Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          rEt52WOdwDXhXkmD0g+JXzuKAymkcWRPKjLoXDKIS/U=
Subject key identifier:   99:96:27:96:1E:3A:22:F1:A7:E1:A7:8C:90:A7:85:0D:3C:36:F2:75
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       019CAA8FC1100580BB6B3A426E77E80735BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 18:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:13 +0000
Files and hashes:         1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
                          2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: Afky/GmRH/fN1Ym9CIvDe87MJI1ccuYNG9q/5Zjsc68=)
                          3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
                          4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
                          5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:c1:10:05:80:bb:6b:3a:42:6e:77:e8:07:35:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: Mar  1 18:01:13 2026 GMT
            Not After : Mar  2 18:01:13 2026 GMT
        Subject: CN=999627961e3a22f1a7e1a78c90a7850d3c36f275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:cd:1d:1c:20:18:9d:5b:2c:e1:24:b8:1b:
                    0a:34:d3:37:99:7f:03:b4:b1:87:cf:49:a8:4d:2a:
                    89:2a:3c:57:6f:49:18:99:eb:49:e5:4c:91:53:42:
                    2b:75:a6:90:e2:3b:0d:0a:a9:a4:93:c9:3a:eb:8f:
                    a8:b3:08:0c:3b:af:a4:a7:ca:66:cf:f0:aa:47:42:
                    62:1f:0b:a4:4b:e1:4d:dd:01:90:9d:21:25:dd:4e:
                    74:1b:4d:c5:6e:57:d9:51:63:36:eb:a3:1b:d1:38:
                    9b:65:56:5a:0f:85:98:ee:9e:fe:44:b7:d6:1b:64:
                    65:fa:2c:6a:c1:e4:31:3c:3b:c3:16:84:81:13:8a:
                    ab:d3:02:74:20:df:f1:41:af:29:6c:35:2f:e9:1d:
                    3c:f4:43:7a:39:51:ec:b7:b9:e9:d5:97:e0:03:f5:
                    61:f8:38:99:bd:f2:bd:ce:32:7f:90:b9:c5:74:55:
                    92:25:77:34:f0:bb:33:c4:27:49:36:9d:b1:c7:b8:
                    88:5a:93:fb:a9:9b:7f:16:a9:b0:e8:7f:45:69:24:
                    3e:45:ea:c2:14:0f:3d:d1:6e:fd:7f:15:a5:4e:84:
                    dc:5f:8e:47:b3:fe:32:7a:5e:db:59:5d:48:20:1d:
                    bd:a9:1b:d6:ed:1f:47:ec:47:45:fd:e1:fc:d9:4b:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:96:27:96:1E:3A:22:F1:A7:E1:A7:8C:90:A7:85:0D:3C:36:F2:75
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:25:22:a6:2f:78:36:e2:e0:29:d0:92:3d:e5:c8:4f:44:6e:
         e5:b7:1d:94:0b:c5:cd:95:8a:bc:47:3d:bf:9a:48:44:26:bf:
         5c:d5:67:e8:26:5d:29:cd:77:ee:1e:60:24:70:b8:3d:69:b5:
         48:bb:63:3a:36:70:03:3d:33:9d:d3:da:39:b8:e6:ee:e1:66:
         7c:0f:34:72:97:06:c1:b7:fd:ff:20:d8:48:a9:9a:b6:88:f8:
         79:00:db:96:a6:52:ec:5f:b7:02:70:fc:9f:b1:53:ef:73:fb:
         3c:37:d4:2e:e1:0f:59:19:ad:12:4a:4a:1f:05:e5:48:cd:a7:
         69:c2:e9:bd:c7:c1:d7:c2:ee:e8:f2:3b:9b:ba:f1:66:42:00:
         3c:6b:df:6d:0d:b7:24:98:3a:3a:6e:63:b3:14:4c:93:dc:08:
         6b:98:4b:dc:e6:ba:40:79:05:bf:af:48:b6:63:69:05:9f:ee:
         84:87:32:48:69:ac:2e:7e:e7:e1:0e:9f:16:74:74:ca:da:94:
         2b:8f:3c:6a:d4:0c:cf:61:7f:e1:ec:e1:48:f9:c8:59:aa:dd:
         4d:3d:47:96:cd:f2:f8:da:e9:25:ae:6f:83:d8:5d:6b:4c:44:
         d7:db:34:cf:10:85:0d:91:c8:06:92:5d:da:a4:5b:fb:6b:a4:
         2b:48:23:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj8EQBYC7azpCbnfoBzW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw
ZmRlNTIwHhcNMjYwMzAxMTgwMTEzWhcNMjYwMzAyMTgwMTEzWjAzMTEwLwYDVQQD
Eyg5OTk2Mjc5NjFlM2EyMmYxYTdlMWE3OGM5MGE3ODUwZDNjMzZmMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFjNHRwgGJ1bLOEkuBsKNNM3mX8D
tLGHz0moTSqJKjxXb0kYmetJ5UyRU0IrdaaQ4jsNCqmkk8k664+oswgMO6+kp8pm
z/CqR0JiHwukS+FN3QGQnSEl3U50G03FblfZUWM266Mb0TibZVZaD4WY7p7+RLfW
G2Rl+ixqweQxPDvDFoSBE4qr0wJ0IN/xQa8pbDUv6R089EN6OVHst7np1ZfgA/Vh
+DiZvfK9zjJ/kLnFdFWSJXc08LszxCdJNp2xx7iIWpP7qZt/Fqmw6H9FaSQ+RerC
FA890W79fxWlToTcX45Hs/4yel7bWV1IIB29qRvW7R9H7EdF/eH82UtJAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmWJ5YeOiLxp+GnjJCnhQ08NvJ1MB8GA1UdIwQY
MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt
OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy
LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiUipi94
NuLgKdCSPeXIT0Ru5bcdlAvFzZWKvEc9v5pIRCa/XNVn6CZdKc137h5gJHC4PWm1
SLtjOjZwAz0zndPaObjm7uFmfA80cpcGwbf9/yDYSKmatoj4eQDblqZS7F+3AnD8
n7FT73P7PDfULuEPWRmtEkpKHwXlSM2nacLpvcfB18Lu6PI7m7rxZkIAPGvfbQ23
JJg6Om5jsxRMk9wIa5hL3Oa6QHkFv69ItmNpBZ/uhIcySGmsLn7n4Q6fFnR0ytqU
K488atQMz2F/4ezhSPnIWardTT1Hls3y+NrpJa5vg9hda0xE19s0zxCFDZHIBpJd
2qRb+2ukK0gjNg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:50 2026 by rpki-client