Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File:                     bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier:          gMcFc8KGUNaKdRUksbQx6UkS6485XFccZ4IUPvD7aLA=
Subject key identifier:   86:96:A8:68:69:1B:A5:70:06:2D:E2:ED:A5:11:B2:27:C0:C4:A0:A3
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer:       /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial:       019CADFE6DCCD15F2593AE9F3F9EAB942943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number:          174A
Signing time:             Mon 02 Mar 2026 10:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:58 +0000
Files and hashes:         1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=)
                          2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: mYP2ZeBv3Oii/3HliBjScMUU578QTJXJegD5Zvg4nUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:6d:cc:d1:5f:25:93:ae:9f:3f:9e:ab:94:29:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
        Validity
            Not Before: Mar  2 10:00:58 2026 GMT
            Not After : Mar  3 10:00:58 2026 GMT
        Subject: CN=8696a868691ba570062de2eda511b227c0c4a0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:a8:e6:ba:03:3a:e6:ea:9f:b4:e0:8a:8d:
                    bf:6e:62:d5:28:4f:29:9e:49:e2:e1:63:ad:59:e8:
                    96:d7:19:3f:a7:1f:cd:4e:b9:d8:64:05:6f:61:0c:
                    f9:7a:da:0d:d9:0b:03:41:02:b1:57:e6:10:97:92:
                    29:20:f1:39:a9:52:03:d4:c7:52:6c:2e:55:3d:33:
                    eb:6a:a8:1b:14:fa:6a:6c:a2:50:a7:4b:e6:e1:b1:
                    a8:05:f7:e4:0b:94:86:c6:25:64:8e:19:cf:8e:df:
                    39:71:6f:04:dd:09:9f:02:d4:12:67:62:f4:5b:90:
                    58:6a:c1:ca:96:f5:c6:eb:02:ac:5b:6f:05:12:b1:
                    1c:31:28:00:99:70:e2:84:30:3e:7d:31:32:1e:fd:
                    8d:7c:45:b8:68:e3:48:c0:94:05:3d:e8:f9:0d:72:
                    55:51:90:cc:ef:32:47:27:29:47:99:12:7b:ec:be:
                    a9:12:6d:03:2c:92:5e:b3:75:12:1b:a8:2e:96:a6:
                    c9:3a:0f:db:0e:4b:f4:64:4a:8a:8f:76:a7:a3:39:
                    a4:4d:d4:57:f6:99:69:ca:99:c7:d8:03:78:a7:68:
                    d4:a3:00:24:9f:57:7f:c8:6f:a9:2a:48:ab:14:b7:
                    96:c6:b6:6a:64:0f:ac:cc:2b:fe:7f:eb:d7:b6:82:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:A8:68:69:1B:A5:70:06:2D:E2:ED:A5:11:B2:27:C0:C4:A0:A3
            X509v3 Authority Key Identifier:
                keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:c0:85:09:67:ab:cb:ee:92:b0:9e:1c:72:bb:0a:00:db:
         39:92:2b:e7:d9:45:f7:09:d7:09:7e:fc:81:8e:38:96:7b:82:
         79:80:78:52:f2:7e:4c:c7:63:dc:b9:b9:46:66:77:72:6b:ed:
         1e:9e:41:19:09:a7:a3:8a:5d:7b:7d:8b:3b:2a:39:7f:68:dd:
         d1:e9:1b:dc:a1:66:07:af:1f:15:25:4c:d9:28:dc:ff:a2:d1:
         59:38:be:1b:13:37:ca:48:8c:86:5d:68:f4:7d:f9:80:69:e0:
         83:d2:c7:e8:a1:ff:0e:db:bb:28:e9:81:b8:c0:10:ef:ce:5f:
         bb:2f:10:5f:6e:ab:e1:00:fb:30:77:19:25:06:3c:f9:f3:31:
         cb:69:98:da:9d:29:f1:5c:3e:f2:8e:9d:81:c3:18:2f:af:9c:
         4c:a4:40:97:4b:d2:99:40:e4:68:37:ae:8a:d7:dd:4c:7a:85:
         cf:9c:2c:44:1c:94:8f:79:32:ab:0f:b4:fd:5d:29:2a:f0:22:
         20:a3:5b:a2:fb:f6:27:84:46:23:5b:fe:5e:b1:86:4a:3c:55:
         e0:00:1f:81:d2:b7:f7:37:da:77:b2:72:fe:44:0d:9f:ef:18:
         ca:6a:f7:f7:37:f9:61:cb:70:d7:20:b4:22:c9:23:e0:6d:d6:
         fe:3e:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:40 2026 by rpki-client