Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File:                     _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier:          WJi+DDgigCNO4q3zugfxLcLDUfpMY8Qo1uokibzswq4=
Subject key identifier:   AE:73:F1:7D:18:C3:2C:A5:04:A1:C5:4E:FB:45:C5:1F:C8:CE:4A:F1
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer:       /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial:       019CADFE6D97B715ACB99F038BADC12662E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 10:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:58 +0000
Files and hashes:         1: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: 0+4fF4/8iXeZGzwvimKsG7tM7++ijc46Qcg5Lw/XCww=)
                          2: ybXPtjtytnp4awj6RoDLh-SgWqk.roa (hash: yT3G41aEzQUb5MKxunseT7S7bGL9k6nsWABzcpJ77H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:6d:97:b7:15:ac:b9:9f:03:8b:ad:c1:26:62:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
        Validity
            Not Before: Mar  2 10:00:58 2026 GMT
            Not After : Mar  3 10:00:58 2026 GMT
        Subject: CN=ae73f17d18c32ca504a1c54efb45c51fc8ce4af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:49:ba:c1:5f:c6:64:21:8e:88:71:7d:47:
                    67:61:9e:37:cf:9e:3c:73:74:b0:64:67:a4:42:23:
                    a8:e8:31:f8:dc:1f:80:82:48:e3:5a:81:4b:a8:31:
                    00:e3:90:af:48:a9:af:e9:b1:a0:66:5b:b9:be:3b:
                    af:72:88:71:47:45:b8:dc:5f:4f:5c:87:5f:bf:8b:
                    25:45:2a:85:c8:1f:52:d1:34:ca:2f:2b:af:c0:7f:
                    87:32:8c:7c:c3:e9:b3:50:c8:23:95:b1:4c:f4:24:
                    6a:63:fd:39:9b:fe:22:54:1c:f8:2c:b7:a1:45:ee:
                    f5:d5:b9:0b:8e:35:1e:61:19:cf:ce:f5:b3:b9:ab:
                    c2:96:bf:02:71:73:22:3c:33:a4:9c:6d:ea:b0:d4:
                    8d:0e:ae:71:63:b8:73:67:cc:60:20:50:9e:a7:14:
                    9f:f0:6a:85:b1:2a:93:b4:41:f9:3b:a6:98:86:ed:
                    83:a0:b6:c4:8b:44:37:d8:99:d1:22:54:35:54:c8:
                    2c:a8:47:54:3d:bd:81:6c:7d:7d:cf:b0:46:2d:8c:
                    66:fe:6c:a5:c0:05:1d:76:d8:63:ac:bc:1b:97:a1:
                    9c:f4:19:fc:08:3a:17:45:e8:7b:67:bf:6f:52:d3:
                    14:18:3f:11:16:e6:b0:81:fe:01:ee:ad:77:05:ee:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:F1:7D:18:C3:2C:A5:04:A1:C5:4E:FB:45:C5:1F:C8:CE:4A:F1
            X509v3 Authority Key Identifier:
                keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:f8:b1:ad:cc:98:f2:19:8d:12:ea:d0:8d:31:9e:49:c5:6b:
         7b:23:dc:1f:0f:ec:a5:88:ed:fd:e4:fd:dc:84:94:37:60:31:
         99:77:92:9e:1b:2d:be:cf:48:8b:e8:71:80:70:68:0c:8c:6d:
         f0:38:f5:8f:5b:52:7a:c9:af:a8:d3:29:20:2d:a6:f8:39:f5:
         f3:ca:9d:50:93:4c:ec:d2:6a:3e:00:fb:30:36:97:57:c6:64:
         ea:b4:86:e0:ec:d8:00:ac:d1:5e:08:7d:6f:d8:dc:dc:f1:44:
         99:b2:ba:21:20:b0:07:77:df:f5:0d:0f:01:e6:fb:2a:72:2d:
         34:f7:56:0a:84:a7:d1:35:c7:78:fa:58:b0:fa:79:f7:3f:f6:
         cd:58:35:15:7f:43:51:a6:25:c6:81:61:c3:03:0d:ba:e9:f1:
         2d:35:ca:c0:46:10:38:07:d3:17:2f:f4:f9:7a:7e:74:a8:16:
         6e:23:1e:4f:d8:e2:53:5b:21:45:38:17:b4:76:0b:79:d4:c9:
         0d:93:6f:28:26:c6:9e:64:90:6b:1d:a0:5a:46:aa:85:96:f8:
         39:25:a9:e8:a3:32:65:ee:fc:ed:a2:da:fa:77:a7:2b:80:0c:
         9f:82:4c:43:87:c5:52:89:95:06:b2:19:7b:86:14:d7:bd:4c:
         2b:b3:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:51 2026 by rpki-client