Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File:                     88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier:          zWi2C/gaso9T9Ufo0FuRds0Z6MceEPS7JjaMk9Ijd8I=
Subject key identifier:   6E:EE:6D:CA:41:22:0C:A6:61:B0:B7:F2:5E:B3:70:3C:92:5E:7D:D1
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer:       /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial:       019CAD90185C6AF817D632DBEECD84A33B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 08:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:27 +0000
Files and hashes:         1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
                          2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: kt4MY7vzIB6xpmwhHvAIC838cksAO3Q0HXUjDuNTnBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:18:5c:6a:f8:17:d6:32:db:ee:cd:84:a3:3b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
        Validity
            Not Before: Mar  2 08:00:27 2026 GMT
            Not After : Mar  3 08:00:27 2026 GMT
        Subject: CN=6eee6dca41220ca661b0b7f25eb3703c925e7dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:b1:11:cc:cb:a0:d0:8f:af:97:f3:e6:32:
                    c0:2c:a9:fc:8f:5d:86:b0:9e:00:be:30:36:45:86:
                    7f:7e:dc:6d:bf:02:6a:7b:5b:a0:c7:b7:26:a2:61:
                    e4:45:24:dc:53:4c:08:4d:69:53:d9:e0:5d:39:e4:
                    dd:3e:ef:0a:02:9d:74:26:be:ae:37:c9:c2:be:9c:
                    bc:cd:7b:60:ba:98:4f:31:23:04:a1:6a:65:bd:1f:
                    7e:8f:60:69:56:d1:1b:f1:04:49:a4:f2:67:28:de:
                    3d:fa:d2:63:77:ab:a2:16:04:c3:9f:58:7b:e8:d1:
                    11:52:85:ad:a9:e8:f5:e3:d7:a9:a7:03:5b:12:ee:
                    57:8d:4d:65:0d:49:b1:9d:6b:42:61:ef:c7:59:51:
                    e1:2d:34:3d:bb:70:96:dd:bb:08:d1:c6:b2:cb:5b:
                    ac:2e:43:6c:c6:f8:d1:1b:27:c1:05:98:54:b8:7b:
                    02:bc:ec:0b:43:57:53:f7:b0:dc:ed:4c:a3:d7:95:
                    18:fd:93:d8:0a:d6:27:76:d9:37:bf:68:48:39:0d:
                    b6:35:fd:e7:3d:87:7d:84:8f:3d:fe:25:98:12:70:
                    f5:d7:bf:e3:13:aa:67:d3:f2:a6:9e:3a:99:e8:1f:
                    50:f7:06:7e:39:99:17:2e:6e:e0:5f:b4:99:1f:6f:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:6D:CA:41:22:0C:A6:61:B0:B7:F2:5E:B3:70:3C:92:5E:7D:D1
            X509v3 Authority Key Identifier:
                keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c7:a2:41:2d:fd:33:00:a8:db:40:fe:89:89:ed:fb:d5:79:
         d0:c3:e6:94:9e:3b:9d:17:aa:13:d0:dc:2e:b9:b7:1f:d2:33:
         9e:8d:ab:34:79:17:5c:f1:9f:55:8e:31:44:46:76:eb:e8:7a:
         b4:4e:e2:06:76:b9:32:cc:d5:91:c3:54:d5:67:f2:4f:ea:ee:
         41:7c:d8:37:c0:96:cf:02:66:26:9a:54:0a:de:e7:fe:32:28:
         6c:ff:1e:2e:e6:12:63:46:63:f8:da:1b:9d:ac:11:73:f7:b0:
         88:41:eb:6e:47:f1:c5:f5:69:6b:91:79:c2:eb:63:cf:4d:88:
         de:c4:10:08:39:7e:fe:25:da:f7:e5:f3:f8:36:0c:42:f7:4d:
         69:ed:c1:7b:b8:82:62:ff:0e:4e:52:e5:60:1d:bd:80:ce:6d:
         df:a4:70:ca:b1:5c:13:90:f7:f0:a0:66:1e:12:5d:4c:6c:26:
         e6:76:0b:09:c8:74:b4:12:b5:5f:1f:6f:a4:a9:e0:a3:d7:30:
         3e:52:e5:a9:de:3c:67:3c:67:9e:4c:9d:74:e3:c5:c7:b6:04:
         3f:1c:40:8c:86:10:40:91:ec:22:e5:3b:32:8f:cc:3c:82:1a:
         2f:5c:15:e6:96:b3:e8:59:0e:50:75:69:af:18:76:2b:9f:34:
         13:58:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:49 2026 by rpki-client