Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File:                     Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier:          hUFT460cTPDK30bxKfy5cvMrrOkLzrqqjfZxaUWyK34=
Subject key identifier:   11:49:0D:F0:A8:00:2C:18:1F:BA:4A:58:3D:98:F7:45:1F:BF:71:84
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer:       /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial:       019CE4B5EF45BC194FC9168DE367B81F6796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number:          1867
Signing time:             Fri 13 Mar 2026 01:00:54 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:54 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:54 +0000
Files and hashes:         1: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (hash: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M=)
                          2: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (hash: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ=)
                          3: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: A1K+KjRuI9PbYSF2Vgsfe2KgbGxCDT0JMGt8TzWwR9U=)
                          4: eu9ae3eLYSM_cPxuWpcvPn92OU8.roa (hash: HOeGxAKohjtOD7Ke0LKRStGG+xTv10n59udd9QSjFEw=)
                          5: v52ZTcdolNoppoOrn38Ym0qTh6M.roa (hash: qxbDlAOHfwm8HgM041yuk5h+Fnz9xMLxo2BwLuu0zHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:ef:45:bc:19:4f:c9:16:8d:e3:67:b8:1f:67:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
        Validity
            Not Before: Mar 13 01:00:54 2026 GMT
            Not After : Mar 14 01:00:54 2026 GMT
        Subject: CN=11490df0a8002c181fba4a583d98f7451fbf7184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:f3:30:54:d7:90:ec:68:93:92:b3:2e:ed:
                    f8:d6:63:ca:05:30:99:17:88:4a:cb:21:3b:07:12:
                    06:3d:1e:ea:c4:45:56:8c:bb:60:5c:86:ec:99:7b:
                    3e:e9:59:29:96:71:b5:fc:0f:e8:20:8c:68:c0:8e:
                    b7:c8:73:d9:fa:08:35:9a:5d:87:bf:8a:dd:91:01:
                    90:68:79:9c:89:5e:28:9d:d5:c4:9e:b4:27:74:b9:
                    bc:23:f3:56:90:cc:c2:33:bd:5c:37:d7:5c:c5:b5:
                    5f:da:0a:10:cc:0d:0f:9c:83:2e:11:04:31:24:4b:
                    29:f7:6b:cd:c3:c2:e9:d8:aa:63:73:c5:72:2d:84:
                    9d:d2:f2:e4:0f:01:f0:63:a1:9c:ab:36:5c:29:09:
                    e0:e4:78:3c:be:fa:2e:03:a7:e8:be:84:14:77:ae:
                    12:43:70:29:5c:29:5d:1c:e5:70:19:bc:f3:3e:d9:
                    6a:7d:64:4b:35:4b:d0:85:10:d1:b4:7c:07:06:c7:
                    26:4b:51:99:27:8f:dd:f7:dd:df:69:c5:88:6c:ad:
                    0c:84:04:41:f3:e4:7c:f9:a9:6a:d8:0d:e0:7c:fb:
                    fc:a1:b4:69:ef:06:10:82:2f:18:3a:66:34:99:2f:
                    73:c4:07:3b:3a:f8:01:32:37:75:68:14:6d:17:ab:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:0D:F0:A8:00:2C:18:1F:BA:4A:58:3D:98:F7:45:1F:BF:71:84
            X509v3 Authority Key Identifier:
                keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:39:74:d4:e9:ea:0c:9a:7d:61:81:2a:f2:e0:a9:04:4e:ba:
         79:61:0b:b5:dc:79:84:dc:6b:d4:c9:84:33:d3:61:46:30:54:
         4e:bf:22:99:e0:58:99:19:c9:74:92:8e:3d:61:01:14:c4:74:
         99:7a:bd:7b:42:6b:f0:04:2b:76:1b:cd:18:5e:1a:cf:14:ed:
         98:ea:36:7c:e1:32:36:72:d8:93:9a:85:e5:2c:3b:01:7d:97:
         ea:80:7e:34:36:ca:67:5b:d6:6c:ad:62:c6:db:e1:56:1a:40:
         02:f2:fb:fa:2d:55:6c:19:01:29:da:9b:56:44:73:80:0d:36:
         3f:38:42:82:1b:9a:59:eb:c2:6c:76:41:06:20:91:78:5d:ff:
         40:65:7d:f4:48:94:e3:63:50:73:ac:e4:0a:1e:0a:55:c3:1f:
         f1:3b:d5:56:e0:5e:09:10:7d:15:de:28:dc:e6:9d:3d:29:0b:
         4d:cc:be:5d:18:f6:03:ee:53:07:5c:51:3c:50:4c:e0:01:46:
         69:46:0b:6b:f1:ef:6f:13:2e:d5:71:41:b3:a8:ca:58:a1:95:
         42:4b:26:66:fc:8d:42:06:d6:c3:19:17:25:af:31:0d:35:70:
         db:34:11:66:c9:90:1e:7f:cf:11:2c:9f:ab:44:8c:43:c4:18:
         93:3d:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:04:49 2026 by rpki-client