Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File:                     _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier:          UxL+Ge/DgCcH0SLBCr1Z7Yi4Qc4Z51Xgs+4IxOY624Y=
Subject key identifier:   FC:D7:7D:1F:82:B4:07:02:29:0C:04:DB:D5:59:42:06:49:88:70:D8
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer:       /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial:       019CADFEA8E91949FAE8F5C4688BBB087C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 10:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 10:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 10:01:13 +0000
Files and hashes:         1: XObKO3ltJwjAm9or7k6NYiYPt_c.roa (hash: 7lZy4Wbsa7zNjERhyll32LTZE7YzAMI3aWuq/di2LaU=)
                          2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: 7r/gsfo51rh9UlOzYkUgegSOXMRovSqxp36alwQ53jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:a8:e9:19:49:fa:e8:f5:c4:68:8b:bb:08:7c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
        Validity
            Not Before: Mar  2 10:01:13 2026 GMT
            Not After : Mar  3 10:01:13 2026 GMT
        Subject: CN=fcd77d1f82b40702290c04dbd5594206498870d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:04:ff:f9:b6:ec:39:c6:d7:85:fd:19:9d:
                    38:ac:75:aa:83:67:a6:0d:21:11:03:4d:0e:b2:81:
                    67:02:06:ed:b8:0c:5f:db:b2:26:4b:12:fc:a1:aa:
                    f1:f4:df:08:b0:7e:99:4a:a7:32:71:6c:99:03:ac:
                    c0:13:cd:ed:53:58:c9:76:63:15:a5:1a:d9:2c:97:
                    fe:aa:f9:64:72:6f:a5:1d:80:e7:42:14:1c:54:32:
                    01:c2:3c:a8:db:f1:94:9f:17:4b:4c:6f:52:a8:8c:
                    36:35:ed:a5:ce:52:e9:e0:cf:fa:3d:16:e8:11:f7:
                    12:3d:50:e9:72:60:2b:6b:46:7e:49:d4:3f:60:e9:
                    5b:f3:bb:59:35:15:21:65:da:d4:8b:21:a5:21:e2:
                    66:19:c2:c4:ea:c2:1c:46:c2:da:6a:2e:6d:fa:be:
                    12:23:78:de:46:3e:95:33:21:de:72:a7:1f:9d:e6:
                    45:50:54:ee:0b:93:cd:57:bb:0a:42:60:7e:c6:33:
                    a2:7b:12:71:4c:69:b4:d5:42:dd:b9:d7:e1:62:9a:
                    58:7e:89:c9:ee:02:27:54:d8:ed:c8:af:d5:40:8b:
                    e1:80:5b:25:0a:00:a1:91:7a:dd:8e:49:4b:ed:ae:
                    3e:96:e9:b8:16:11:18:66:16:bc:7f:ba:24:d9:fe:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:7D:1F:82:B4:07:02:29:0C:04:DB:D5:59:42:06:49:88:70:D8
            X509v3 Authority Key Identifier:
                keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:67:4e:a7:ee:fa:47:d8:ef:df:8f:48:0c:8b:64:2b:7e:7e:
         d7:c3:68:16:4a:6d:5c:5d:f3:51:f0:4c:97:b4:2f:21:9a:3e:
         98:83:e3:61:55:b2:9f:86:23:9f:91:68:73:3c:31:ef:22:9c:
         b6:c0:f0:2c:76:48:44:52:ab:54:e5:5f:d8:2b:23:27:78:7d:
         a3:5a:e5:8d:7c:72:4d:33:73:07:be:f3:39:a0:db:d9:87:73:
         d0:36:63:0a:81:18:d0:ff:b1:ef:42:21:16:ad:8e:aa:96:c6:
         b3:4f:1d:b9:5a:b5:51:a7:ed:36:9c:4d:ac:9b:fa:14:25:4c:
         d9:f3:e6:cc:19:0c:1c:40:4d:9c:fb:de:b0:c8:e7:3d:5d:eb:
         99:0c:2a:63:61:1c:9d:5f:d3:1f:37:d3:7c:e1:1d:da:10:f5:
         a6:62:2d:63:e2:aa:91:6b:65:13:ab:e8:75:ec:b1:97:81:09:
         14:ec:86:70:39:05:5b:de:01:a0:89:33:cc:4b:6a:7c:ac:57:
         f1:57:cf:db:da:c2:53:45:6b:a2:bd:c1:cb:b6:32:43:1b:86:
         61:d9:cd:dc:d8:ce:e0:dc:cd:3d:8c:78:fc:2a:44:70:8d:3c:
         07:14:45:22:9a:dc:b1:b1:ed:20:b9:ac:71:39:25:81:8d:51:
         3e:98:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:30 2026 by rpki-client