Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          Q5vhrSMbf1/2LRXmSrKEJiPG8lG0OvNDqokHzirzkUg=
Subject key identifier:   51:76:42:7C:CF:B8:07:49:77:EF:59:CB:09:9A:C0:26:96:4F:45:11
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       019CABA1C4EF03D96FFFAA2642B13FDF7A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 23:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:31 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: fkeBx2pvQBMaC9aNNFQfRzbGUZtQvV3X50upMO+tpjg=)
                          2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
                          3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
                          4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:c4:ef:03:d9:6f:ff:aa:26:42:b1:3f:df:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Mar  1 23:00:31 2026 GMT
            Not After : Mar  2 23:00:31 2026 GMT
        Subject: CN=5176427ccfb8074977ef59cb099ac026964f4511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:75:9d:d5:71:c0:4f:f5:ce:4d:ee:3b:c1:
                    68:3f:86:15:f7:b2:fd:a6:a6:24:fd:7a:65:54:c4:
                    5e:86:6f:ca:2a:7c:a2:ac:19:f8:70:e5:47:69:13:
                    91:b5:d7:b2:46:19:f8:b0:71:99:3d:08:ae:df:0b:
                    0e:43:9f:de:ed:44:cb:67:10:a1:3d:37:c8:a0:50:
                    dd:f6:e8:64:78:1a:14:36:fc:2e:a1:dd:14:fc:38:
                    1a:2c:78:aa:76:34:76:44:95:94:3a:1d:60:ea:b5:
                    70:0a:00:a9:41:09:ea:4c:c9:77:bf:cc:af:1d:50:
                    11:1d:52:66:41:18:7b:8f:fd:26:ff:38:13:ac:73:
                    b1:e7:71:c8:2f:6b:05:e2:e1:eb:de:b0:76:9d:df:
                    b5:2e:60:17:b8:6c:32:03:e9:e9:dd:cf:f6:30:cd:
                    78:64:d3:8c:61:fa:c0:54:b8:40:be:18:9b:97:84:
                    ca:a0:9c:55:84:41:9c:15:28:17:e3:7c:ec:43:7d:
                    40:84:29:77:e0:5e:4f:7a:32:6c:d6:07:ee:94:08:
                    2b:bb:3d:27:41:c8:c2:36:58:5d:b2:3c:40:c9:8d:
                    5c:8e:f0:92:79:a0:1c:13:86:81:d7:0c:35:88:58:
                    56:fc:af:a9:bd:ce:60:53:c1:ee:55:50:1e:72:f1:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:42:7C:CF:B8:07:49:77:EF:59:CB:09:9A:C0:26:96:4F:45:11
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b2:c7:90:eb:7a:f5:cb:b2:75:1f:58:b1:77:11:39:f1:f4:
         0d:5d:e8:35:4a:4a:cd:65:7a:49:34:b2:b4:93:63:e6:03:06:
         80:01:7c:1e:bd:3c:41:40:97:ea:34:b4:9a:df:a7:37:21:55:
         ff:89:4e:db:0d:f8:af:6e:cf:c3:5b:e9:28:a2:62:d1:3c:0e:
         39:85:62:1b:70:e3:8f:c0:44:f5:47:8a:d5:14:a8:3b:42:70:
         59:e1:90:06:ff:d9:c0:4f:60:77:69:f2:04:51:3d:d9:a3:4c:
         7b:57:8d:41:c3:9e:2a:a5:91:12:2f:25:d1:1b:b8:26:67:4a:
         51:29:c8:1f:58:96:5d:3b:bc:72:c9:1a:5e:48:1e:2f:9b:b1:
         76:eb:2c:eb:88:c2:6a:8b:df:93:15:8b:bf:bf:9f:e1:d2:8c:
         81:91:59:2d:d9:e6:20:1b:dd:f2:c9:4d:e5:b0:37:6c:10:10:
         9b:7f:99:ca:0b:a7:39:7d:4b:f3:15:07:36:44:16:4b:e9:59:
         8e:b9:65:68:2e:ad:70:05:a5:58:c7:6f:7d:37:8c:fd:d3:f8:
         b6:22:63:fe:bc:52:a2:52:9a:8e:c5:de:49:e4:1a:c8:66:fc:
         63:8f:39:db:29:b9:1d:58:07:dc:3e:17:01:17:0b:ce:e5:bc:
         b9:90:da:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocTvA9lv/6omQrE/33pmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm
NjUyMGQwHhcNMjYwMzAxMjMwMDMxWhcNMjYwMzAyMjMwMDMxWjAzMTEwLwYDVQQD
Eyg1MTc2NDI3Y2NmYjgwNzQ5NzdlZjU5Y2IwOTlhYzAyNjk2NGY0NTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHZ1ndVxwE/1zk3uO8FoP4YV97L9
pqYk/XplVMRehm/KKnyirBn4cOVHaRORtdeyRhn4sHGZPQiu3wsOQ5/e7UTLZxCh
PTfIoFDd9uhkeBoUNvwuod0U/DgaLHiqdjR2RJWUOh1g6rVwCgCpQQnqTMl3v8yv
HVARHVJmQRh7j/0m/zgTrHOx53HIL2sF4uHr3rB2nd+1LmAXuGwyA+np3c/2MM14
ZNOMYfrAVLhAvhibl4TKoJxVhEGcFSgX43zsQ31AhCl34F5PejJs1gfulAgruz0n
QcjCNlhdsjxAyY1cjvCSeaAcE4aB1ww1iFhW/K+pvc5gU8HuVVAecvEKlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF2QnzPuAdJd+9ZywmawCaWT0URMB8GA1UdIwQY
MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt
NTE3NDgxZDBmODUwLzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw
LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxrLHkOt6
9cuydR9YsXcROfH0DV3oNUpKzWV6STSytJNj5gMGgAF8Hr08QUCX6jS0mt+nNyFV
/4lO2w34r27Pw1vpKKJi0TwOOYViG3Djj8BE9UeK1RSoO0JwWeGQBv/ZwE9gd2ny
BFE92aNMe1eNQcOeKqWREi8l0Ru4JmdKUSnIH1iWXTu8cskaXkgeL5uxduss64jC
aovfkxWLv7+f4dKMgZFZLdnmIBvd8slN5bA3bBAQm3+ZygunOX1L8xUHNkQWS+lZ
jrllaC6tcAWlWMdvfTeM/dP4tiJj/rxSolKajsXeSeQayGb8Y4852ym5HVgH3D4X
ARcLzuW8uZDakw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:07 2026 by rpki-client