Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File:                     1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier:          jKXXhl2qOq92/K3rVlVxIaF6AX45UvkvXanHMi8KGpI=
Subject key identifier:   C7:50:6A:7D:DD:0F:02:EF:52:C9:EC:89:6F:00:A1:B0:0C:77:26:94
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer:       /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial:       019CE4B5E062043A6839D94FBD3A153C19A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number:          1860
Signing time:             Fri 13 Mar 2026 01:00:50 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:50 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:50 +0000
Files and hashes:         1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: uxovfc5URa/FPL3oCPU5UGaeiPQy8vbhR1VovZ9gqZw=)
                          2: MDzL3FdO7fvyyBkKk6vdxUTiCwo.roa (hash: PnGHgebP3UovxlfbIsUeajZPOhGSEQYNlKiEGzPopd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:e0:62:04:3a:68:39:d9:4f:bd:3a:15:3c:19:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02f648de95b88479364346ed01e78769577922
        Validity
            Not Before: Mar 13 01:00:50 2026 GMT
            Not After : Mar 14 01:00:50 2026 GMT
        Subject: CN=c7506a7ddd0f02ef52c9ec896f00a1b00c772694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:91:d4:03:47:c7:5a:97:b0:07:a6:67:ad:
                    07:0e:55:41:e9:d1:50:4d:a8:46:d8:c1:0d:18:fa:
                    8d:6f:d0:9c:80:5b:8b:91:3d:89:67:a6:56:94:d6:
                    04:21:25:60:c9:17:62:61:25:5c:80:40:f7:0c:a9:
                    6f:f3:90:6f:1e:aa:bc:8e:d1:65:74:14:7b:6a:09:
                    2e:ea:21:a2:de:df:33:f6:05:58:04:26:cd:e8:b1:
                    49:0b:f7:37:b7:58:c0:2e:a9:12:58:ac:d0:b2:4b:
                    84:80:88:06:34:c0:b0:4a:6d:63:a9:92:d9:31:bd:
                    d6:c7:f6:dd:45:70:43:c5:bd:d7:d8:b2:05:2b:c4:
                    d3:c6:ed:af:01:e1:f3:c5:9c:1a:4e:54:8c:44:4a:
                    e7:b9:bf:0f:69:6c:61:04:c9:56:13:5e:c6:87:ab:
                    6a:b0:9d:70:93:f7:c5:48:ec:be:4c:7e:7c:99:bf:
                    fc:6b:cd:65:0b:88:e6:1d:19:ff:3a:e6:3f:26:ae:
                    da:9e:64:48:23:e3:ea:ce:b6:04:0e:bc:dc:fb:23:
                    7e:a5:58:6b:e5:50:b7:2b:fd:d3:10:57:1a:3e:46:
                    de:50:2e:59:d8:c6:46:4c:31:b4:48:68:8e:63:08:
                    16:00:70:c2:92:9b:48:b1:15:3e:aa:58:14:0b:73:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:50:6A:7D:DD:0F:02:EF:52:C9:EC:89:6F:00:A1:B0:0C:77:26:94
            X509v3 Authority Key Identifier:
                keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:74:19:e1:f7:77:fc:f9:f5:e5:bc:2f:20:fd:ff:7f:ec:e0:
         e0:05:40:ac:cf:c6:98:16:c5:0f:84:2a:bf:9e:34:0b:be:4b:
         0a:ff:06:0d:2c:43:55:e7:53:6f:32:87:71:2a:65:f5:ac:d0:
         8c:87:9d:26:a1:f9:db:8d:9b:3a:fb:6c:e3:46:db:9c:c4:0e:
         7c:55:1a:2f:6d:c6:f7:8f:e2:2c:85:3c:24:82:09:23:36:de:
         96:a4:22:9c:c6:b3:0a:e5:46:25:28:3c:39:67:4a:59:3c:98:
         a7:98:e9:94:3e:e1:76:bd:33:30:5a:30:cd:9d:8a:b3:78:26:
         1d:0b:ee:58:6c:c2:d6:36:80:fa:e8:ce:27:7c:f5:35:65:52:
         e8:9c:a1:17:b1:04:a3:aa:1d:5f:fd:8b:da:fd:03:f2:69:bc:
         f4:96:90:5b:8c:af:6d:2e:ca:00:72:72:fd:37:eb:e8:e5:08:
         3e:9f:db:ae:5f:ac:b8:30:84:5b:94:e4:10:24:bb:0b:8b:f0:
         a6:5b:b7:12:29:aa:38:18:65:9b:c1:b6:3b:65:8c:ea:8b:d3:
         71:5b:8d:f3:fa:6f:96:38:ff:a2:a0:71:4c:69:23:43:81:7e:
         b3:c8:65:4d:f9:ee:b7:a7:e5:ca:93:62:d1:95:7c:df:c2:1f:
         44:aa:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:25 2026 by rpki-client