Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          C9AaulEv2nt3PCCxBODB47fRH4qrvdeVSxVlUREK7o4=
Subject key identifier:   EA:30:8F:02:AC:F4:E2:C4:DB:7A:55:9D:3F:07:63:48:E6:7A:51:C4
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       019CAC0FB8A30447A5FFD00F546172A1505B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          184F
Signing time:             Mon 02 Mar 2026 01:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:37 +0000
Files and hashes:         1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
                          2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
                          3: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
                          4: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
                          5: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: vDva3PN6fAHGnE9OJ0woHRKB5UYQXjLl2bipafKY5nk=)
                          6: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:b8:a3:04:47:a5:ff:d0:0f:54:61:72:a1:50:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Mar  2 01:00:37 2026 GMT
            Not After : Mar  3 01:00:37 2026 GMT
        Subject: CN=ea308f02acf4e2c4db7a559d3f076348e67a51c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:01:30:85:8c:ea:4f:5c:42:4f:d4:8b:44:
                    c2:5f:11:16:ad:1a:84:3d:e4:dc:de:2c:2f:d2:c9:
                    69:24:57:ad:54:9e:e5:9a:32:fa:57:88:c3:f3:29:
                    58:08:72:a8:71:2c:b8:14:81:4e:71:bd:82:b9:6b:
                    ff:21:d6:b1:6b:2e:2a:74:b0:da:94:fa:c3:d6:22:
                    13:b8:a8:89:23:26:70:f2:b9:e4:63:11:4d:90:da:
                    a7:4f:1c:a7:af:00:09:c8:45:ea:5e:7a:47:50:dd:
                    06:3f:7e:a9:c0:19:a1:e6:3e:93:a7:82:52:1a:64:
                    41:e9:17:31:85:a0:f5:dd:76:05:13:74:52:06:3a:
                    b3:9d:40:6a:aa:fe:6c:38:e3:02:b0:f8:41:b9:09:
                    63:bc:60:24:df:d3:a9:59:13:6e:23:f8:8d:17:4c:
                    c1:e6:78:fb:6b:69:77:98:71:1c:de:a4:67:c7:b4:
                    c4:0c:00:7e:4a:d9:64:c7:f3:16:d6:6c:12:a9:d0:
                    0b:d2:1a:70:7a:89:df:30:a0:61:c5:15:88:4d:ec:
                    88:a2:ae:3a:7c:f6:14:0b:f0:8e:3e:b5:4a:04:c1:
                    c4:c2:52:ca:42:58:df:da:6f:6d:b9:63:6b:59:80:
                    30:af:e4:0e:a9:c6:7c:69:86:ab:e8:47:08:ff:38:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:30:8F:02:AC:F4:E2:C4:DB:7A:55:9D:3F:07:63:48:E6:7A:51:C4
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:06:ed:89:6a:8d:c4:b8:e4:6a:53:7b:79:25:50:93:1b:27:
         55:4a:9c:66:e2:04:3f:39:b8:97:7c:2c:cc:e5:5f:b9:02:f7:
         33:d4:8b:20:d8:33:53:04:c0:60:85:50:4d:74:fd:3b:08:06:
         48:5e:e4:b7:8b:a1:37:38:c1:d7:59:71:2c:f0:9e:af:c1:bc:
         90:2f:91:75:4d:25:66:c1:11:68:a1:8f:5d:0b:c4:ec:0b:ec:
         ae:e8:67:a5:10:cc:c3:ca:73:63:46:a4:c2:0c:84:e7:7a:39:
         17:bf:ab:25:88:ce:aa:03:f8:9a:ca:bc:18:9c:62:c9:88:be:
         f3:2d:62:35:1c:6a:80:73:38:09:be:ec:1e:be:3b:54:d7:96:
         d4:f8:9f:c9:81:11:ed:9e:a2:4d:1e:b4:9e:3b:5c:07:6c:e1:
         d6:f1:37:c7:26:24:14:5b:64:3f:3b:77:9f:9a:f7:27:88:be:
         30:71:0c:59:37:f3:8a:49:bd:b8:3f:eb:d4:3d:f2:31:d6:12:
         3f:dc:e8:03:ab:15:0f:73:dd:f7:4a:35:db:7e:89:9d:8f:6f:
         cc:ba:3e:0c:e3:52:e3:97:46:a2:4a:96:28:8b:be:fe:a9:00:
         be:a4:17:65:67:f3:8a:92:3a:50:e3:25:1d:ba:6d:e8:29:ac:
         17:47:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:53 2026 by rpki-client