Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File:                     N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier:          34/nNSD80J2VQwmWZNE3AO8XoCjZHD9I8FxNXvPoj1Q=
Subject key identifier:   4F:3C:C7:44:45:74:D8:41:F9:91:6A:B0:5C:DA:F0:AC:B1:77:C3:A0
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       019CAE352F73021A94C4702997C7DEFE6807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 11:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 11:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 11:00:46 +0000
Files and hashes:         1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=)
                          2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: cN0KIK6uyvokIwd7bxarpEAM/5s8WfMRfZkrlocRc80=)
                          3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=)
                          4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:2f:73:02:1a:94:c4:70:29:97:c7:de:fe:68:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Mar  2 11:00:46 2026 GMT
            Not After : Mar  3 11:00:46 2026 GMT
        Subject: CN=4f3cc7444574d841f9916ab05cdaf0acb177c3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:41:d3:95:ff:a5:5a:ec:6e:18:b7:e2:e1:
                    5a:cc:c0:c7:32:58:3e:d5:8a:5c:c4:13:f2:15:82:
                    1a:3a:39:3f:5b:ba:75:59:e9:ff:34:d7:64:52:8b:
                    d2:34:47:a6:17:8f:45:82:14:ff:f4:57:17:6c:d2:
                    95:1b:cf:9b:40:02:35:4c:25:90:e1:00:df:d4:e5:
                    9d:27:ee:9a:97:8e:85:df:e9:f0:2e:e2:51:2f:f3:
                    71:21:a6:e5:17:0e:5d:71:50:1a:12:f3:bd:fa:9d:
                    5e:c1:41:a2:24:b6:70:64:5a:2f:77:6f:84:e0:c8:
                    fd:0c:ca:7b:4a:94:1f:e7:37:d5:32:ec:1c:ad:27:
                    14:50:83:25:05:9e:8d:52:26:76:6b:39:fb:36:57:
                    a8:08:17:53:23:91:a8:24:69:0a:2c:e5:63:7b:3b:
                    41:44:6c:e4:1c:99:d5:1d:5b:d0:d7:0f:9d:c8:5d:
                    71:7d:27:f0:8a:9a:45:5a:25:69:36:37:bf:2d:85:
                    50:54:95:ae:96:56:7c:90:f0:43:86:38:1f:6f:86:
                    ce:2b:68:7d:88:d0:f6:57:ff:1e:43:9b:27:23:53:
                    77:d5:a8:e7:82:87:05:7b:91:b3:c9:96:51:54:69:
                    a7:24:84:7c:8f:9a:86:83:46:ab:4d:34:9b:ab:17:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:C7:44:45:74:D8:41:F9:91:6A:B0:5C:DA:F0:AC:B1:77:C3:A0
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:dd:ba:f1:4e:27:ac:31:44:dc:cf:1f:55:80:31:c8:d5:
         47:c0:24:4c:45:cb:70:b2:76:15:0d:5f:a8:29:29:33:a1:78:
         09:06:a9:83:ac:5a:77:69:2f:a6:e9:f4:dc:9a:14:74:45:fa:
         30:df:33:08:6a:63:b0:1e:0e:08:ab:e8:63:ab:c7:f4:b3:9e:
         5c:08:f4:5b:82:58:5f:5d:d5:cb:03:43:bb:01:c4:92:dd:07:
         87:96:5a:54:0e:67:9b:9a:d9:aa:9c:aa:58:9d:7f:5d:2a:30:
         10:77:0b:95:7b:28:ec:34:4d:5f:97:4c:d4:f5:ca:3b:a3:30:
         c8:26:d8:7a:bd:31:7f:02:c6:2b:f0:45:b7:1d:d4:f9:22:08:
         88:ad:ad:56:fd:0b:4d:b1:dd:00:aa:be:0a:3e:3d:d4:b2:7a:
         48:66:a4:b6:07:c1:27:23:b5:ca:ab:7a:95:2f:57:7a:3c:bf:
         5e:79:c7:41:df:85:9d:2e:15:26:ba:1c:32:37:b8:9e:46:2f:
         e1:ff:1f:f6:18:73:6d:8a:bb:e6:8a:2b:ed:98:ce:19:a2:29:
         ec:8e:ed:9a:7e:84:23:5b:8e:c7:52:03:7f:2d:a3:f3:50:33:
         a4:a4:a0:9e:58:37:46:80:0b:cd:25:ec:59:4e:b2:c8:84:e0:
         03:76:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:41 2026 by rpki-client