Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File:                     SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier:          LCfag00hGBG5Vf52GYfb+qerKtqdMRb+O7h2UnmGsgU=
Subject key identifier:   90:F7:C5:26:9D:64:4A:87:62:8A:49:A8:39:FD:F3:8A:E0:1D:A6:5B
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer:       /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial:       019CB95E5FB7F369770C817AAE5A9E312F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number:          1809
Signing time:             Wed 04 Mar 2026 15:01:35 +0000
Manifest this update:     Wed 04 Mar 2026 15:01:35 +0000
Manifest next update:     Thu 05 Mar 2026 15:01:35 +0000
Files and hashes:         1: 1-usL6AhsVQgwEOwqtzcx1h6pdYk.roa (hash: m452RcDS2XKhnRlqiqlaVh44Ww74b5nqeYQy1A7OC7I=)
                          2: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: holC6O3SHh01ZmH5rv/UoOpg5JMEG27nhzhj5D1dbHE=)
                          3: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
                          4: boGX-Lm30GkI9QUngxbSV2vTHmE.roa (hash: 1TGckGRRsW7vYkWReEMx8JTWtzITaj+EKpmTBDFaV7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b9:5e:5f:b7:f3:69:77:0c:81:7a:ae:5a:9e:31:2f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
        Validity
            Not Before: Mar  4 15:01:35 2026 GMT
            Not After : Mar  5 15:01:35 2026 GMT
        Subject: CN=90f7c5269d644a87628a49a839fdf38ae01da65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:86:d5:24:5b:7b:37:14:f7:f8:c1:8a:a8:1b:
                    72:54:14:bf:84:61:b9:63:98:16:04:62:a1:2e:ff:
                    fe:83:8b:c1:63:3d:1b:52:39:7a:bf:8b:e1:fc:9a:
                    97:e6:be:34:8a:99:43:22:c6:39:b2:b9:a9:1e:96:
                    0b:1a:eb:d8:94:68:f9:69:f6:cc:41:fc:ce:29:9b:
                    4a:26:7e:d3:84:a1:e4:25:e3:1a:b1:50:d6:74:0c:
                    50:00:ce:01:0f:8b:b9:e5:68:10:20:e2:f6:8a:27:
                    02:77:37:49:19:f7:de:6d:c3:36:ff:11:6a:15:b9:
                    df:50:6d:b8:5f:ba:d6:31:bf:61:c9:41:7b:0e:14:
                    4b:09:8b:42:52:cc:fa:6c:98:dc:11:76:c4:f4:20:
                    f6:b2:ce:3d:07:04:c2:34:3e:69:4d:f8:3e:36:90:
                    17:bf:36:58:4c:b2:d2:97:bd:fc:8b:b1:24:08:09:
                    ce:2e:fc:59:74:75:46:25:f0:bf:aa:f7:de:55:05:
                    43:d4:27:78:75:a7:ba:ed:90:ba:b4:e2:dc:2a:e8:
                    4f:cc:25:33:4e:9a:ed:a4:64:3b:b7:6b:32:8f:45:
                    cc:a6:f7:83:fb:6a:5c:3f:fc:a7:02:38:85:03:d9:
                    45:73:08:e7:23:97:ea:8e:24:80:e6:bc:fc:20:34:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F7:C5:26:9D:64:4A:87:62:8A:49:A8:39:FD:F3:8A:E0:1D:A6:5B
            X509v3 Authority Key Identifier:
                keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:14:78:75:a5:46:e5:af:08:32:52:1d:46:93:30:7f:f1:
         73:9e:9d:f5:6a:5e:1d:a3:62:27:01:bd:bb:d5:68:5c:99:35:
         69:30:f5:c6:7e:c1:7f:e3:6b:d3:eb:5d:3c:3e:e1:72:e3:ab:
         cc:4b:75:a9:ae:0d:3b:52:ca:46:f1:8e:bd:4c:2b:aa:2a:2b:
         c2:5d:bf:9d:4d:64:dc:c5:35:9f:9f:d6:1f:da:36:03:a5:f9:
         3f:e4:83:9a:49:dd:83:17:38:12:41:d4:78:fa:89:d1:91:0c:
         04:11:28:c6:89:6f:8e:68:95:5f:52:18:1e:76:a6:33:f0:27:
         e8:08:7d:63:2c:cc:41:25:ab:d0:02:96:82:bb:3a:34:96:d0:
         d4:21:eb:20:7b:18:59:14:63:72:46:6c:20:54:ae:83:76:63:
         5c:8c:19:5e:2a:ad:05:85:27:4a:0f:39:3b:48:c1:8f:af:4e:
         31:77:2a:b6:3e:38:69:e5:e9:5e:75:7e:8a:40:3d:b8:bc:ff:
         8e:3f:da:3f:6c:c1:67:55:cb:a1:88:30:25:c0:95:ca:22:b8:
         9d:0a:6c:ea:08:38:6a:c0:13:ed:d7:dd:cc:0a:8e:c6:89:df:
         33:ca:49:63:c5:32:2d:c3:a8:57:de:e2:62:1d:c1:74:b6:12:
         de:55:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:54 2026 by rpki-client