Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File:                     93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier:          XTzML4V7/JX6r/GI2Ok0rN5VAQfFXk4BOiR9n1/H/rQ=
Subject key identifier:   F8:0B:E0:76:92:16:92:AB:93:76:C6:93:45:EE:DA:D7:CB:FA:0F:9F
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer:       /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial:       019CABD9608BCB229FC6EA4930277707104B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number:          184E
Signing time:             Mon 02 Mar 2026 00:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:15 +0000
Files and hashes:         1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: vGjkez1mjbmwvUb3wwh0tmnIxzjTOdWbNNI1HO/xhlQ=)
                          2: c06tR7wEve3BgRsZfi2xd-31eVA.roa (hash: V2mYqL9ivwyeeA9Wbx55/u2xDyhE5GyqU/pPOSpOihs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:60:8b:cb:22:9f:c6:ea:49:30:27:77:07:10:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
        Validity
            Not Before: Mar  2 00:01:15 2026 GMT
            Not After : Mar  3 00:01:15 2026 GMT
        Subject: CN=f80be076921692ab9376c69345eedad7cbfa0f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:05:03:9b:2f:28:8a:26:19:a2:97:ea:60:
                    e7:14:00:f8:1a:9a:fa:02:34:34:03:c7:93:3d:d9:
                    76:9b:a0:a8:8c:0c:e9:8e:3a:8f:ac:b1:d9:0f:c2:
                    0a:bb:5e:fb:45:96:91:ae:1c:e3:ac:98:ba:08:f5:
                    18:c8:54:f5:8d:b1:08:94:b6:55:d9:f6:a5:42:88:
                    6a:7c:9a:ba:0f:63:8c:23:5d:da:e4:70:da:49:20:
                    49:cf:1f:05:43:4b:fc:64:27:1d:0d:e0:27:40:15:
                    6a:41:87:f7:4c:b4:ae:a9:15:e7:5e:9a:0b:b0:2a:
                    94:03:cb:5e:40:15:be:b0:dd:09:0f:96:b3:9f:dc:
                    f5:c6:53:80:f7:36:1f:1d:8e:a7:89:19:13:7c:38:
                    a9:89:e8:9c:19:c2:da:56:ec:90:15:48:43:e9:2b:
                    95:d7:97:cb:72:7a:75:c9:83:85:c1:5c:ef:8f:80:
                    59:f1:72:ec:3b:53:06:d2:58:d2:4c:cd:c3:e0:4d:
                    74:98:f7:e9:99:a7:1f:2b:95:eb:b1:f4:b4:23:af:
                    ff:f9:6a:6e:64:0a:8c:07:4c:66:de:a8:79:84:b4:
                    24:e9:b3:f4:57:c6:d9:90:16:28:6e:89:d5:b6:07:
                    bd:c0:41:2d:9c:48:3e:ea:f5:9c:3b:ee:d3:09:dc:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0B:E0:76:92:16:92:AB:93:76:C6:93:45:EE:DA:D7:CB:FA:0F:9F
            X509v3 Authority Key Identifier:
                keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:9d:56:63:c0:b0:67:8f:65:79:49:c7:4f:84:c4:7d:18:4d:
         3d:f8:14:37:78:41:79:ea:bb:19:5c:1f:e7:f2:b3:50:dd:84:
         9c:4c:20:30:ad:b6:b6:a4:c5:07:b7:58:50:2f:92:fb:d8:b6:
         36:85:64:f9:57:80:20:67:c1:4b:b8:5e:3c:24:ee:43:38:43:
         75:d2:20:d4:a8:3c:89:af:0c:82:56:45:40:cb:2f:bd:b6:63:
         c9:f4:9c:05:4b:51:0e:88:ba:24:43:ce:4f:fc:4c:ca:02:1f:
         54:42:dc:03:41:f4:57:91:6b:1d:41:dc:41:b9:f2:6e:6e:9c:
         1f:df:cf:aa:ca:f2:7d:d8:d6:c5:9e:29:69:ff:3f:5e:a9:9e:
         89:11:9f:17:91:06:13:d3:3a:dc:2f:75:97:c7:2f:8a:ca:1f:
         d7:e7:12:ed:e8:d2:47:cc:2d:e1:60:cd:40:55:d5:9b:3a:68:
         bb:e6:28:ee:70:d0:9f:e3:74:fe:d7:d6:a2:ec:cf:01:a0:ad:
         cf:09:91:1b:56:3f:8e:dc:64:08:ee:4b:ed:e8:af:07:e5:38:
         ec:d9:02:2e:e4:69:d0:a8:5a:9e:c0:a5:8c:e2:d5:93:0c:f0:
         7d:04:76:af:6d:12:b5:87:db:86:8b:bb:ae:08:fc:47:e7:48:
         d7:d2:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:39 2026 by rpki-client