Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          6qZ8LNx4rhBcKwu9QEvHhHJwvm6Wq4WxrgoGj00Niys=
Subject key identifier:   BC:E8:18:1C:0F:0D:8E:C6:BF:0D:BF:34:E9:BC:C7:F0:EF:DE:CA:C9
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       019CAC46DDAE9DB6547886D4691131CB5A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          186A
Signing time:             Mon 02 Mar 2026 02:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:51 +0000
Files and hashes:         1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
                          2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
                          3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
                          4: WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa (hash: zY6UwlQ/GxjFTntYJPN/sGqFKcDOf8d8m1v7xUcl1jY=)
                          5: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: HGURF2qmtCVbR9CU8RvNHEtIbxLh4OseGdhn8JqRz7U=)
                          6: fkKkQqSxJp_plv8zmlMuWpt7SKA.roa (hash: Sf+HsASX9t6YQf31Gs6tChY0U3y7nkWEG9+UmtOAYlc=)
                          7: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
                          8: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:dd:ae:9d:b6:54:78:86:d4:69:11:31:cb:5a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Mar  2 02:00:51 2026 GMT
            Not After : Mar  3 02:00:51 2026 GMT
        Subject: CN=bce8181c0f0d8ec6bf0dbf34e9bcc7f0efdecac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:ec:1c:41:d9:a6:de:1e:ae:81:e7:9e:63:
                    ba:22:b8:ac:df:10:2d:c5:fa:23:b3:cb:c6:f2:61:
                    dd:82:05:28:15:03:b6:2e:af:53:28:d3:e3:a3:e3:
                    69:80:84:1e:e2:e7:4e:e3:fd:c0:f7:9d:c6:46:58:
                    54:c0:0b:43:86:ee:ef:e3:50:e8:ad:b8:99:da:03:
                    31:56:79:c8:6e:b6:5d:8a:50:d3:ae:3c:e2:b9:55:
                    29:70:9a:a7:a1:52:98:54:ee:80:64:53:a7:56:99:
                    cc:5f:dc:19:35:52:ad:d4:46:17:1a:98:af:61:34:
                    c6:f3:cd:43:50:21:c1:fb:6c:d3:e3:43:60:fa:25:
                    f3:dc:81:30:c8:83:a8:26:75:0a:f1:6f:5b:1e:9c:
                    6a:d0:42:f4:3e:cb:22:23:77:1c:f6:8e:68:87:fa:
                    a9:8e:9c:43:6c:3c:cf:43:3d:d2:dd:c7:2e:45:97:
                    da:48:3d:1a:e7:cc:4b:3e:20:33:15:e0:13:e0:7a:
                    ff:c2:97:47:49:d7:53:f8:2c:65:45:20:89:fd:72:
                    38:c1:6a:c7:11:b3:03:e4:94:e0:f4:3b:d4:47:88:
                    38:9e:5e:31:5b:ec:e3:94:2e:1a:c7:4f:7b:e0:f9:
                    26:13:95:cb:57:8d:31:eb:a4:34:b5:7c:7a:b4:99:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E8:18:1C:0F:0D:8E:C6:BF:0D:BF:34:E9:BC:C7:F0:EF:DE:CA:C9
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:e2:1a:fa:1b:f6:5b:ac:7a:2a:67:c8:dc:2b:eb:f6:23:
         47:1c:23:5a:2e:65:55:65:d4:8a:2f:4e:92:58:5f:4c:b2:a8:
         8c:23:2d:a5:d7:d4:cd:b0:51:1f:f1:c4:97:ac:82:73:cb:ed:
         e4:78:70:78:ef:4d:46:0f:83:2c:b3:15:a6:2e:15:35:3d:87:
         d9:25:3f:72:ae:65:d3:28:44:c2:14:af:ae:27:82:0e:3f:33:
         1d:57:68:b0:06:b0:a0:36:4e:1e:80:00:2b:43:da:a2:82:74:
         c1:1d:af:d5:80:83:ed:b1:6d:be:74:15:a6:4c:b7:cf:b6:77:
         f1:93:6c:28:ed:b2:4d:3b:5b:05:75:d3:18:35:f6:86:5d:63:
         f6:62:a3:4c:3c:6d:56:86:63:40:e8:ce:4d:c0:19:59:e4:be:
         7b:6b:cf:a0:d9:9e:33:3b:87:6f:98:2f:70:0d:56:b8:ca:d9:
         c4:7c:07:e3:46:24:6a:d7:d0:0b:be:17:34:8f:58:73:ee:ea:
         58:0d:b5:18:3e:cf:aa:95:64:94:ea:b5:25:81:7c:76:46:62:
         cf:f6:9a:12:7b:5b:7b:c0:b7:89:d2:0d:50:0b:9b:14:48:bb:
         6b:4e:d0:ad:6b:4d:11:70:99:88:78:3d:a6:65:8b:0a:c6:00:
         09:85:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:45 2026 by rpki-client