Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          guRSTNcvmthQW4oloT5LVEELRqVhfN9MLTMrcNRhfdc=
Subject key identifier:   E2:A1:A4:28:D0:AD:1A:28:63:2A:D1:CC:4D:77:98:A7:D4:73:61:80
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019CAE6C4D2225B967A564CE412816E4BC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 12:00:59 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:59 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:59 +0000
Files and hashes:         1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: zKwybDOQE0K7NcqGY7uHjI1NNrIx7fOiJV+Tsql8lWg=)
                          3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=)
                          4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=)
                          5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=)
                          6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:4d:22:25:b9:67:a5:64:ce:41:28:16:e4:bc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Mar  2 12:00:59 2026 GMT
            Not After : Mar  3 12:00:59 2026 GMT
        Subject: CN=e2a1a428d0ad1a28632ad1cc4d7798a7d4736180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:3e:33:5a:80:10:32:0b:e0:e0:5e:66:d4:
                    12:68:97:75:58:47:aa:0a:bf:e3:a9:e3:15:77:66:
                    6e:aa:0a:0a:67:ee:cf:eb:1b:ee:91:77:1c:ee:86:
                    af:3a:ba:c4:9a:81:c9:fa:ed:5a:73:3b:2e:59:6e:
                    ab:b1:eb:54:91:d7:29:20:c3:80:cb:54:d9:b2:2b:
                    02:eb:4c:0b:70:37:c4:ad:09:d3:bd:32:50:99:0e:
                    5b:46:63:69:cb:c0:64:14:81:2f:af:da:50:26:a2:
                    2a:68:ad:ab:be:05:df:7f:31:54:51:68:4f:36:91:
                    05:21:cc:ea:39:cb:51:08:11:49:f5:b5:dc:b8:88:
                    8d:ac:91:3e:dc:3d:68:17:f8:eb:21:0f:b8:98:7d:
                    09:d0:4e:ee:b2:8a:aa:df:b8:5e:cc:a1:e2:3e:8a:
                    4d:03:16:26:83:f1:a9:6f:2d:15:6c:f6:c1:b1:5c:
                    4f:03:28:0c:8f:ee:51:64:a2:50:2e:d3:5d:9c:ff:
                    cb:59:35:61:fd:0e:9d:46:8b:14:d2:10:ff:c1:f3:
                    11:f2:c2:08:e5:b6:20:f2:bc:72:05:6a:99:6e:a8:
                    df:b0:fd:23:08:ba:5d:d2:19:a0:0c:c7:30:d4:7e:
                    c2:40:8f:59:f9:31:f0:70:1c:dc:cd:d7:f6:3a:35:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A1:A4:28:D0:AD:1A:28:63:2A:D1:CC:4D:77:98:A7:D4:73:61:80
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:5b:07:41:68:df:c5:31:5a:b7:98:4b:01:fe:27:f6:50:
         1c:45:e9:63:35:e2:85:9a:07:52:88:be:64:aa:86:b0:8e:2e:
         7d:b4:92:43:70:73:e0:29:02:a0:4a:35:8f:0f:cf:ba:35:98:
         c0:ad:61:6f:04:9c:5a:e2:30:bc:94:06:4d:4d:55:84:f8:70:
         f4:47:15:95:05:29:59:45:ec:c4:4c:ca:a5:40:2a:80:a4:5a:
         31:f2:e8:64:e4:9f:53:75:92:75:88:ab:52:ad:ef:28:d5:94:
         3d:4a:c9:6c:95:dc:43:cd:81:e2:df:84:64:29:50:2e:dc:94:
         57:03:31:07:ee:8b:6a:7a:85:2a:f5:89:fd:0c:80:5d:62:6f:
         47:d4:50:11:10:57:33:73:59:b7:6e:bc:53:4c:3e:63:2f:91:
         f4:ff:5d:0e:28:0e:d2:a3:0a:4a:6d:b0:3d:2d:ad:52:d9:4f:
         be:3e:b5:a0:bf:57:a1:6f:6f:24:97:2a:fe:31:7f:7b:a1:d1:
         bc:b5:cb:5d:71:81:4a:18:c3:1c:0f:c6:f8:bc:d6:31:94:90:
         9f:14:bd:3e:ba:c4:70:3a:e5:bb:89:98:0b:15:84:03:95:86:
         bf:3f:f0:4c:0d:ea:91:27:1c:89:79:c4:df:9f:85:c9:4f:a0:
         de:b8:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:53 2026 by rpki-client