Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File:                     SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier:          M9HtevafKHc7fbgh1MMeFwTmPjlPcdvgeISloWAVHWc=
Subject key identifier:   2D:44:69:16:99:A5:0F:8D:29:56:51:05:BF:24:58:17:7B:5D:B7:D1
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer:       /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial:       019CC8D12F71F32EFA2BCE47AF14968AFD12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number:          1853
Signing time:             Sat 07 Mar 2026 15:01:18 +0000
Manifest this update:     Sat 07 Mar 2026 15:01:18 +0000
Manifest next update:     Sun 08 Mar 2026 15:01:18 +0000
Files and hashes:         1: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: 3H1j7dV1dvs4+H+XO73KLho0jIzeda+9C0lnl8OCEDo=)
                          2: pth9nCfBOVCefSZjAlug7noCoiE.roa (hash: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98=)
                          3: ukI_HPYNJmvBtX0I8YnAqCqHIKc.roa (hash: V4VFe3RvbqJ8JaD1mJXWX5JH1StQafZpQ0cqoqd+N6E=)
                          4: z8VOUiSLPVMno5KoGBbOODeDDys.roa (hash: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 15:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:d1:2f:71:f3:2e:fa:2b:ce:47:af:14:96:8a:fd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
        Validity
            Not Before: Mar  7 15:01:18 2026 GMT
            Not After : Mar  8 15:01:18 2026 GMT
        Subject: CN=2d44691699a50f8d29565105bf2458177b5db7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:38:23:0a:08:a9:b4:6c:74:ef:1f:21:04:
                    c5:38:5d:06:18:c4:9b:57:85:6e:09:7f:af:3d:4a:
                    ba:c3:23:35:da:f8:7e:39:b1:2c:ee:b7:c2:25:9d:
                    11:7a:fb:23:42:f4:fe:94:82:fb:c2:3d:b2:f6:d4:
                    6a:a6:ab:f0:47:3f:0f:e8:f0:ed:1d:87:1d:b8:d2:
                    94:61:a7:e5:36:92:d4:56:09:bc:3f:87:5e:be:f2:
                    14:92:a6:c6:d6:4e:93:4a:0c:d9:c3:3c:bf:7d:76:
                    93:ac:21:04:71:5f:26:5f:02:3a:0d:2c:ac:11:91:
                    74:8a:02:30:14:58:4a:fe:06:41:c2:24:85:81:c2:
                    da:53:12:d3:07:d1:17:84:ba:ff:8f:a5:4a:86:1f:
                    70:86:a2:ea:59:e3:6e:6a:c1:93:d6:c5:e3:d0:46:
                    f2:03:8b:f5:75:68:9b:5f:64:aa:17:03:1b:da:ee:
                    ae:56:22:19:02:0c:38:fa:6e:10:f0:7f:2d:b0:ff:
                    2f:84:1d:6c:4f:83:73:cf:46:f8:23:3c:75:69:ad:
                    f1:0a:6a:3b:42:a6:34:b8:de:c0:ba:b9:bc:ae:73:
                    c8:02:54:99:f6:c7:47:95:f5:39:f4:7b:e2:0c:70:
                    5b:20:61:13:00:93:cd:16:dd:45:05:b3:d5:30:91:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:44:69:16:99:A5:0F:8D:29:56:51:05:BF:24:58:17:7B:5D:B7:D1
            X509v3 Authority Key Identifier:
                keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:24:8c:6c:5c:8c:cc:a5:07:b0:ea:60:8b:2d:f1:b4:f1:e4:
         e9:96:56:0e:68:75:d4:9e:fd:e3:a5:cc:18:65:c9:82:aa:72:
         1b:2f:03:5c:2f:92:3c:fc:f9:8e:ca:33:e7:96:85:3f:4e:ac:
         2f:ec:f7:6d:45:b0:a6:a8:34:16:4a:6a:e9:25:64:a4:63:d3:
         1a:1f:23:7e:8d:ff:ab:79:31:7c:84:68:d4:33:ec:aa:61:eb:
         ff:5c:38:b4:f0:a7:6f:f3:48:7c:07:81:b3:87:06:f4:df:e9:
         05:fb:55:0d:37:a9:90:a5:6d:b2:20:8a:95:62:35:6a:e8:69:
         61:af:ad:da:62:89:d2:c2:71:5d:db:3d:e7:bf:8c:86:dc:10:
         a6:00:a7:dc:ca:7b:43:16:d2:e4:fd:aa:91:2d:2c:eb:02:67:
         04:d9:97:fa:53:15:a1:20:1a:f8:11:ab:f0:75:91:25:2a:5a:
         8a:bd:32:e6:74:0a:d8:72:b8:8d:55:49:fa:60:25:de:03:f2:
         b3:e8:43:2a:28:7e:9d:73:d2:08:3a:52:17:3d:1a:f5:27:08:
         40:24:61:e8:93:22:4b:a6:27:32:f8:ae:8e:b1:e8:6d:9d:05:
         af:2c:36:6b:16:2f:d9:79:87:33:51:92:43:f2:f5:e0:03:b8:
         67:b0:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:11:55 2026 by rpki-client