Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          3Q7Z21rb0LsTeDpJz+axH5uiHDJlbDYkGCSzBqH+sBQ=
Subject key identifier:   24:17:AA:00:F7:D8:D1:EF:79:16:95:63:3C:F5:98:08:05:5E:1C:CC
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019CABD9EA51EFF12DF808EBC2B54265D92B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 00:01:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:50 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:50 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: nuatMkQc8oTJN+HoxBERm9G3o8ch5pzHG/kV0aOAShQ=)
                          2: 7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa (hash: N75hWXU4tOfgUVgJErnnaShCfMougCipyHaXnV/7ZoQ=)
                          3: ojQoLkOKYxW9nl-zMiY8owgWzH8.roa (hash: pBaal272/3ElS+FK2cqrYkE2HZTuwNTmpIvmWFEPo9E=)
                          4: wW5JJp_Tw5DERjslA8f06nsNm_4.roa (hash: soIoaQ26jxMV+jXruEWHSU8upxFyddMWkhBFffhBkYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:ea:51:ef:f1:2d:f8:08:eb:c2:b5:42:65:d9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Mar  2 00:01:50 2026 GMT
            Not After : Mar  3 00:01:50 2026 GMT
        Subject: CN=2417aa00f7d8d1ef791695633cf59808055e1ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:ba:a1:51:55:6d:da:9c:b8:eb:6b:3f:0f:
                    d5:d1:f4:d4:1b:33:37:21:f3:88:7f:65:5c:86:6e:
                    11:72:19:d5:dd:17:84:dd:7c:f2:e7:a8:e0:e0:21:
                    dc:3d:81:fc:f8:49:20:5b:6c:ab:82:15:89:91:a1:
                    5c:0f:a7:0d:4f:9c:07:9c:70:26:59:66:b2:c7:1f:
                    9b:76:5e:fd:fe:41:f6:64:06:42:15:a5:5d:7f:9e:
                    28:af:3c:58:5b:dd:82:82:11:3e:ea:29:06:e9:68:
                    58:68:1c:a7:c3:08:31:f8:1e:a5:fd:43:7c:e8:58:
                    70:15:dc:a8:8e:29:99:74:ad:b7:d8:9f:5c:cf:01:
                    0b:dc:06:e3:f6:37:09:ba:56:ef:59:4c:fe:0f:8c:
                    fd:67:30:db:16:a1:41:f1:31:9c:8f:e0:da:38:83:
                    30:35:54:4c:32:d8:2e:2f:82:49:c8:2e:67:51:83:
                    16:1e:7d:a9:cd:bc:10:de:57:43:ef:3a:34:90:68:
                    43:bd:6f:bb:e8:0b:81:56:42:70:37:9f:5f:ba:81:
                    31:eb:61:fa:86:37:9c:9e:ad:ee:4c:0b:89:46:84:
                    36:3f:fd:5c:e0:76:01:95:e9:f6:4a:4e:8e:8b:32:
                    79:9c:00:e5:f5:fd:a3:54:ad:11:c0:54:7b:2b:18:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:AA:00:F7:D8:D1:EF:79:16:95:63:3C:F5:98:08:05:5E:1C:CC
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:92:ba:1e:6b:eb:78:66:77:bc:ee:a1:8d:82:49:0e:53:
         15:83:69:ba:b2:b9:d1:8d:0d:d4:9f:2e:af:64:f4:1d:c9:76:
         d2:1e:db:fb:64:13:cb:4b:34:5b:2f:37:9f:97:90:8a:f5:e5:
         6f:b8:84:c2:3a:00:d2:0c:95:91:33:83:13:e9:c0:e0:37:eb:
         97:54:8e:19:d0:89:62:38:c3:28:2a:1a:74:bb:53:0a:49:62:
         3d:4c:bb:b3:99:96:1b:74:f4:1a:f1:92:5a:bc:cc:5f:79:0a:
         2b:61:51:b5:55:84:ef:94:4e:ab:2e:b0:cf:0d:a8:d7:18:0e:
         7d:77:ef:0b:c5:5d:bb:33:45:26:ae:bc:3b:de:b1:75:9f:61:
         09:44:77:58:0c:3b:ab:18:44:3b:58:f6:ee:36:be:e7:b8:d0:
         64:99:53:7b:5a:b3:9d:cc:58:a8:ae:d8:a3:59:bd:1d:ab:33:
         14:c1:c2:d8:68:47:e2:ce:e8:6d:c6:06:90:46:9a:38:0c:fc:
         da:d3:c3:e7:ee:c5:06:f0:b0:d4:ed:0b:7a:6c:21:8f:48:57:
         6b:a2:38:0c:70:e6:0d:62:1a:87:aa:cd:81:8c:bc:1f:67:f7:
         9f:63:35:1f:8f:ae:43:c0:83:c3:5b:3d:7e:3b:0f:2e:66:4a:
         98:6c:0b:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2epR7/Et+AjrwrVCZdkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1
NTIxODcwHhcNMjYwMzAyMDAwMTUwWhcNMjYwMzAzMDAwMTUwWjAzMTEwLwYDVQQD
EygyNDE3YWEwMGY3ZDhkMWVmNzkxNjk1NjMzY2Y1OTgwODA1NWUxY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5m6oVFVbdqcuOtrPw/V0fTUGzM3
IfOIf2Vchm4RchnV3ReE3Xzy56jg4CHcPYH8+EkgW2yrghWJkaFcD6cNT5wHnHAm
WWayxx+bdl79/kH2ZAZCFaVdf54orzxYW92CghE+6ikG6WhYaBynwwgx+B6l/UN8
6FhwFdyojimZdK232J9czwEL3Abj9jcJulbvWUz+D4z9ZzDbFqFB8TGcj+DaOIMw
NVRMMtguL4JJyC5nUYMWHn2pzbwQ3ldD7zo0kGhDvW+76AuBVkJwN59fuoEx62H6
hjecnq3uTAuJRoQ2P/1c4HYBlen2Sk6OizJ5nADl9f2jVK0RwFR7KxixgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQXqgD32NHveRaVYzz1mAgFXhzMMB8GA1UdIwQY
MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt
NjY5YmQxMTNhMTc4LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4
LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOv6Suh5r
63hmd7zuoY2CSQ5TFYNpurK50Y0N1J8ur2T0Hcl20h7b+2QTy0s0Wy83n5eQivXl
b7iEwjoA0gyVkTODE+nA4Dfrl1SOGdCJYjjDKCoadLtTCkliPUy7s5mWG3T0GvGS
WrzMX3kKK2FRtVWE75ROqy6wzw2o1xgOfXfvC8VduzNFJq68O96xdZ9hCUR3WAw7
qxhEO1j27ja+57jQZJlTe1qzncxYqK7Yo1m9HaszFMHC2GhH4s7obcYGkEaaOAz8
2tPD5+7FBvCw1O0Lemwhj0hXa6I4DHDmDWIah6rNgYy8H2f3n2M1H4+uQ8CDw1s9
fjsPLmZKmGwLng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:03 2026 by rpki-client