Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          tyhvQzWsqUmVtdf2k5LMhitiO5Z+gjQ7nvzySDIQKxU=
Subject key identifier:   3B:7B:71:A9:6D:C4:3F:3C:71:FF:34:06:ED:36:F3:45:68:8B:24:4A
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       019CAA58605212E633EB673E4692EBA3D18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 17:00:44 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:44 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:44 +0000
Files and hashes:         1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
                          2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
                          3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
                          4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
                          5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: mWIH8QzwtRYcZUf630d1TUyhEaQgyJeU0/TX1K8jb2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:60:52:12:e6:33:eb:67:3e:46:92:eb:a3:d1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Mar  1 17:00:44 2026 GMT
            Not After : Mar  2 17:00:44 2026 GMT
        Subject: CN=3b7b71a96dc43f3c71ff3406ed36f345688b244a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:0f:df:c7:81:82:68:0f:2f:b9:c0:4b:65:
                    55:18:e2:92:b2:e5:17:ef:b9:ee:a9:d3:fc:2b:77:
                    be:af:cd:d2:16:3e:40:e8:75:cd:b4:95:dd:1a:4f:
                    cd:d5:71:20:5c:81:49:e2:e5:ae:28:a1:45:37:a3:
                    c6:c6:0d:49:9c:96:a8:b2:30:bf:6d:8b:94:86:75:
                    26:e3:a9:1b:26:79:12:26:6a:ba:24:08:1d:3d:63:
                    06:df:ac:55:d0:ce:98:1c:f3:d6:fe:98:37:db:f0:
                    3a:0a:31:26:58:38:a4:c3:a8:14:85:52:63:a3:3c:
                    8f:c5:77:b0:ad:96:84:12:57:ca:df:21:7e:a6:51:
                    1b:74:5f:1b:5e:fb:3a:16:07:8a:42:0f:95:f7:5e:
                    94:0b:f9:8a:12:ab:f3:00:33:26:d8:aa:10:6b:24:
                    fa:ec:df:db:45:8b:7b:48:3e:37:b2:ae:c1:37:57:
                    89:8e:a9:cf:26:d9:a1:d1:df:ad:ed:cc:f1:79:98:
                    d1:2e:bf:0b:bc:37:0f:80:3b:e0:5c:43:77:c5:ec:
                    2a:a7:68:f2:c2:93:14:ed:ef:07:dd:e9:84:c4:2b:
                    84:b1:7a:29:ae:d7:5c:06:dc:1d:2f:3d:f2:85:45:
                    7a:ef:d4:19:ea:52:62:d8:cb:3d:ed:2b:f0:b3:f2:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:71:A9:6D:C4:3F:3C:71:FF:34:06:ED:36:F3:45:68:8B:24:4A
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:25:73:02:2c:ee:b7:cc:b8:7d:e7:ca:c2:68:b6:98:ad:c7:
         c8:0d:21:fc:29:38:1b:e4:a9:3f:24:33:9d:00:7b:64:d9:60:
         16:ee:50:e2:81:85:32:25:17:ae:b8:b8:9a:db:68:2e:64:2c:
         a2:bf:24:a6:ed:e9:d5:2a:fe:a0:c9:84:a3:19:fe:28:4f:52:
         14:32:d0:f2:0b:a8:1f:2d:eb:c3:88:aa:af:0d:53:9e:45:7f:
         cc:73:15:31:a0:f2:d6:74:d9:ac:32:5f:71:8a:3d:26:d6:f2:
         82:d0:fb:7c:fe:9f:d4:f3:e0:b5:fb:92:79:cd:2e:29:7a:63:
         2f:10:3a:3d:98:55:51:47:60:94:cc:97:7c:14:b4:e9:fe:c1:
         27:7b:2e:bf:7b:5c:6b:ea:f7:f9:b3:20:f8:48:bd:63:c8:3d:
         1e:f7:3a:72:a4:f3:3f:03:e9:e1:e5:d8:4d:d8:cd:9b:8a:f5:
         81:b5:32:23:19:71:33:42:8b:a0:13:14:d6:80:ee:12:39:3f:
         bf:e5:1a:1e:50:17:da:d0:6d:5b:34:fd:be:b9:92:45:3f:42:
         a7:41:4b:f4:78:96:e9:58:38:99:fb:ae:df:65:83:9c:aa:31:
         42:7f:7f:a9:99:9a:6b:8a:e4:dd:ae:41:a0:86:fb:4f:0a:2a:
         95:a5:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:39 2026 by rpki-client