Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
File:                     SeuKtOPXneJ90f1pIZbi454aO6M.mft (raw, json)
Hash identifier:          kW7p+Ekw0/j7ljHObdH5CuhmIfaIM/RHxPJsJop/DrE=
Subject key identifier:   57:69:C2:D2:EF:A1:EF:C9:C0:66:EB:C4:91:42:09:1F:40:08:4C:C0
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Certificate issuer:       /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial:       019D2628A654CD5C164B7D71B5B7D669A522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
Manifest number:          1599
Signing time:             Wed 25 Mar 2026 18:01:31 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:31 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:31 +0000
Files and hashes:         1: 3mVMIwWinwhNORtODy_r-N2Xls0.roa (hash: XHUV/Re+ghhyWr64uMx1SGsxkWzcob0PUdM0zrRp3nA=)
                          2: SeuKtOPXneJ90f1pIZbi454aO6M.crl (hash: LfyA7/5e/UtwJo/jyg2TriZvWsrVPsOy0HU5wekgB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:a6:54:cd:5c:16:4b:7d:71:b5:b7:d6:69:a5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
        Validity
            Not Before: Mar 25 18:01:31 2026 GMT
            Not After : Mar 26 18:01:31 2026 GMT
        Subject: CN=5769c2d2efa1efc9c066ebc49142091f40084cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:95:96:57:70:f2:72:f7:59:55:33:33:b3:
                    b5:d9:93:c1:c7:25:5c:a4:4e:ca:fa:39:9d:4a:15:
                    60:da:2f:e0:d0:6a:36:00:9a:b0:e9:1c:9e:a7:a3:
                    54:07:75:76:91:2f:58:03:cf:e8:80:d5:c1:95:9e:
                    c5:76:38:39:f5:c2:0b:7b:55:08:37:ff:09:ef:60:
                    ae:90:9d:1c:f4:96:55:67:eb:9a:6f:52:eb:34:53:
                    73:20:ee:43:d6:5e:92:19:ae:c5:a1:0d:c8:37:c4:
                    5d:c0:2c:ad:ef:70:12:19:2d:12:98:b5:be:25:85:
                    00:df:15:94:03:74:82:04:5a:11:7e:04:5d:bb:23:
                    9f:9a:45:32:03:ed:2f:c7:81:0a:f5:e6:ca:59:14:
                    d4:31:20:3f:c6:45:24:97:97:1a:53:9f:f8:1c:29:
                    d3:32:54:fe:8f:6c:ab:3e:21:19:d7:50:aa:29:5d:
                    8e:be:64:fb:dd:76:53:60:30:84:a9:da:a8:df:fa:
                    75:6f:a2:90:6e:89:7d:44:f0:7c:4c:98:f3:0c:db:
                    aa:a9:d6:69:0c:15:0b:78:a9:db:0d:6f:92:ce:64:
                    20:1d:5f:c4:f1:ca:8f:7a:c8:dd:75:6b:d3:44:66:
                    6d:3c:ce:9f:22:d0:ec:4d:ae:3e:3b:7d:c3:75:28:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:C2:D2:EF:A1:EF:C9:C0:66:EB:C4:91:42:09:1F:40:08:4C:C0
            X509v3 Authority Key Identifier:
                keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5e:6a:3c:ce:35:73:93:9d:3f:d1:ec:c8:d6:03:a8:64:55:
         51:27:78:75:ad:97:13:d9:ff:c2:f3:35:ca:35:1d:94:08:3a:
         fc:8e:64:f1:3a:c0:a2:18:e2:d0:7f:55:c0:24:11:c2:0d:f2:
         62:31:45:92:10:4d:a7:52:90:8f:b1:c9:0b:56:48:0b:39:96:
         e4:f8:7d:34:74:df:90:75:e4:d6:57:e7:1a:c6:a3:e4:54:e8:
         e9:64:b7:f0:f2:a6:39:dc:c2:18:22:b7:77:2e:a6:10:bf:87:
         55:27:25:f0:e7:ba:bd:96:2a:d0:a5:ac:0a:01:e8:48:2e:0c:
         34:48:28:57:a9:af:21:a5:af:fb:48:bd:0e:8d:af:6b:af:74:
         69:c5:d2:56:10:d4:0c:1a:c7:a5:70:77:9a:14:07:ce:ba:76:
         96:af:74:fa:af:6d:8d:db:fa:9f:52:71:55:1d:93:ed:37:7c:
         b2:34:32:ea:6c:02:7c:d0:b5:ef:64:6f:2d:cc:9f:fa:26:cb:
         e6:5f:9b:4c:11:01:fc:07:47:3c:b2:85:bf:0d:bd:7c:b4:bd:
         e0:7f:9a:f5:35:70:be:8d:0e:bf:3f:82:00:f5:a3:c8:f3:0f:
         9d:fa:0d:8e:08:ea:00:34:f9:83:1e:f1:cc:b6:19:3a:78:fa:
         18:34:2a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:12 2026 by rpki-client