Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          vsGfQnF8oUVPn45cQ8DPv3Frru5aqILoStmKkKcFmog=
Subject key identifier:   CF:6B:6D:49:20:D7:0A:10:BF:26:1E:0C:39:A0:3D:38:56:CB:45:97
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       019CABD91BDA47F822CB124E96D0BF2ADB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 00:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:58 +0000
Files and hashes:         1: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: IQf6yQwST5fRh1xaMZSiXUn712WXfPXmq8dOzai/SFI=)
                          2: rBb-Zp2DN1YryszXlTcGsxUi8kg.roa (hash: VjavbSWKLaeBoYTEkUDvu679eNkgyVWO00COvRWyhp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:1b:da:47:f8:22:cb:12:4e:96:d0:bf:2a:db:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Mar  2 00:00:58 2026 GMT
            Not After : Mar  3 00:00:58 2026 GMT
        Subject: CN=cf6b6d4920d70a10bf261e0c39a03d3856cb4597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:a2:c5:d2:74:cd:2a:ac:af:64:10:d2:da:
                    7f:4f:22:f7:bc:68:05:c3:84:c6:6b:6e:25:9d:b0:
                    37:c1:19:07:c8:06:1c:11:df:fa:fc:9f:33:d8:14:
                    6e:d0:76:bb:1b:5c:f9:4a:5f:87:d3:dc:df:93:fd:
                    70:6c:6e:3a:68:d1:6f:68:32:19:9a:7c:05:7c:fe:
                    3d:62:7a:ce:6c:e6:8e:7b:a6:55:c5:d8:03:ec:5c:
                    99:ad:5b:2a:e8:92:23:77:12:94:c0:31:6e:a7:d4:
                    7c:85:b8:82:17:14:39:a5:91:20:e5:d7:2e:8a:e9:
                    18:e4:db:81:5e:63:f2:bb:73:f8:4a:1f:73:40:c0:
                    58:a5:2a:12:35:25:1d:0e:7f:2c:2b:41:e1:99:53:
                    2c:f3:d3:ab:c3:c3:6e:7f:bc:7e:a5:1f:f0:15:b7:
                    95:eb:1b:6f:63:b6:7f:b4:50:90:bf:1b:1d:fb:51:
                    ec:36:02:7f:68:f3:54:80:d0:19:0c:3e:7d:a9:64:
                    66:3d:78:f9:3c:66:76:9f:c5:2f:c5:67:ae:a0:61:
                    4b:7b:f5:1f:92:a9:c4:5f:58:c2:d7:f4:b2:d0:57:
                    59:bc:98:7e:6c:d3:86:5b:ec:c3:cc:e5:e8:1b:af:
                    b7:eb:8f:5a:ac:2a:ce:43:b2:79:07:9a:d3:82:1a:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:6D:49:20:D7:0A:10:BF:26:1E:0C:39:A0:3D:38:56:CB:45:97
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:87:30:d7:a1:cb:7c:a2:49:b2:77:ac:73:0f:fa:5b:de:ea:
         23:d8:0b:01:78:32:a2:24:5b:10:a6:12:66:73:5b:8b:11:18:
         69:62:e1:53:8d:df:eb:61:e0:f6:a4:bf:4f:2e:9f:c9:f5:e3:
         4e:f1:f6:ee:7c:4f:ff:79:df:c0:bc:78:29:89:02:32:4a:56:
         b2:af:38:cf:1a:1e:61:e6:c4:70:48:32:81:7f:34:bf:18:8f:
         6f:73:83:50:2a:b4:9a:70:a7:e5:f1:33:9b:96:3a:93:59:d8:
         56:9c:b1:96:ed:20:66:c3:25:cf:9e:78:4e:b2:97:f0:58:0f:
         9a:cc:03:d1:39:84:86:2c:68:76:73:c7:06:28:d5:c3:ff:26:
         2e:e5:38:00:e1:ce:2e:e8:46:19:c5:e6:9a:63:e2:3c:ff:4d:
         1f:52:5f:98:09:45:5f:48:72:66:74:1f:76:8b:40:e1:68:4f:
         41:6f:8c:a4:4a:b1:4d:85:ab:f4:a6:57:ca:ad:53:db:63:ff:
         9e:fe:25:57:40:70:3f:eb:58:54:2e:4a:11:2d:f5:7b:c6:f1:
         d7:33:0b:4b:b6:19:ae:9b:0a:ba:1e:0c:84:f9:e5:de:12:88:
         cf:36:95:a1:9a:40:76:01:34:3f:1f:29:84:f0:25:68:74:03:
         ab:9d:0b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RvaR/giyxJOltC/KttOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODkzODVjMDAwMjMzMGIwOTY1NjdiMjE1MTRkOGUxYmMw
OTY4OWYwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
EyhjZjZiNmQ0OTIwZDcwYTEwYmYyNjFlMGMzOWEwM2QzODU2Y2I0NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2GixdJ0zSqsr2QQ0tp/TyL3vGgF
w4TGa24lnbA3wRkHyAYcEd/6/J8z2BRu0Ha7G1z5Sl+H09zfk/1wbG46aNFvaDIZ
mnwFfP49YnrObOaOe6ZVxdgD7FyZrVsq6JIjdxKUwDFup9R8hbiCFxQ5pZEg5dcu
iukY5NuBXmPyu3P4Sh9zQMBYpSoSNSUdDn8sK0HhmVMs89Orw8Nuf7x+pR/wFbeV
6xtvY7Z/tFCQvxsd+1HsNgJ/aPNUgNAZDD59qWRmPXj5PGZ2n8UvxWeuoGFLe/Uf
kqnEX1jC1/Sy0FdZvJh+bNOGW+zDzOXoG6+3649arCrOQ7J5B5rTghr9rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9rbUkg1woQvyYeDDmgPThWy0WXMB8GA1UdIwQY
MBaAFHuJOFwAAjMLCWVnshUU2OG8CWifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQt
ZmUyNzkyMWUxNTQyLzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQtZmUyNzkyMWUxNTQy
LzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4cw16HL
fKJJsnescw/6W97qI9gLAXgyoiRbEKYSZnNbixEYaWLhU43f62Hg9qS/Ty6fyfXj
TvH27nxP/3nfwLx4KYkCMkpWsq84zxoeYebEcEgygX80vxiPb3ODUCq0mnCn5fEz
m5Y6k1nYVpyxlu0gZsMlz554TrKX8FgPmswD0TmEhixodnPHBijVw/8mLuU4AOHO
LuhGGcXmmmPiPP9NH1JfmAlFX0hyZnQfdotA4WhPQW+MpEqxTYWr9KZXyq1T22P/
nv4lV0BwP+tYVC5KES31e8bx1zMLS7YZrpsKuh4MhPnl3hKIzzaVoZpAdgE0Px8p
hPAlaHQDq50LOg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:24 2026 by rpki-client