Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          ipIsHTjWAtRLXTASpy03Kpj43bEHUybYe3h+asDtnfc=
Subject key identifier:   84:41:67:CE:EA:87:9B:EC:5A:6C:D8:24:B3:88:82:96:05:15:BD:5C
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019CAAFD5A315DFED690EF4F4AB197C223B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          184D
Signing time:             Sun 01 Mar 2026 20:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:56 +0000
Files and hashes:         1: JiEsZ1zOe46gzADySdG16eZ5Sjo.roa (hash: 0bq0qa1f8p4Ial4yz+WAIFxn5n2T06ajuz5dHOKo9Bg=)
                          2: ZmDQJclFbfRowgpnHRptrYIeIug.roa (hash: H/7KqBnapWq4unhs3UjmS/EFy+upD+qehXGAkF2UTwA=)
                          3: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: Xj4Ab9RwQq+WfFxll9TUZt3ryAM/qcISIwvaOoK1vkA=)
                          4: gX_bo7WycAyP4eHEuchQhpnD15s.roa (hash: 4TJL/ac+L1uxUdH7FW4vMCHyhAZJAL3RXJ9Pg1etDtA=)
                          5: yNoIji7kPj6SkrPhrYc1VI7PgwE.roa (hash: y0iJCdo0OgTZ1Mu1ZduXdjf6TefpBi+JC2BMHyoKy/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:5a:31:5d:fe:d6:90:ef:4f:4a:b1:97:c2:23:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Mar  1 20:00:56 2026 GMT
            Not After : Mar  2 20:00:56 2026 GMT
        Subject: CN=844167ceea879bec5a6cd824b38882960515bd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:ee:72:3b:92:2a:ab:80:c0:c2:ed:18:9f:
                    fb:0e:c6:de:ba:c8:f9:8d:e1:fd:2d:78:17:af:85:
                    66:96:69:d8:bd:a5:5f:74:06:53:6e:b8:96:c3:32:
                    ae:d4:7a:d9:d4:31:a2:cd:68:63:8f:e3:96:a0:4a:
                    9e:98:ca:0a:a7:e2:f1:60:10:b0:d9:3b:1d:ef:8d:
                    f5:38:6b:4f:5f:d9:6a:0b:df:04:60:ee:8f:45:a6:
                    8c:18:be:f3:17:c8:61:53:e6:ff:7a:18:dd:6e:d6:
                    58:9f:3d:c8:79:63:b4:c7:cb:c6:f1:52:e1:f5:bb:
                    0d:bc:a9:54:8e:79:bf:b2:52:1a:fb:b6:e5:73:30:
                    3b:40:2e:8f:ee:83:fb:78:2c:94:f1:10:61:2f:ab:
                    83:f8:2f:60:d3:00:0b:2f:de:09:1a:a2:a8:43:00:
                    c9:24:d4:49:fe:c5:0f:36:96:a4:7f:27:95:e9:ab:
                    86:02:e3:7e:06:ef:60:d9:92:28:67:f4:92:52:22:
                    95:6e:e7:6e:c6:f6:40:d0:ab:eb:ac:ec:cc:8e:b6:
                    68:44:e9:17:94:2a:e6:a0:bb:ec:fd:19:ac:16:96:
                    ec:c1:e6:15:b0:11:60:ef:0c:a9:79:12:93:0b:8b:
                    57:c1:df:6d:06:db:08:54:cb:57:07:ed:c7:de:15:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:41:67:CE:EA:87:9B:EC:5A:6C:D8:24:B3:88:82:96:05:15:BD:5C
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:0e:49:90:59:28:d2:db:03:16:86:36:d0:01:66:5f:86:
         26:85:63:0f:cc:f0:68:20:dc:4a:85:44:86:b2:52:d4:26:40:
         ba:e1:50:11:55:6e:84:03:62:1e:42:2c:50:63:f4:4a:17:b7:
         2a:17:af:cf:ec:ae:58:6a:f1:62:70:50:e6:46:39:54:1e:a9:
         ea:c7:22:95:4b:0d:e2:70:9e:82:26:a7:c1:a5:95:77:d7:27:
         07:f2:b6:02:7a:db:ce:a5:88:ef:d7:a1:ee:53:92:ae:59:f7:
         c5:3c:2d:f1:44:3a:cc:e4:06:22:04:97:ed:66:1c:7c:53:eb:
         de:33:0c:89:fc:0d:ef:73:66:4e:35:3e:f7:4a:19:bc:5a:ce:
         13:d1:b3:e3:ca:31:18:35:a4:15:d7:77:83:38:6b:9a:6b:aa:
         46:17:65:ea:6f:d3:ad:51:92:06:a6:f3:07:98:76:1e:5a:f3:
         cc:a8:63:51:d9:73:7e:83:1b:1a:86:c5:f7:76:3e:a3:27:dc:
         d1:e2:59:da:cf:67:b8:4c:03:93:f8:e7:49:2b:ce:d6:59:06:
         82:31:3b:83:b9:a4:77:08:70:64:fc:cb:c7:b2:80:c1:d3:a2:
         a1:cd:04:a1:e8:db:1a:fd:f8:91:73:ad:87:13:1d:1d:cb:f9:
         e2:99:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:05 2026 by rpki-client