Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File:                     E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier:          KyZ8i9055qe+uIDOI5HiC/ehL+7qW8Et1vXvtwnww/g=
Subject key identifier:   2E:BB:78:15:58:82:D9:B8:24:38:C8:10:12:18:AA:26:29:BF:16:B6
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       019CAA21A7E84797DC4BE9757C22F6543821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number:          184C
Signing time:             Sun 01 Mar 2026 16:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:58 +0000
Files and hashes:         1: 0-jMAvh0Spb5-xmRErQMwSZjKoM.roa (hash: +jeSUtpRT2LXECnK0ZPglZoRmjktcmKAgTbcZjeh29w=)
                          2: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: 9LgpvINUQRsPaT9VNnONHYCLnlaFaqgWPjd44k8ms3A=)
                          3: PiYMPWiZqPKiPSxxOffNzBJuyIA.roa (hash: iYM4COezS5hiEnoLC5DueAtMJwExPCIZLeAMdYmXws0=)
                          4: VOsklXRPi5AsfytJ7h-_DeqIeyg.roa (hash: tKatxYKbmsaEuCNsIxKCmZyCQCE1Y1J4bjW+cSVHx5Q=)
                          5: tv3k8_tkXaxqUisHZsrZ24FV1-U.roa (hash: +j2LkHTfDUaDhQsNd6JulSvZcuxXP5xrCRRkIe7nNyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:a7:e8:47:97:dc:4b:e9:75:7c:22:f6:54:38:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Mar  1 16:00:58 2026 GMT
            Not After : Mar  2 16:00:58 2026 GMT
        Subject: CN=2ebb78155882d9b82438c8101218aa2629bf16b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:09:31:87:28:cf:cb:28:84:c5:96:17:ea:
                    4a:c8:ec:f1:fd:88:4e:01:59:d4:4b:30:78:b6:3e:
                    e3:cd:f7:cf:dc:bf:c9:8a:7b:14:7b:df:f5:a3:84:
                    06:32:b5:8f:7b:f3:45:44:8f:48:b5:19:5f:b7:1c:
                    7a:66:5d:d4:74:e3:aa:bb:72:9c:eb:35:53:27:d0:
                    e9:34:b8:f7:b9:2e:0c:a4:7f:d4:31:9b:fc:c8:c1:
                    66:3b:d0:1a:dc:df:03:a3:13:34:7c:01:b9:e5:94:
                    18:85:54:56:01:58:0d:bc:a0:0a:7e:29:fb:7d:d0:
                    91:0b:71:68:b9:08:2c:a7:43:7c:87:40:79:a8:fc:
                    e3:40:ef:7b:21:51:6d:7e:98:77:cb:f9:b3:11:6e:
                    61:89:db:c6:98:68:d3:f7:b8:f3:28:64:5d:d6:80:
                    99:d3:ec:f0:ef:c5:39:ff:47:86:cc:b9:4f:9c:3b:
                    d6:9b:01:6b:a2:11:28:ff:dc:23:5b:01:e1:11:26:
                    2f:e3:74:f6:04:95:81:d5:9c:18:98:a9:9a:e3:52:
                    c8:21:f4:f5:e9:5f:f9:10:e4:cc:74:10:40:b9:c2:
                    f9:51:07:10:b3:0f:79:7f:90:eb:cb:df:34:69:cf:
                    b7:d6:c4:3c:23:da:8a:63:4f:73:35:5d:6c:c8:c7:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BB:78:15:58:82:D9:B8:24:38:C8:10:12:18:AA:26:29:BF:16:B6
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cc:98:c8:1d:bd:90:65:69:d9:96:a8:24:4b:c3:52:42:c4:
         4d:2d:ec:f4:b9:e6:99:55:44:d6:a0:f7:ce:e0:96:ca:bc:ce:
         9d:34:55:14:11:ae:fb:fe:1c:cc:72:16:56:f6:f1:2f:9d:bc:
         82:28:c0:6a:52:d9:c7:1e:cd:86:c0:3c:ec:15:ff:88:39:ec:
         4d:6c:a2:0c:18:36:68:16:d3:18:71:dd:35:ee:c6:56:f4:99:
         5e:b4:69:7f:b0:87:bf:6c:38:46:e2:4d:70:63:bc:c3:dc:bc:
         30:f7:2d:56:a0:bd:cc:81:f5:60:f0:1a:73:9d:e4:fa:56:c3:
         50:73:ff:ba:27:4b:77:4f:64:c1:99:6e:f4:ed:5f:ed:48:03:
         25:17:99:79:a0:2d:8f:23:bd:e2:90:bc:a9:37:93:58:66:2d:
         32:1e:0d:3a:71:53:94:fa:94:0e:a7:7d:17:f7:2e:bc:c5:50:
         9e:bc:78:90:4c:5f:d7:82:a2:ab:f5:0d:0a:be:9b:27:90:39:
         b9:9b:a2:ed:c7:e0:99:7d:49:0a:6d:3e:64:1b:fc:17:c6:0c:
         f9:28:2b:8f:55:4a:b6:30:36:c4:20:fc:fa:ce:be:00:b8:b8:
         ee:b9:1b:be:8a:12:74:a5:42:9d:8b:50:66:58:6f:df:e0:fe:
         d9:05:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:49 2026 by rpki-client