Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File:                     HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier:          t9vF5Kjkncv/ytmKE9rPyFhvw8SM82Ex2jc0T3YADTU=
Subject key identifier:   67:43:36:24:4E:A9:47:DF:42:D2:75:3D:10:5C:6D:04:3E:BC:9B:64
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer:       /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial:       019CACB52B8F8632018D08BFB7F1CD534913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 04:01:20 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:20 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:20 +0000
Files and hashes:         1: GqjpIwPCfuY9AEJq32U-7x8s2Xc.roa (hash: hBgV71RI9VW14WRnhYAdkQpWE93JgEHcBWlBuGyNBy4=)
                          2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: ECwZgYWVrryqJHDZvwwrSfvjAcXwsLEKMwzeltcjadA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:2b:8f:86:32:01:8d:08:bf:b7:f1:cd:53:49:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
        Validity
            Not Before: Mar  2 04:01:20 2026 GMT
            Not After : Mar  3 04:01:20 2026 GMT
        Subject: CN=674336244ea947df42d2753d105c6d043ebc9b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b1:58:36:bf:0b:68:0c:13:5a:db:5c:eb:f0:
                    af:96:3d:d7:98:22:06:72:5f:31:82:75:a8:ab:24:
                    6c:1f:69:4d:9a:fc:ee:4a:4c:31:2b:47:29:cd:4b:
                    13:0f:8c:63:10:e1:1e:fb:04:83:3a:e2:1f:e9:ee:
                    ba:3c:f2:55:24:33:8a:53:6e:a2:ef:d8:8d:fb:b3:
                    ac:b7:f5:b8:55:c7:04:ab:43:48:0e:ea:8c:ea:c6:
                    73:1d:51:54:13:f5:1a:38:cc:9f:19:72:f3:fd:d4:
                    b2:e4:71:6d:21:cd:85:09:15:c3:e4:3e:94:8a:34:
                    27:56:18:e4:3b:75:90:dd:c2:f2:ac:71:23:e9:38:
                    41:25:e6:54:99:ec:be:2e:44:00:06:33:f1:7e:48:
                    66:a2:b4:6b:b5:24:4a:f3:4b:00:3d:d5:41:c5:a0:
                    85:b2:56:cc:88:ae:d2:fa:e4:98:37:ba:b0:81:63:
                    5f:32:c9:11:5f:df:3b:28:a5:8d:e5:ad:02:21:57:
                    95:a4:9b:a2:12:d6:f8:d2:9c:cf:7f:62:1a:89:98:
                    5d:73:20:fc:6d:f2:7d:55:2f:e8:fd:02:dc:eb:63:
                    f2:24:a8:d4:fa:9b:c5:fd:1e:d0:2c:1a:99:00:f0:
                    16:f7:e7:fe:d9:2b:ba:a3:54:95:33:25:d0:33:9b:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:43:36:24:4E:A9:47:DF:42:D2:75:3D:10:5C:6D:04:3E:BC:9B:64
            X509v3 Authority Key Identifier:
                keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:53:88:a1:12:61:5e:fc:d3:72:c1:a7:0d:be:ad:82:95:
         65:0c:30:4b:45:d6:cf:0f:24:2b:2b:bd:f7:fc:4f:6d:6e:17:
         33:56:33:a5:50:ae:c4:9e:34:4d:ff:9b:cb:37:b6:13:5a:98:
         6e:3c:54:f0:47:71:f2:dd:f8:f9:3f:a4:e5:ea:6f:b7:cc:7e:
         76:7d:14:74:31:38:fb:54:83:e5:1b:7f:13:61:5a:37:14:97:
         e9:57:28:6d:69:ca:50:a4:44:fc:c5:5d:4c:19:63:63:82:3e:
         84:b3:95:aa:a3:6e:c8:17:aa:a6:89:a5:fd:fe:2a:fe:6e:61:
         21:eb:3e:7c:1e:59:98:94:06:0b:b9:4c:b1:14:53:71:69:c4:
         6c:f5:d4:d3:42:74:1c:f3:d3:56:57:20:36:7f:39:5e:d8:55:
         49:1b:82:c0:d2:0e:2f:9d:5c:95:6c:67:7c:81:0a:99:45:6e:
         1a:d4:78:10:74:e8:c8:c3:6a:4b:e5:d7:e4:24:44:d5:bc:a6:
         7c:16:61:2b:a1:cf:11:34:21:c7:d6:f2:c8:01:28:2f:15:76:
         41:8a:c8:c4:45:bc:f2:26:59:f3:d5:23:54:2c:fd:c1:b7:b4:
         43:86:a6:74:58:60:df:48:d7:55:3b:27:d1:f2:1b:a8:de:44:
         ae:ba:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:43 2026 by rpki-client