Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          QaGyLFvJQsp0J15CtySFNr1hjy22I/Rfq0YTQ7NhEPI=
Subject key identifier:   70:96:2D:32:19:FD:F5:20:F2:59:C0:9D:5F:CB:D6:E8:3C:A3:60:1C
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019CABD9D09ABF76B103DB357FF46F3A3A8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 00:01:44 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:44 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:44 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: 9qkYnLzsSjvjB/AtaxMzWgNtlbgaB/QKt6ByAlcj0qI=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:d0:9a:bf:76:b1:03:db:35:7f:f4:6f:3a:3a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Mar  2 00:01:44 2026 GMT
            Not After : Mar  3 00:01:44 2026 GMT
        Subject: CN=70962d3219fdf520f259c09d5fcbd6e83ca3601c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:71:80:77:d7:c3:30:9e:be:97:b8:8e:05:
                    07:4b:3c:14:52:de:6f:b8:5f:92:d6:46:09:a5:f6:
                    a3:45:3c:de:03:66:3d:f6:06:1e:f6:aa:77:c7:ff:
                    60:f2:5b:09:29:9c:65:94:5d:c0:ce:93:b0:36:a1:
                    88:73:76:19:a7:a8:54:d1:90:97:71:e4:bd:92:7d:
                    79:a3:a8:5a:a1:07:5b:32:30:a2:c3:a8:6e:4f:b6:
                    6b:18:2b:53:e4:e1:da:52:c7:16:16:3d:1f:01:11:
                    ac:fe:1d:4a:2b:f7:88:11:ac:f3:71:e0:b5:1b:b6:
                    dd:ec:a1:83:9a:9e:6a:07:5e:dc:58:34:56:26:0d:
                    e4:5b:be:d5:66:e6:8c:16:5b:6d:dd:6d:94:46:61:
                    3a:d7:ae:19:6f:e4:3b:45:b0:68:bf:1b:3c:eb:04:
                    6f:d4:e6:42:79:7f:de:37:dd:a9:64:7b:0c:e7:77:
                    51:4f:75:ea:6b:32:9e:85:fb:d2:65:36:19:a0:d4:
                    7d:e1:f9:1b:12:be:09:a4:06:40:68:5c:87:88:9c:
                    03:a9:85:fd:88:85:0f:fb:2b:71:00:75:df:19:9c:
                    b5:85:29:93:5c:51:9d:fa:8a:36:d2:70:3c:21:e3:
                    09:c8:d3:5c:33:0f:c9:68:cb:be:b0:18:33:28:a4:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:2D:32:19:FD:F5:20:F2:59:C0:9D:5F:CB:D6:E8:3C:A3:60:1C
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:38:52:4c:b0:f7:e0:4b:4e:55:0c:40:c0:f9:56:df:f4:16:
         90:5f:36:99:8d:35:ec:62:c2:39:b8:fc:58:1e:5e:d4:94:ec:
         6d:be:74:17:ff:9a:99:bf:c3:35:c3:7c:08:fc:a4:8f:8a:c5:
         88:e7:20:e4:7d:09:56:f0:d8:85:cc:5f:ad:f4:98:41:2e:cc:
         c5:37:f3:6e:8b:89:18:d6:f6:fa:00:56:82:a1:43:66:b9:de:
         98:44:35:fa:c1:b2:b5:ec:5b:31:90:6d:24:3c:00:59:57:98:
         d1:ba:0c:93:b9:94:51:29:93:ef:3b:7f:c4:79:59:dd:e3:98:
         52:ee:ec:54:a2:22:52:e2:04:0d:16:aa:2d:e7:eb:ec:bc:6d:
         3a:96:6d:5a:c2:fb:ff:f9:d3:ee:25:e9:6a:e1:45:67:77:20:
         f0:1c:0e:62:e3:5b:07:f8:f6:d2:4f:5a:3c:d4:78:61:66:df:
         51:7a:ae:6c:fa:76:04:a9:e2:70:75:df:20:d7:ad:2a:e2:83:
         65:6c:e4:82:3c:07:6e:2e:c2:6e:66:51:4a:d3:35:39:11:f8:
         f1:ab:a5:44:65:a7:29:0b:4f:2e:a8:91:19:79:47:45:58:45:
         16:25:a8:01:e8:c2:1d:20:2d:41:4c:e1:d4:4c:2a:e3:c4:9f:
         c4:e5:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:39 2026 by rpki-client