Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          zdUD9xmBkF1KDW1RDRcf82VIVQjkrNxbofZHQufXXfw=
Subject key identifier:   A2:29:18:D7:68:EC:14:2B:81:1F:D3:1B:0C:47:F6:99:2C:C3:31:08
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       019CACB57669CD94EBCBB2F11E90817DC901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 04:01:39 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:39 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:39 +0000
Files and hashes:         1: 4vogBCHvVhbK8N2sbK3joTZSar8.roa (hash: pJFApZIgzEg6Z5G8+ARw6VHXe5cVu/+xIPiV86FoPSo=)
                          2: 7lhE6bzZhG0C5CmBmaI7HzYPl8s.roa (hash: ToooYHL477UW9eXXr8dqX98p19Eo18MQyb6sYa2XGsM=)
                          3: TsBKJ5VG1iOHqte2doC7OTdW_hw.roa (hash: KJo9UiYoALbrSsQU23bvnMkU2vT+dKNpE5NMA+Hvo6E=)
                          4: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: KmyPbNchpz/lZ8PQi4WTncp4d6hjUd9AsNg2z1Z+4kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:76:69:cd:94:eb:cb:b2:f1:1e:90:81:7d:c9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Mar  2 04:01:39 2026 GMT
            Not After : Mar  3 04:01:39 2026 GMT
        Subject: CN=a22918d768ec142b811fd31b0c47f6992cc33108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:5f:48:30:d7:30:3b:6c:c8:60:b3:cf:12:
                    f0:5c:85:ec:f3:fa:84:f4:a7:49:bb:c8:c7:14:33:
                    71:1b:a3:99:fa:13:b4:7a:bc:d2:cd:93:56:3e:6e:
                    9e:75:26:99:31:16:a1:04:17:ca:88:88:ef:72:18:
                    1f:d7:06:75:b5:41:a2:89:d6:9a:90:56:6c:10:dc:
                    15:52:e3:40:c1:e3:76:75:08:63:75:3d:38:bc:d0:
                    42:35:07:f8:11:51:90:60:f9:7e:3d:0f:9d:28:1f:
                    6a:a0:c6:3c:b3:dd:6d:8b:6e:2e:c2:3e:e7:a4:80:
                    ed:64:ae:11:71:21:d7:bc:ed:9e:48:95:16:6a:43:
                    53:74:c6:88:e4:cf:17:14:7d:ab:31:9d:ae:f3:fc:
                    eb:78:68:37:82:16:bd:e2:a7:46:1d:d5:96:f8:0f:
                    f3:cf:2e:27:c2:80:b8:90:16:cf:c7:1c:ec:42:a8:
                    1d:73:e6:c7:bb:36:10:a2:e0:57:51:01:30:9b:e1:
                    7d:58:dc:8f:2b:7f:71:87:69:51:ba:6a:1b:26:c6:
                    0d:d3:73:21:b5:cb:93:2e:a8:9a:7f:4d:4b:5d:40:
                    3f:71:a7:4c:4c:34:ac:b2:2b:83:d1:cc:b4:34:28:
                    69:0d:99:1d:67:a2:ce:30:1a:f3:fd:1a:46:f4:71:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:18:D7:68:EC:14:2B:81:1F:D3:1B:0C:47:F6:99:2C:C3:31:08
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:4b:06:37:c3:e8:c2:ed:3f:a2:ad:a5:17:e1:5b:33:9a:
         34:98:44:91:eb:87:a0:c6:17:67:8d:90:f8:06:c2:52:c1:65:
         0d:e8:ef:95:6a:e5:d3:24:a4:e3:3f:aa:6e:db:02:ff:97:26:
         8b:f4:70:2e:98:c4:f2:9e:bc:4b:93:23:e7:52:9b:71:c7:a9:
         82:22:8c:f6:b2:e8:08:4a:34:24:25:82:14:4a:24:60:36:68:
         04:ac:12:31:12:89:6d:a5:09:a8:15:14:bc:f6:12:88:73:70:
         7d:cb:10:7c:b2:ab:8b:f6:ec:6c:ad:cf:9f:0d:52:59:7c:37:
         f2:c4:87:51:e6:e1:71:ac:21:a6:6b:5a:88:3a:aa:1b:ae:5d:
         15:b1:27:dd:33:a7:bf:6d:f7:f0:0a:df:2b:eb:c4:43:28:61:
         e5:93:e7:9b:c2:df:7a:00:59:3a:4d:ff:a6:af:74:d0:eb:26:
         62:91:18:4e:fe:ea:17:75:3e:0c:c5:68:bc:37:b7:b6:e2:53:
         07:9e:ba:8c:2f:d0:3d:12:95:7a:0a:ac:82:3c:51:d1:a3:3b:
         46:df:af:48:9d:26:c6:61:80:8f:81:ba:82:2d:3b:08:d0:07:
         28:ce:c9:96:b6:93:5f:35:ca:24:51:e0:0f:0b:c0:0b:1e:86:
         f1:93:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:24 2026 by rpki-client