Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File:                     rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier:          MIsJIdi9/rSoHlbEUA7WceMLHFN5j6RBbDxQMKJFm88=
Subject key identifier:   7E:FE:C2:16:BE:01:AD:41:35:F3:B9:58:95:17:64:72:1C:D6:4B:17
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer:       /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial:       019CE4B5A54FEFA37C119759AF13658B3C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number:          1861
Signing time:             Fri 13 Mar 2026 01:00:35 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:35 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:35 +0000
Files and hashes:         1: TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa (hash: YzLzlBSzxjBcEeB8/fSR9TVjgk9aSxEfekBZqcoz880=)
                          2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: 5v+U6xnhTF+27RYWJXs36vqS9QZXP8DE7yuE+zKvYFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:a5:4f:ef:a3:7c:11:97:59:af:13:65:8b:3c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
        Validity
            Not Before: Mar 13 01:00:35 2026 GMT
            Not After : Mar 14 01:00:35 2026 GMT
        Subject: CN=7efec216be01ad4135f3b958951764721cd64b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:bf:e8:72:d6:00:37:e4:27:0d:12:b0:f4:
                    4b:f2:66:1d:e8:6f:b1:10:3a:de:64:93:49:a0:c5:
                    d9:22:82:8a:79:80:e6:01:c7:31:be:7e:1c:8b:4b:
                    67:f6:4c:c4:8b:5f:11:14:99:0d:56:ee:bf:8b:2d:
                    62:8c:72:84:3b:58:60:1c:ac:85:f7:90:b5:ae:e3:
                    34:ea:f8:4c:84:36:13:13:17:ae:4e:79:5d:a3:34:
                    fd:74:09:ac:37:6e:1f:0d:e8:7b:ce:f9:cc:c9:3e:
                    52:80:1c:be:d6:da:e2:78:99:20:2e:54:62:7a:d6:
                    7e:d3:3b:30:35:95:5f:47:df:33:7c:5a:57:3a:cf:
                    87:19:d9:29:c5:72:64:1a:b0:14:d0:e7:2a:57:54:
                    97:89:4c:76:b4:74:28:e7:41:5a:f3:e0:33:2e:26:
                    fb:53:eb:2a:6f:3f:02:a9:27:72:9e:ac:81:8d:04:
                    08:04:22:b7:5a:46:3b:2b:2b:2f:60:63:21:67:65:
                    40:c1:b8:7e:36:b8:de:8d:3b:cd:94:57:51:f5:17:
                    4f:a6:c7:50:18:6a:e6:cb:bf:a4:c3:11:81:c8:13:
                    a7:dc:41:17:3a:1a:fe:3c:c3:9c:5d:f6:e2:ad:0a:
                    0b:bc:9e:fc:ad:dd:f6:fd:65:e9:e3:5b:96:c5:ad:
                    dd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FE:C2:16:BE:01:AD:41:35:F3:B9:58:95:17:64:72:1C:D6:4B:17
            X509v3 Authority Key Identifier:
                keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:de:b2:ab:f6:8e:02:72:55:d0:b1:c5:9c:e4:1e:2f:87:
         a3:aa:92:9e:d5:c3:4d:f8:3d:e3:1e:b2:9f:0f:79:f6:36:8d:
         f4:0a:c8:eb:e5:bd:94:e3:56:5e:69:75:63:8f:8b:c0:0a:0c:
         a2:7f:08:ed:1c:70:a0:cd:b7:d9:79:cd:69:53:a5:8f:23:11:
         a2:bd:08:df:8c:27:d1:cc:1c:d5:2d:3a:d9:bd:dd:9b:2e:40:
         ae:cc:43:b7:06:a7:bb:34:68:42:ae:8d:c7:6e:54:74:15:5b:
         68:e3:b5:4b:0f:67:f8:8e:67:c7:99:14:59:07:fc:aa:51:da:
         0d:ca:f6:11:3a:8b:0d:d4:2d:bb:92:3c:7f:6e:20:03:76:97:
         72:ff:ec:e6:26:81:5a:64:f3:54:6b:a3:2b:e4:36:b9:21:3b:
         b1:1b:93:58:ae:9e:9a:a8:d0:4d:24:09:58:85:9b:d4:39:f6:
         3c:ce:ca:74:50:a6:7c:90:3b:2a:d9:37:67:db:4a:38:ca:ab:
         7f:9a:85:16:39:4b:b9:ea:55:57:08:9b:fd:3b:8c:42:f3:ed:
         12:24:9d:bb:4c:9d:a2:d0:62:a8:0d:34:3c:e9:e3:3b:9e:f8:
         c6:3c:7d:cf:e2:d4:f5:8c:7f:30:0a:7e:38:4d:91:fd:92:a8:
         2a:52:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:25 2026 by rpki-client