Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          9lFrsxHSkZhAmyP5Sp5HEcPDdF4pLkxCKsU442QwZQs=
Subject key identifier:   72:51:B7:B3:CD:F6:0A:94:9C:D1:AD:4A:92:32:2F:B7:EF:5C:3D:7A
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       019CAC46C16E3A6740B840FBDA74FD2890EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 02:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:43 +0000
Files and hashes:         1: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: X6HLcLpHeiwIAFiXnsYyWhDZqgFlmlPIBvvFLzf391U=)
                          2: qEVUH4qtPIdY31l07wJYpUogkpY.roa (hash: 1CkNjM5HwfDl6NM7jfzoD/R4QOj8Vqv8jxVT070r3q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:c1:6e:3a:67:40:b8:40:fb:da:74:fd:28:90:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Mar  2 02:00:43 2026 GMT
            Not After : Mar  3 02:00:43 2026 GMT
        Subject: CN=7251b7b3cdf60a949cd1ad4a92322fb7ef5c3d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:f9:33:e2:c9:43:44:ad:19:d2:27:2d:a2:
                    8c:55:d6:c7:5a:87:7c:a2:08:95:0c:3d:73:68:a8:
                    2e:5a:4d:0e:9d:28:eb:7c:5e:11:2d:1e:aa:d2:de:
                    1e:13:35:10:55:b4:d5:cc:74:2c:f6:a7:a1:de:f9:
                    f2:27:5b:84:51:61:6b:12:44:49:09:ba:8d:07:04:
                    a7:65:7e:3b:42:19:ed:08:2f:86:a4:eb:8c:15:5b:
                    be:0d:a3:df:4f:9f:52:6b:20:bd:40:7b:eb:1b:6c:
                    12:bf:63:48:8f:67:80:61:2d:a8:1e:ce:a0:e9:94:
                    79:72:6b:df:11:64:cc:cb:0a:b7:2a:ea:03:f2:af:
                    a6:de:19:35:ae:3a:f9:8d:f9:55:23:16:0e:08:40:
                    2b:ca:c7:cc:de:bb:f2:24:fd:25:a3:18:e2:0b:43:
                    49:d3:57:c0:de:ea:f0:b7:68:fa:71:f8:57:6e:61:
                    34:61:c1:66:80:08:35:9f:fa:8a:5f:d7:3e:b3:2c:
                    7e:0a:cd:9e:2b:57:e7:4d:50:05:f9:82:e0:83:2b:
                    0a:be:c4:04:af:5f:c7:cf:06:fd:f5:58:b1:74:fc:
                    a9:e2:8d:5e:63:5b:ea:9e:81:82:2a:dd:9d:d3:bf:
                    40:24:7f:5d:25:96:80:02:03:b4:f7:c8:3a:ec:cc:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:B7:B3:CD:F6:0A:94:9C:D1:AD:4A:92:32:2F:B7:EF:5C:3D:7A
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:8c:3c:ef:ba:05:b3:25:e5:7b:a2:a6:7f:be:8a:24:de:
         00:f0:de:4e:ce:47:1c:c5:88:d5:16:8a:a1:1d:3f:8f:f8:0e:
         5c:c3:8f:8a:d6:17:f5:b7:0c:1c:2e:91:f5:c0:da:1c:b3:85:
         78:88:0b:47:a8:b0:28:e2:6c:95:2c:33:47:17:79:0a:33:2e:
         a1:b2:d0:d9:31:9a:1a:cf:17:17:57:43:cb:73:51:3a:a5:09:
         a4:f4:39:1e:51:6e:75:fe:bd:27:f5:b6:3a:e2:06:17:55:76:
         a1:05:21:2c:f1:df:eb:e2:8d:7b:17:8e:94:09:3b:c4:03:ce:
         64:53:18:a3:0c:0e:5a:54:aa:29:cb:f2:81:18:12:23:cf:b7:
         53:8d:a3:74:33:f8:ba:ba:4d:43:2d:7c:6d:88:be:b2:ff:96:
         16:36:6f:70:e4:4c:f5:04:ed:ef:ad:4d:0d:6c:8f:97:b6:7e:
         97:77:3d:89:05:ab:0a:b6:d5:2d:f8:a4:95:b0:a5:d2:3f:76:
         39:3e:64:b4:a8:8d:85:72:1b:91:01:8f:2f:2f:2e:2c:7d:05:
         ed:93:6b:e5:56:56:d8:de:64:6d:10:2e:5b:ab:11:68:ff:c0:
         0c:d9:c6:5f:d9:3f:62:bc:0b:91:d3:36:cd:7d:4d:ac:6a:ac:
         22:9c:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:40 2026 by rpki-client