Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          KA8j1HXhRJhsI5ZC0eOT+c1+NJGnhmkaMcdefU1rV+s=
Subject key identifier:   20:B8:67:BD:49:0B:6E:89:D0:AA:D8:A5:56:A4:2D:00:CD:4D:B1:11
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       019CAAFD3747009C1AF02D146B56DDAF629D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 20:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:47 +0000
Files and hashes:         1: HqmBNUdmEip8S3rZUAEXbYeiMDE.roa (hash: g5QXvRrB37nz+UezkbR2qYuv3hfWDz55OyBzCv5F3cs=)
                          2: gn4jpmqvHPR6rBGCBxZHXL4XW7Q.roa (hash: zEyp0ISXI99Ue+kTnL8hqnoTwJyraQRvQCykId/nY+Q=)
                          3: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: g7u37JNmBRBd0p+exij15iHZR6oIAkqKWnty9Lj4ldk=)
                          4: slzLq75d_2U3gzXMediesPc1y_A.roa (hash: o+7OLqNyBmfA/DpIWOrqjBa7X/0F+NH08pgpTA/9P1E=)
                          5: vFoLoBh7oWb6usXmjNjvyipGBRI.roa (hash: 0j1EDxGflRhorx1jgVNGqb1+St0JzyMh9AI0pVLut9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:37:47:00:9c:1a:f0:2d:14:6b:56:dd:af:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Mar  1 20:00:47 2026 GMT
            Not After : Mar  2 20:00:47 2026 GMT
        Subject: CN=20b867bd490b6e89d0aad8a556a42d00cd4db111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:8e:99:66:cc:a0:46:a3:20:6f:d0:86:71:
                    03:ae:f1:3a:b5:aa:17:c5:fb:69:f4:18:f4:89:40:
                    7b:03:b1:f1:61:de:45:37:00:7b:21:48:6a:45:0d:
                    73:f5:ee:24:10:b5:73:9a:38:55:4b:fb:a4:04:8e:
                    48:cc:12:81:38:7e:55:9d:60:91:55:4c:76:ab:ae:
                    b2:46:f1:24:65:6a:23:b5:a1:48:0b:bc:21:94:a0:
                    5a:d3:36:c0:8f:fd:10:84:e1:d7:b9:69:78:fe:18:
                    7c:1f:c9:ae:c3:fe:f2:75:b2:c8:59:f0:15:d0:f7:
                    b7:12:79:03:ae:ab:08:d6:43:4a:a5:33:19:c6:af:
                    3b:32:fe:6b:df:bd:87:96:f6:c4:8a:e9:16:72:e7:
                    4c:9f:36:5b:1c:38:a4:46:e3:60:cf:83:1b:9c:0e:
                    67:7f:20:39:5b:67:6b:be:01:1b:05:ad:ec:60:3f:
                    60:41:9f:9f:4f:c7:93:23:42:dd:81:18:ba:c9:f9:
                    fe:6c:be:aa:4a:22:0f:ed:33:d6:f1:78:72:16:e0:
                    19:17:02:86:db:87:98:b1:25:e3:a7:80:2c:de:3a:
                    d8:3b:6f:5a:a6:ab:a3:13:ff:c0:d5:34:03:e5:87:
                    1e:f6:25:a0:5c:e4:36:00:09:9c:25:db:ad:ca:c9:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B8:67:BD:49:0B:6E:89:D0:AA:D8:A5:56:A4:2D:00:CD:4D:B1:11
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2e:30:c7:bb:df:33:c6:b8:98:c9:a2:39:54:07:f4:70:79:
         47:1d:ef:3e:da:cc:43:bd:c1:86:bd:5c:17:8e:bb:54:2a:f7:
         cf:49:d7:a6:3c:f8:18:bd:ec:eb:16:c1:24:ba:59:3f:b9:4e:
         cf:bb:a8:82:6e:61:35:94:18:e5:12:17:99:da:27:28:8f:2b:
         e6:fc:c3:1c:f4:f8:51:21:6f:02:e2:2a:03:ee:62:a1:d4:fe:
         60:ac:68:b1:f1:02:60:ab:d2:23:42:7e:27:77:1c:eb:55:79:
         bb:23:3e:42:6f:8c:6d:6b:8a:db:4f:5b:dd:95:79:12:20:14:
         46:b0:0e:e4:30:3b:19:b2:69:87:97:88:89:0d:45:7d:25:c3:
         99:32:3d:62:5f:30:27:3d:56:ad:58:65:ce:92:a0:e4:92:c3:
         32:d6:ff:54:01:37:37:32:4e:21:75:25:83:d9:67:31:20:72:
         df:ab:6f:17:93:48:2b:12:e2:8a:45:94:f9:3f:bb:2b:40:70:
         f1:3a:e1:7a:60:b9:44:60:f4:7b:ac:e2:c7:8b:cf:9c:00:94:
         8f:75:fa:14:99:53:a1:9e:6f:00:2f:20:b8:b5:7f:c5:6c:1b:
         32:d3:ad:87:90:46:c6:03:ed:5a:b8:a4:da:80:f9:d7:33:9d:
         df:f9:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:53 2026 by rpki-client