Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File:                     KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier:          dsQIpturSJ0QYifu93ykxcAZC9uLhTu17KPas6C6HII=
Subject key identifier:   36:F4:A6:45:A3:A4:C3:F6:96:2F:50:87:C4:32:32:1C:4A:FF:14:5F
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer:       /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial:       019CAB349D995BAD1F3924881A94426D9DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 21:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:17 +0000
Files and hashes:         1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: mTliMDOR6ATapVR1IFTU6xstFWwsysJDtptMXO3X018=)
                          2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
                          3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
                          4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
                          5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:9d:99:5b:ad:1f:39:24:88:1a:94:42:6d:9d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
        Validity
            Not Before: Mar  1 21:01:17 2026 GMT
            Not After : Mar  2 21:01:17 2026 GMT
        Subject: CN=36f4a645a3a4c3f6962f5087c432321c4aff145f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:44:97:ab:b7:ed:00:b6:59:19:74:e4:4e:
                    a9:3f:89:13:a5:66:5b:d6:68:c0:c6:1d:2a:15:c0:
                    5b:35:01:21:9a:3f:2b:d0:8b:19:fd:af:5c:76:99:
                    62:03:d2:97:5e:d1:1f:1d:7c:87:c7:af:90:2a:89:
                    e9:b9:55:a7:88:12:ad:ae:d0:09:8a:5b:56:ad:cd:
                    8a:17:67:fd:1a:9f:e4:0d:ff:e5:7f:7c:bb:d7:7a:
                    6f:57:f9:35:5f:c7:20:9b:a8:64:2a:c0:f7:a8:8f:
                    b6:db:2b:fd:f1:7c:06:18:0e:9a:67:fe:57:67:cd:
                    03:ff:96:f0:76:3b:01:62:9b:bd:aa:54:3c:c4:1d:
                    dc:fc:e2:c3:32:4e:06:c0:87:83:93:da:f7:b6:0c:
                    a1:c8:bc:c2:85:6f:25:93:6c:b6:c9:39:52:cb:4c:
                    3e:94:e4:0a:1a:d1:ff:92:45:e8:9e:b9:53:ba:ad:
                    7f:c3:86:f8:bd:1c:9a:9c:62:a4:10:f8:89:53:f1:
                    a8:6c:ed:8f:64:c6:23:0e:f3:85:b2:0e:c0:f4:ad:
                    50:40:12:5d:e9:f6:e8:86:6a:ec:ef:16:6c:4c:88:
                    40:7a:38:d1:ee:1f:13:1d:cf:5c:8e:94:70:d2:86:
                    93:46:4d:e5:bb:61:b9:1d:9b:6d:10:76:f6:70:8f:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:A6:45:A3:A4:C3:F6:96:2F:50:87:C4:32:32:1C:4A:FF:14:5F
            X509v3 Authority Key Identifier:
                keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:60:bf:b6:fd:c5:aa:1b:ee:91:cf:e2:0d:59:c4:5e:b6:68:
         a8:81:50:8f:9b:ad:93:35:6c:1b:90:70:4c:06:66:73:ab:18:
         c4:e7:b0:c4:bf:52:ef:e7:02:2d:1e:cb:b1:34:bb:8d:77:7a:
         b0:40:cd:28:00:b9:a7:e6:35:f4:bd:65:10:60:e3:db:18:71:
         6c:78:36:86:ad:80:d6:7b:ed:ca:94:c0:19:c0:2d:aa:14:23:
         7a:9a:d5:2b:f0:2f:dd:f7:b9:3b:38:60:ff:85:b5:4c:0d:d3:
         2b:82:66:36:a6:eb:ea:e9:6f:be:d4:51:c8:6d:44:1b:10:38:
         9f:e1:88:84:d2:ee:eb:1d:e7:3e:b7:cc:71:57:7b:57:a5:1c:
         8d:00:c0:c8:70:f2:02:83:ee:87:0f:50:a8:f7:d3:3e:a0:21:
         b5:d9:30:ab:a7:c5:7c:fb:f9:ad:78:f2:5c:86:7b:d6:e1:a0:
         7e:b3:ba:b9:38:f0:18:cb:b5:c5:ca:3d:32:a9:75:71:cd:a0:
         7d:a9:b9:b2:8a:f4:fb:71:fb:41:08:41:05:97:e6:86:84:53:
         aa:d7:a4:9e:d3:9f:be:d2:d4:a8:d4:5d:37:d2:44:10:bd:6e:
         3c:4d:39:9b:8d:38:31:4c:c0:b5:73:5d:ac:37:1a:04:6c:ab:
         8d:14:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:06 2026 by rpki-client