Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File:                     p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier:          Y5yljxrdpXrjbtDUDdhJ8dqo5tqCT3dxzeUZ7/0kvmk=
Subject key identifier:   22:06:AB:F1:C7:3B:15:42:AC:08:60:21:09:54:D1:66:21:01:CB:F0
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer:       /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial:       019CAD22424CD4122A986EC932668CC58944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 06:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:29 +0000
Files and hashes:         1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
                          2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
                          3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
                          4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: mXj1x+oOEJj3VZPQpwlIHWzejL/bCsRmw1K0CISBAZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:42:4c:d4:12:2a:98:6e:c9:32:66:8c:c5:89:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
        Validity
            Not Before: Mar  2 06:00:29 2026 GMT
            Not After : Mar  3 06:00:29 2026 GMT
        Subject: CN=2206abf1c73b1542ac0860210954d1662101cbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:ac:b7:a1:47:80:52:86:2d:6c:63:a7:a6:
                    50:46:d4:06:9f:89:7d:db:71:31:30:d7:75:4d:9a:
                    c8:f7:43:0a:4e:17:56:21:3d:9e:20:bc:69:04:54:
                    58:18:96:17:86:85:cd:16:31:e8:34:26:7b:23:f8:
                    73:dd:c5:51:dd:24:84:ee:f8:91:8f:e8:da:b5:b9:
                    10:9e:73:86:e5:ef:57:fa:e5:77:70:d5:a8:8d:ee:
                    57:33:5c:e8:47:52:3a:b7:ad:59:a9:2e:61:2c:81:
                    e4:3c:4b:9e:44:a4:ee:da:06:2f:60:95:64:14:2e:
                    57:f2:84:a1:4d:0c:ef:1c:af:99:ab:b2:ec:4a:05:
                    0c:11:1a:1c:ac:a1:67:e1:4e:98:d3:8d:2c:70:a3:
                    be:8a:e5:36:f1:d2:59:f7:29:6a:82:73:7b:ee:5c:
                    06:88:af:99:71:f9:5e:85:3c:c6:2a:93:07:e9:a8:
                    3c:28:38:d5:d2:1c:40:97:1a:21:5a:97:5d:b2:e9:
                    68:32:1c:5f:1f:f5:e4:72:47:3d:05:b4:89:23:cb:
                    d8:be:a5:b8:32:84:dc:66:13:e9:de:45:79:c6:66:
                    5b:b2:1e:a8:a4:c6:56:5a:5a:89:5e:b4:55:65:6e:
                    a7:4a:5c:d4:65:85:94:84:74:50:c5:22:23:77:32:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:AB:F1:C7:3B:15:42:AC:08:60:21:09:54:D1:66:21:01:CB:F0
            X509v3 Authority Key Identifier:
                keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:7c:71:18:f9:b7:cc:ac:0a:7c:78:ca:35:4d:a4:b5:c4:
         47:9d:eb:73:35:6f:78:f6:22:f6:0a:7b:65:a5:32:26:31:e7:
         d2:46:47:ae:8e:7f:1b:e9:69:6f:d9:09:1b:12:b8:4d:b6:e8:
         15:a1:f6:26:6f:56:78:f3:5b:f9:f5:95:c9:a9:92:56:7b:7d:
         79:56:8e:d7:a0:13:92:ab:2b:50:5d:59:f6:88:4e:6b:f7:d8:
         a2:fa:6e:7e:65:8f:f5:17:4f:a3:8f:10:fd:13:1e:34:00:6b:
         06:1d:fb:b6:25:bb:e6:a2:a3:11:1a:3f:fe:16:ca:8f:22:47:
         ac:95:44:68:d7:8e:01:09:e9:1c:cb:b4:22:92:15:f4:1f:5d:
         70:a3:91:9c:5d:4c:e8:c5:eb:14:ce:e4:13:0c:1b:05:ac:46:
         f7:f2:d5:27:6d:da:6d:21:e3:1b:86:0a:03:6c:20:ca:2f:32:
         6f:3c:31:a6:93:db:a2:05:a8:a8:92:c8:1a:c2:f6:37:ff:ce:
         8d:7e:58:2b:eb:ec:c0:5a:28:5c:81:f7:fd:f5:9b:4c:87:94:
         7f:47:d0:4e:e1:ca:cf:88:0c:dd:d1:92:ee:9f:36:93:4b:d5:
         dd:4a:44:b8:53:ee:76:9d:0f:1c:11:ec:ab:58:54:bd:58:ec:
         a5:eb:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:13:55 2026 by rpki-client