Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          PzPfLUpsI7NQczlnMYvRs5dwQ3GYC3+9PIKF2p6QUFE=
Subject key identifier:   7F:A9:1E:F1:B8:5D:3A:11:FD:42:2C:DC:39:46:49:C2:B1:87:F8:9B
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019CAB6B1D3D02C2FA92F3B81F6A9472DDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          185B
Signing time:             Sun 01 Mar 2026 22:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:49 +0000
Files and hashes:         1: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          2: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          3: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          4: f3K6VBqM1ipEJ5BLcoHIVYY4Unk.roa (hash: roT+gO8ccdUs8hjQsg+1r48iM3VN73FELsA2SOucN2U=)
                          5: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: BkI1+LeK2J7azbp3HegioxwSXZ//75uaLaj6ifgYROk=)
                          6: o8u_3aSRBty3hd7jb-zctGFuulI.roa (hash: eIA03+zKUxVkomCqmVVeVcEdH8W7V0ITpVbhNfJ74mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:1d:3d:02:c2:fa:92:f3:b8:1f:6a:94:72:dd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Mar  1 22:00:49 2026 GMT
            Not After : Mar  2 22:00:49 2026 GMT
        Subject: CN=7fa91ef1b85d3a11fd422cdc394649c2b187f89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:d0:a6:05:18:39:34:c5:a3:65:b4:06:28:
                    87:4c:9a:bc:00:b5:bc:ff:7e:72:b5:59:e0:77:25:
                    71:34:9c:99:64:86:bc:19:76:b2:6e:5e:eb:95:9a:
                    70:51:4b:5e:3d:77:89:b7:1c:71:5c:46:06:4e:01:
                    62:04:43:f3:8b:33:bc:d7:d0:96:0c:d6:28:40:13:
                    87:f2:53:8c:c9:9e:78:12:55:74:a7:3c:b6:fc:28:
                    c6:b4:0f:34:70:48:37:d9:af:54:5f:df:21:46:b4:
                    72:34:cb:51:99:db:6a:13:b4:89:5e:37:67:f2:76:
                    31:f9:f9:d3:6d:1c:37:2e:cf:ff:bf:e5:07:07:4f:
                    96:c4:b9:ce:cc:a0:c8:05:21:62:5f:f2:54:d9:c9:
                    81:d6:77:47:31:77:1d:62:91:ed:2c:83:b9:c2:89:
                    d2:4e:1e:99:f0:26:6a:2a:e8:7c:bd:49:8b:a0:8e:
                    14:6c:58:65:53:3b:da:51:ac:85:a1:df:82:ef:b8:
                    ab:42:8d:13:0a:d1:27:b0:1c:88:17:2a:bd:41:c4:
                    03:4e:0f:66:8e:7c:07:74:33:9e:77:63:45:36:25:
                    03:5c:30:bd:51:1d:df:40:fc:b3:50:11:97:d8:d7:
                    b2:81:55:71:c9:03:c6:c3:2c:40:6c:f1:d7:6a:7e:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:1E:F1:B8:5D:3A:11:FD:42:2C:DC:39:46:49:C2:B1:87:F8:9B
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d7:2d:6f:1d:98:7f:f2:c1:1e:40:58:b8:4f:73:7b:55:9f:
         18:b9:c4:bf:10:39:29:16:ec:ee:b3:fc:2e:1d:2b:ad:12:cf:
         12:3d:55:5f:92:75:10:0f:ee:ab:8d:b8:8f:74:60:5c:28:b9:
         bd:23:d0:7b:1e:21:72:bf:51:31:33:10:46:b1:6b:3c:51:fa:
         ba:be:6b:e0:57:31:c3:40:93:86:ea:ca:e9:c2:89:7f:3d:45:
         10:8a:ab:c3:8c:03:d9:8b:ff:58:7a:d1:a1:ae:42:1d:69:5e:
         ac:0e:1c:8f:2b:83:87:31:65:1c:c8:18:9f:5b:07:e2:14:45:
         2c:a2:42:b0:26:a0:57:c1:1f:90:32:85:b0:8c:35:32:90:d2:
         57:9f:b9:17:93:42:91:d7:4d:4f:b8:61:3c:97:d8:00:3c:11:
         72:f0:a0:d4:06:5e:1b:90:e7:95:74:41:26:5e:66:50:1b:1b:
         af:49:fb:98:22:73:e1:f5:cf:0a:df:70:96:ea:33:a1:65:54:
         6b:57:ab:3d:80:5d:da:6b:7f:fe:57:72:d6:54:19:52:83:ed:
         b4:a8:f4:32:43:5f:68:d7:63:59:9f:1d:74:20:76:71:fe:b4:
         68:7a:53:8b:c9:b0:95:e6:a6:f5:b7:0f:41:0b:07:ce:6f:cf:
         7f:53:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:12 2026 by rpki-client