Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File:                     1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier:          zWfOC3SntmEZAlyPsJbnJjjGtrhNkoX713zVJTooJCo=
Subject key identifier:   D8:9A:B6:AE:72:88:DE:2E:77:B0:0B:40:D2:33:BB:12:89:57:0A:71
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer:       /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial:       019CE59181FD3990F8DBFF7E501E1134AB42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number:          1868
Signing time:             Fri 13 Mar 2026 05:00:44 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:44 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:44 +0000
Files and hashes:         1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: Bk7msCguw9C9gA4EPZe9RRO6N3W+B7VOTeLD+9+gXno=)
                          2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
                          3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
                          4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:81:fd:39:90:f8:db:ff:7e:50:1e:11:34:ab:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
        Validity
            Not Before: Mar 13 05:00:44 2026 GMT
            Not After : Mar 14 05:00:44 2026 GMT
        Subject: CN=d89ab6ae7288de2e77b00b40d233bb1289570a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:0a:8e:79:fc:e7:95:b4:7f:f8:40:ae:d2:
                    e9:51:ad:53:20:9c:0a:c6:e5:68:03:54:68:a2:10:
                    38:3f:15:05:94:0c:7c:ae:02:57:81:fb:35:f7:1f:
                    9a:d3:cb:e4:ed:16:0e:81:b4:5a:03:11:30:7f:61:
                    79:a6:03:9e:c0:49:ee:41:b1:f3:c4:8a:9d:09:bf:
                    b2:8b:13:1f:d8:bd:dc:0c:f6:74:d5:c3:4e:28:af:
                    3c:32:1d:6e:28:7b:ca:9b:70:00:bf:fc:07:4b:5e:
                    a7:ed:77:93:50:59:cd:bb:b8:d7:33:8e:e1:f0:f0:
                    f4:37:13:7d:e0:a1:43:4b:3d:9c:91:3f:18:af:4b:
                    b2:78:55:56:e1:be:ab:57:b0:61:04:25:ed:62:8a:
                    9e:dd:c7:df:0c:91:f5:3d:1b:66:1c:5a:f0:cd:38:
                    47:74:47:32:59:8d:93:d3:b2:0a:0f:0e:d4:83:05:
                    89:a0:b3:bc:ba:79:7d:aa:6c:fd:a8:93:84:7b:b0:
                    c5:04:34:31:f3:95:dd:b0:a9:e8:ad:ea:1f:ad:3d:
                    fa:ab:26:d0:1f:71:99:a2:12:f0:85:a2:a6:c3:b7:
                    35:76:a5:79:82:1d:7f:89:3f:5d:ed:5a:6f:a2:d4:
                    74:97:57:fc:15:14:0e:9b:f1:80:58:88:a7:64:3f:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9A:B6:AE:72:88:DE:2E:77:B0:0B:40:D2:33:BB:12:89:57:0A:71
            X509v3 Authority Key Identifier:
                keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:22:e6:a7:ec:30:f2:92:df:66:df:c7:e6:89:ac:19:3f:d0:
         e6:57:29:ec:10:95:7c:7f:c0:ac:37:3a:14:43:56:61:cc:e8:
         b7:92:f6:ca:b7:8c:84:c7:4e:07:8a:8d:2a:7a:52:ea:66:a9:
         47:68:44:41:00:3e:97:66:ab:db:23:24:04:db:ae:40:3c:83:
         2c:19:35:f4:1c:49:1c:de:32:c4:55:27:82:8e:cb:9d:72:6d:
         6d:a0:6e:be:9d:b3:c6:f5:a6:75:cf:52:01:7a:49:84:ae:1b:
         2a:82:db:94:3c:c0:f7:eb:37:46:b4:7e:62:25:b5:f8:d5:d2:
         f3:8a:bb:c3:6a:99:4d:b8:26:2a:a5:5b:5b:e8:10:64:8a:94:
         bf:4f:e0:ea:e3:c8:8a:43:39:8c:cc:0a:c3:df:28:0f:ab:5c:
         f3:3d:ca:a1:71:3d:07:12:d9:89:05:e9:74:29:6a:38:73:66:
         34:6a:6a:49:c5:3d:f1:86:b3:4d:ed:18:bb:f5:56:78:f2:60:
         b7:54:76:cd:36:c1:15:e3:13:0b:1d:57:32:eb:79:08:4c:76:
         29:91:87:21:fd:79:e1:f6:57:00:f3:f9:1a:9b:b2:56:e5:9f:
         cc:d7:ea:ff:1e:9d:6b:43:9e:e1:7d:fb:b2:3f:e1:63:93:c1:
         5e:7f:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:42 2026 by rpki-client