Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File:                     fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier:          wZCUDRSL4/6OnuYo5QwHqTBvAJkujIUdh+VQT25Uthk=
Subject key identifier:   0B:34:5C:B6:5D:CB:CB:67:2A:58:CA:1D:CB:85:33:59:36:D2:F6:A9
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer:       /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial:       019CBA3982D4FBEC2A0551DDE58899C17B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number:          18A3
Signing time:             Wed 04 Mar 2026 19:00:57 +0000
Manifest this update:     Wed 04 Mar 2026 19:00:57 +0000
Manifest next update:     Thu 05 Mar 2026 19:00:57 +0000
Files and hashes:         1: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
                          2: 5zkuP4f6OhG906lENMd0u8ubDAk.roa (hash: YlOICpFCtmb97ck88zaKf43d9/Nr2CXsuArLswhCmIc=)
                          3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
                          4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
                          5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
                          6: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
                          7: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
                          8: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: PD10mDQVJ3RYMU4n8i+YtE9G7aFjdKrR2vj+4A9h34Q=)
                          9: nLprKdrMRzPeJXL9QJaCu2iaWQA.roa (hash: yHFQtY87SyBjc63nzUiLzWjw5L0xfoofMzuerU2tuZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ba:39:82:d4:fb:ec:2a:05:51:dd:e5:88:99:c1:7b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
        Validity
            Not Before: Mar  4 19:00:57 2026 GMT
            Not After : Mar  5 19:00:57 2026 GMT
        Subject: CN=0b345cb65dcbcb672a58ca1dcb85335936d2f6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:a8:22:e3:55:2a:6d:3b:28:ab:4c:94:0c:
                    0d:ad:05:86:ca:9a:4b:6a:88:9d:68:f5:3f:97:b0:
                    24:ac:55:9c:9d:2a:23:72:81:9b:3e:ca:0c:5b:c8:
                    98:82:d5:a0:28:e6:23:fd:62:fc:70:a0:c1:02:1b:
                    45:89:4f:e0:2e:83:d9:e0:ba:46:0a:04:70:49:43:
                    f3:bf:6b:d3:74:63:89:c0:57:00:06:2f:16:a4:61:
                    a7:02:61:f4:bd:c4:12:c5:e1:0f:bb:29:8c:9b:e5:
                    49:30:a3:d1:f3:6d:19:a3:0c:e2:28:f7:dc:ad:23:
                    6b:4e:eb:53:55:aa:38:5c:0b:ea:93:e4:08:50:5e:
                    18:43:d5:71:b3:6e:1a:23:82:8a:7d:46:ea:b8:5e:
                    35:17:dc:b9:f4:d1:ea:db:76:f0:c7:17:4c:a4:06:
                    7c:e0:20:43:6d:be:9c:a2:78:df:b7:37:97:32:8a:
                    cc:48:f7:b1:65:d8:a4:9c:5b:e7:ea:ba:d2:6b:5c:
                    dc:e4:38:93:83:7d:49:7b:58:cc:2c:f5:f1:93:84:
                    8e:a8:c3:3c:6d:24:3e:d9:58:95:84:09:a8:fd:62:
                    51:78:a6:33:f1:5a:80:e6:50:0a:89:ff:9d:51:1a:
                    52:29:85:e2:31:60:ee:38:0f:08:70:25:12:20:79:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:34:5C:B6:5D:CB:CB:67:2A:58:CA:1D:CB:85:33:59:36:D2:F6:A9
            X509v3 Authority Key Identifier:
                keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e1:8b:c7:1a:20:e4:9d:c0:6d:48:51:7d:68:5d:b1:65:f8:
         2e:4e:84:48:15:be:d8:7c:a3:bc:fe:b2:b6:78:08:a6:b3:c4:
         7b:77:35:e2:de:4d:bd:04:50:d5:fb:a3:4d:e1:bc:78:cc:5c:
         87:97:5e:b3:6d:38:c0:48:7a:47:e2:42:80:09:aa:f4:ee:82:
         bf:7a:a7:1b:14:e6:18:81:57:15:cf:46:8e:2c:50:0d:4e:f2:
         3c:01:4e:3b:96:76:7c:58:d4:96:45:65:9d:ff:08:fc:77:e7:
         42:4b:65:b4:16:61:0e:da:61:e1:ee:75:6d:3d:83:36:8b:d2:
         45:74:2e:a6:b0:36:98:38:6c:fa:2f:dc:c8:59:2b:99:a4:f4:
         19:7c:f0:b7:45:11:1a:43:e7:f9:aa:8a:98:c5:ad:0f:8c:79:
         a5:5e:c1:e3:d7:7d:e2:8e:1a:85:20:85:45:8f:32:8d:75:a7:
         cf:1a:da:98:de:fb:98:6d:0a:76:0f:f9:eb:a0:f0:6e:2a:20:
         e7:6e:74:a9:02:b8:4d:b9:b2:03:9f:5c:30:90:19:49:52:8e:
         ed:4e:b7:b7:4f:87:74:96:2e:c5:5e:fb:97:86:63:bc:3c:47:
         06:f1:69:a7:cd:df:93:73:4c:87:4a:d9:c8:01:db:98:6d:1c:
         57:84:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:05 2026 by rpki-client