Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File:                     i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier:          sSIzRlSajshEER9a1yiRhzyEu666I22O10HWph/tCmA=
Subject key identifier:   79:87:B8:A7:C5:22:56:BF:04:C1:57:8B:E8:14:30:3A:E8:15:66:CE
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer:       /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial:       019CADC768FFE97218C430B27E716EC46CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number:          184D
Signing time:             Mon 02 Mar 2026 09:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 09:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 09:00:52 +0000
Files and hashes:         1: Ppo8zp5LmchB33jNrvk9bBT1gBY.roa (hash: p3Wx4W4uCna+Td0Px+Vvc7pZpjBuiRji7FFkTSU5prU=)
                          2: duWHZ-CeDHIbUSzbwLn28H4vnFc.roa (hash: w27Sswnxv1wh5tfU1Ar9hgQLBqzZqJ25XGKVgG2Pay0=)
                          3: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: JhdIlYGpQb8lx2o6JtQuLNgFwH+aO77a6auzMwv1n94=)
                          4: scj5x70Gpie_2m_MbNpS0yxW0PA.roa (hash: xdd0ky7p83pGagQ2KCc7J8UUk4/z8bH4jI5qOSExDH8=)
                          5: yvC5GCH-pTygTs-vRowkL00kGjE.roa (hash: hEhRSBD6guGphEmbPVAtRhayR3mku9QTkifvmPQwCHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:68:ff:e9:72:18:c4:30:b2:7e:71:6e:c4:6c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
        Validity
            Not Before: Mar  2 09:00:52 2026 GMT
            Not After : Mar  3 09:00:52 2026 GMT
        Subject: CN=7987b8a7c52256bf04c1578be814303ae81566ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b4:52:b0:5a:f0:8a:ed:4d:07:ac:9f:7d:07:
                    e6:88:1a:62:4a:e8:f9:62:fe:ba:32:05:84:91:9f:
                    ce:4d:77:0c:1e:44:1c:e9:59:92:47:34:ef:d4:16:
                    c6:a0:33:6e:89:f1:0d:67:96:a0:e5:d6:ac:69:79:
                    f0:65:4c:9b:54:25:5a:5f:03:ca:84:b5:06:07:15:
                    a6:61:a3:ed:57:f2:9d:79:95:8d:07:d1:a5:2f:c7:
                    e7:00:d7:e4:9f:1f:87:58:cd:40:2f:fb:d3:32:c2:
                    cb:79:8e:ba:02:0f:3c:03:89:a6:d6:9a:c2:b9:5c:
                    39:d7:04:7e:2d:9f:4c:b8:0a:c1:4a:80:83:69:6d:
                    96:8f:1c:26:e4:7a:09:bb:b1:8e:ae:5c:cc:2e:de:
                    16:4a:bc:82:c2:34:81:b7:f1:70:24:34:11:80:38:
                    a8:9d:b7:52:a8:8e:83:7e:de:bd:30:a6:74:1b:b4:
                    74:40:63:e5:50:35:99:e4:6c:69:3f:48:1f:60:11:
                    3d:06:7d:9c:15:44:fa:a0:be:f8:48:7d:2d:ff:30:
                    da:d6:77:3d:a0:a0:99:ab:70:cf:58:ba:24:35:0a:
                    2a:af:62:6e:61:12:11:79:a8:cd:44:33:18:9e:8f:
                    d7:f9:f5:c6:b2:3b:1d:59:9b:18:94:ab:2e:45:e4:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:B8:A7:C5:22:56:BF:04:C1:57:8B:E8:14:30:3A:E8:15:66:CE
            X509v3 Authority Key Identifier:
                keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:f5:fd:5c:aa:a5:d6:84:39:47:6c:8d:ca:fa:ab:94:29:
         dd:c9:53:03:a9:17:42:46:0e:f5:f3:f5:2f:36:fa:ac:e1:0b:
         cf:cc:18:7b:74:f9:66:fa:98:c7:c2:51:4d:03:7a:9f:78:f2:
         c9:27:6e:68:75:dd:94:ac:07:3f:90:90:f2:b9:37:1d:2a:e1:
         f7:48:f5:2f:42:47:7e:e7:2d:9a:f7:93:67:9d:a2:33:0c:46:
         14:9a:e9:21:17:44:49:16:c7:8e:8a:dd:b2:6a:0f:24:45:c1:
         13:3e:cf:82:06:47:39:6b:fc:56:61:e6:30:75:e9:08:20:ad:
         0e:ad:73:fb:71:2e:9c:1f:fb:33:7a:c1:4a:7e:45:ed:b8:b1:
         40:9d:e0:92:5a:9f:2d:48:02:bb:37:a1:99:de:5b:e0:1a:83:
         82:86:25:95:e5:2f:6f:24:00:17:35:5c:76:e8:48:a2:b6:0f:
         21:98:e8:eb:cc:af:ad:76:84:1a:ec:54:75:64:55:3a:45:d8:
         47:50:d7:0a:e3:91:4b:af:19:4b:8f:78:bc:c7:ea:10:a0:9a:
         ea:2e:38:0f:bd:d1:40:88:68:e9:50:ca:8c:88:ca:1d:5d:5e:
         a0:07:16:df:58:dc:4d:da:25:55:f2:87:8f:7d:b4:45:3e:ff:
         b8:b0:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:28 2026 by rpki-client