Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          dC7NbO/30dt1hGOqJDJm9cwgkaWH1v/BOd6gkKkn+mM=
Subject key identifier:   D6:78:27:6C:0B:0A:60:60:7B:56:6E:B2:3F:22:84:78:DE:34:16:0C
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       019CD5794CADAD81A1F35706A2B6F66B85CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          1862
Signing time:             Tue 10 Mar 2026 02:00:22 +0000
Manifest this update:     Tue 10 Mar 2026 02:00:22 +0000
Manifest next update:     Wed 11 Mar 2026 02:00:22 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: dzsjjDUP7T8+XnQW9U5ZiUPQ73/TIuqqH6U+T+uFUDM=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d5:79:4c:ad:ad:81:a1:f3:57:06:a2:b6:f6:6b:85:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Mar 10 02:00:22 2026 GMT
            Not After : Mar 11 02:00:22 2026 GMT
        Subject: CN=d678276c0b0a60607b566eb23f228478de34160c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:08:fd:7f:77:51:31:20:77:2c:22:f6:18:
                    54:02:8c:3d:bc:b6:1b:8e:07:c3:11:c1:3f:66:80:
                    76:c0:e5:77:0b:ee:68:ec:40:78:5f:22:48:9d:79:
                    c5:98:27:f0:0c:f6:d6:63:53:b2:bc:db:db:d1:e1:
                    72:f3:37:8b:2b:40:c5:8f:93:9a:5b:55:e2:72:f5:
                    ea:87:c3:50:32:45:b9:ab:c2:0e:38:15:41:46:4a:
                    1e:15:9c:d4:a3:61:2f:31:1a:c6:a9:6f:2f:ca:04:
                    eb:de:4f:f6:7d:3c:13:c7:c3:f1:c7:15:d7:70:6b:
                    36:6b:d1:ed:95:3e:b3:74:cd:a7:10:c7:63:a6:cb:
                    61:80:e6:d8:d0:7d:7b:c0:a0:b2:ac:85:5a:b2:8d:
                    87:58:b3:39:a3:f8:d2:01:65:06:d7:53:1a:20:c5:
                    a7:76:a7:3a:86:78:7d:7d:ed:aa:6e:fd:d4:ea:a1:
                    d0:38:e0:4e:9b:5c:c8:21:49:37:a5:c6:1b:04:68:
                    bb:c4:87:a9:b5:a2:b7:90:20:2d:b5:cc:aa:d1:04:
                    7c:e6:37:87:86:e9:b8:76:f7:01:93:0e:25:4a:ae:
                    c3:66:22:19:67:05:4c:bd:c7:08:cf:79:c9:47:6a:
                    d0:57:6e:fd:78:21:6c:5a:a7:16:05:49:c7:cc:58:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:78:27:6C:0B:0A:60:60:7B:56:6E:B2:3F:22:84:78:DE:34:16:0C
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:55:ec:9e:14:69:d0:1b:4b:70:f9:6a:ca:e3:eb:78:cd:d2:
         83:b6:d4:11:66:d7:26:33:29:13:d6:ab:77:4e:1b:80:98:92:
         58:28:6b:22:5a:68:cb:67:9a:17:5a:3d:51:26:ed:7c:0d:f3:
         ed:2e:72:41:3d:f1:4a:33:a5:f6:d4:1e:0c:2c:98:89:6e:12:
         79:b2:45:df:ec:14:64:b3:02:82:72:41:c1:de:78:db:fd:d9:
         ac:32:d9:8e:93:da:b3:89:d1:bb:98:36:18:89:05:39:74:da:
         46:b2:0d:b4:01:f9:51:7b:d2:0a:7b:86:58:20:49:75:34:cd:
         ce:26:7c:3d:3a:c0:ea:f7:e9:b5:68:b0:45:4e:22:de:2e:44:
         68:d6:79:be:e5:d3:52:ae:94:f0:85:36:7a:f1:31:ce:82:1a:
         04:3c:d2:88:c8:5d:a7:61:11:02:b3:85:f2:b2:57:cb:51:8d:
         8b:b0:d5:aa:cf:e0:6e:cf:66:75:f2:f1:e0:87:4b:1c:1e:0f:
         8d:8a:43:e5:a0:ca:28:f7:d7:d8:19:1d:65:ec:fe:13:90:a3:
         6b:8e:fb:d2:20:05:f9:8d:93:4f:6d:59:20:2b:b1:78:71:95:
         2a:1b:cc:2e:8c:27:23:27:ab:7b:e6:4c:88:99:22:af:ec:40:
         ac:4d:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 07:06:55 2026 by rpki-client