d4:7d:58:59:93:dd:73:1a:09:2b:a2:1a:8e:86:48:
                    0c:6c:9d:69:2a:f1:df:f5:bd:4d:7f:25:9f:d3:e1:
                    8a:ce:00:5f:47:56:f9:f6:ee:41:6a:aa:dc:8f:89:
                    31:8d:f4:3a:fc:8a:f9:72:c6:31:e7:94:20:45:da:
                    ca:80:48:a6:38:a0:a7:d4:00:6d:79:28:e4:38:fd:
                    b7:57:02:2e:8b:d0:3f:64:09:db:8c:7a:6f:12:17:
                    49:7f:df:12:2d:ef:11:8d:3f:0f:69:5a:68:9e:ae:
                    e1:48:36:60:bb:b6:f6:6b:12:ca:04:35:a1:ac:fe:
                    b5:db:24:cf:2f:c3:89:50:bc:c6:ae:14:0c:87:55:
                    5f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:25:B6:2A:5D:26:58:70:4C:91:F5:22:7D:B6:F2:7F:96:2F:37:4E
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:13:d6:59:65:98:3a:ed:4c:64:25:09:96:c0:07:22:1a:
         4b:fb:86:3c:a8:6c:f6:79:30:77:c6:26:35:3c:a2:89:3e:85:
         22:33:00:17:97:d4:07:da:e3:02:3f:6e:28:4e:2c:86:3a:fe:
         0d:2f:b3:56:a6:61:b0:b0:58:a2:66:51:f6:4c:91:5f:0e:9f:
         d3:9c:87:a2:fa:07:22:00:ce:ce:8b:3e:cc:ea:89:87:82:bd:
         0d:41:0b:21:ea:11:ea:bc:33:50:e7:fc:5d:b1:b5:ee:6e:18:
         b3:b8:da:80:fb:e8:37:2d:17:ff:b1:1a:39:19:36:7f:ec:49:
         34:3b:4f:80:e9:9c:4e:5f:3c:b3:15:6e:5d:0f:83:f4:27:58:
         5b:0f:2a:f2:9f:ca:87:e4:02:c1:e7:c1:94:31:25:26:a7:95:
         b9:c1:9a:a7:8d:dd:ae:3a:54:56:3e:5a:54:46:5a:7e:40:5e:
         46:3c:20:dc:c5:98:1f:61:18:78:07:98:e8:6a:80:1f:d5:6a:
         7a:65:50:8b:14:28:a8:fe:d6:64:de:14:08:ef:11:c2:38:7f:
         3e:a5:ff:fd:44:37:33:6c:23:cc:21:4f:a6:19:0a:67:ab:d2:
         6e:3e:3a:f7:83:c3:70:c4:1c:d0:3a:4a:a3:25:e4:f0:3e:fe:
         62:4b:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:38:39 2026 by rpki-client