Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          CjZvFM4B+FAa6t1m+pMmHwOKMdpe1D3XToYQYY5F0OE=
Subject key identifier:   F0:70:4E:AE:D0:1F:74:C9:28:2F:9F:30:7B:AF:F6:51:CC:55:5F:C6
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       019CAC4687554ADA747C3591F3C172DAD632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 02:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:29 +0000
Files and hashes:         1: GNmDEXAk_Y2HliZsrfR_YJwZxS4.roa (hash: q5k9K7OPxEr/ETIohhVcMQ1Er7f/1cnP4+q2GfC1RtE=)
                          2: ZbE102VRAczBwFbNm6WP3CfOeC0.roa (hash: rVoFQaYjG4H+zjgihkyFbOYOQwXJLuimbNMp54cfD9I=)
                          3: j5qNO9OtWF2RRXgNjRWTNtloj5A.roa (hash: fJCc6pLbTEzTC0FOS9YIyrBouGwIyWyYIw3gXlZ3Nek=)
                          4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: DTh0tbAaKBqOd4Fzu09/rS8ZSo4BlzwawbEhd879k5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:87:55:4a:da:74:7c:35:91:f3:c1:72:da:d6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Mar  2 02:00:29 2026 GMT
            Not After : Mar  3 02:00:29 2026 GMT
        Subject: CN=f0704eaed01f74c9282f9f307baff651cc555fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:fb:48:e0:0d:26:7b:b5:92:b8:b7:2d:f8:
                    6e:9f:4b:28:90:8a:6a:84:25:5d:db:ba:45:a7:78:
                    a4:ed:70:bf:c8:17:45:5e:eb:d8:ef:f4:dd:a1:a0:
                    53:64:fc:a9:10:77:fe:31:30:d3:b2:ca:c6:44:f7:
                    70:e7:3b:cd:62:82:54:ae:81:bc:76:d7:f9:da:a6:
                    91:e9:ba:f8:01:f9:1a:8b:78:94:e1:c4:77:47:e7:
                    ec:6e:86:06:d4:2b:ec:52:61:a9:c1:a8:70:da:d9:
                    8e:99:67:1e:c7:df:3a:0a:9a:e1:55:1b:3d:b8:db:
                    e1:8e:ed:6c:0a:22:42:fb:f4:94:d9:e9:51:1f:54:
                    d5:17:b5:2f:ce:e8:89:a2:e4:13:fd:69:02:f9:83:
                    99:39:80:53:dc:f7:6e:8b:4c:5a:f0:ed:c8:97:2c:
                    db:36:b6:e4:b7:f2:05:87:01:8c:ee:a4:22:8c:78:
                    57:cd:60:0d:db:24:b8:71:af:a9:4c:f6:a0:9d:11:
                    41:dc:80:7a:1f:d3:df:76:dd:8f:d0:e5:98:63:ac:
                    43:a1:3c:39:64:e8:e6:09:17:47:74:1f:d6:a4:d9:
                    b5:67:fc:86:ca:33:18:4a:11:30:fa:89:40:5f:a2:
                    84:bc:04:f9:3f:77:75:e6:62:cc:d9:11:fe:2c:4a:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:70:4E:AE:D0:1F:74:C9:28:2F:9F:30:7B:AF:F6:51:CC:55:5F:C6
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:6b:b4:08:92:69:bf:73:c7:9b:72:f8:a0:10:62:a5:62:
         eb:07:77:10:45:55:8d:df:6a:78:0d:b2:74:5a:37:56:2f:d1:
         4f:90:9e:8c:49:97:18:e4:6d:60:c4:5e:c1:47:cc:e4:6e:34:
         00:4f:79:10:03:b2:1b:ed:61:67:9b:53:4f:ca:69:6f:ad:c6:
         7b:64:25:04:63:3a:40:16:bb:82:3d:b6:33:be:6d:8a:af:8b:
         b8:f2:bd:6b:a2:8b:0a:b7:ee:49:5f:6d:72:6c:5f:bb:bd:99:
         5b:b1:10:e7:1d:db:b2:ff:a1:07:9c:6b:ae:18:89:29:ec:9f:
         8b:88:0f:a2:22:bb:a8:64:45:b1:89:8a:08:f7:6f:2c:36:b0:
         df:42:52:b2:1d:63:e8:48:fd:80:0b:24:c1:63:1c:6a:8c:86:
         1c:0d:a5:ce:75:ba:d1:72:97:80:f5:41:39:e8:7f:d1:06:8f:
         21:05:1a:55:d1:cf:b3:0d:df:45:b7:83:c8:c7:a2:44:11:9c:
         e4:e1:0d:52:15:f9:88:ea:4b:c1:91:4a:b8:e7:b6:a7:f7:35:
         1f:f1:12:20:f9:e1:2e:a4:98:ba:12:4c:e7:e6:7b:30:d3:95:
         7e:c7:5d:4c:6f:b0:3f:6b:b1:1c:b9:79:ff:ea:4c:b4:87:eb:
         6f:37:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:59 2026 by rpki-client