Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File:                     5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier:          y3BtNgTx3M9LTp18E5jEc1/dD4J3X5XU3CrDf0kgGQ4=
Subject key identifier:   A9:AB:A3:AC:8E:F1:89:F6:98:48:22:91:5E:5D:A5:21:F3:BD:92:58
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer:       /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial:       019CAA8FAFC485E989CFD64F999252FF5A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number:          0184
Signing time:             Sun 01 Mar 2026 18:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:09 +0000
Files and hashes:         1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
                          2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
                          3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: GLj6BUC/DA0dvLoBsFiGVhqBiSYQVPGDZ0n1eAK1zNE=)
                          4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:af:c4:85:e9:89:cf:d6:4f:99:92:52:ff:5a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
        Validity
            Not Before: Mar  1 18:01:09 2026 GMT
            Not After : Mar  2 18:01:09 2026 GMT
        Subject: CN=a9aba3ac8ef189f6984822915e5da521f3bd9258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3a:a0:76:3d:6f:e5:a1:a5:dc:ab:04:74:b5:
                    e7:12:30:00:09:f7:49:07:3a:2e:0d:db:3e:b8:2b:
                    09:70:a8:79:8e:1b:e0:9f:00:1e:48:36:dc:d9:b4:
                    d4:01:31:5f:01:7f:ff:5b:2e:10:51:db:e1:48:21:
                    ae:ec:a5:98:57:0c:39:23:6c:4b:54:05:f3:c9:64:
                    f2:93:e6:8a:44:ba:48:0d:22:4c:b0:8d:33:6e:03:
                    9f:dd:f3:9b:8a:a2:5b:93:69:c5:57:26:7b:e0:75:
                    ad:94:3d:af:23:db:03:93:91:8d:11:58:e7:6e:8e:
                    19:7b:fa:71:07:71:8d:22:63:7a:20:bc:35:32:f7:
                    cc:7d:ec:9f:88:ca:4b:0a:0b:f1:b9:89:2b:36:35:
                    b8:e9:04:a5:ce:ed:31:3e:1c:14:21:a5:d4:1c:dd:
                    02:ab:26:e6:36:91:72:03:ad:61:3d:21:35:f3:ac:
                    70:1a:89:ff:97:86:7b:96:3e:b0:96:63:03:f0:71:
                    1a:f9:b3:9f:b3:22:67:47:55:8d:c5:7e:e1:d1:a1:
                    18:25:ce:f1:73:5f:0a:bf:7f:50:e1:6f:1f:88:1d:
                    14:19:d5:11:98:d9:c9:64:22:db:e1:36:1d:d1:ff:
                    3c:c2:32:37:16:1c:84:d5:2c:9e:75:e6:10:6f:7e:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:A3:AC:8E:F1:89:F6:98:48:22:91:5E:5D:A5:21:F3:BD:92:58
            X509v3 Authority Key Identifier:
                keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ff:e3:7f:a0:ad:67:81:33:22:ef:9c:33:8a:f4:08:56:23:
         b4:5e:39:8b:20:26:30:95:0d:da:81:d0:63:9f:b1:83:66:13:
         d3:25:a3:fd:5a:e5:78:58:d6:4d:d2:0d:d5:2c:c1:33:88:16:
         20:47:bf:9e:cd:bc:02:6b:02:f7:3d:ef:29:5b:2d:41:73:5f:
         bd:5b:4a:40:cc:31:10:9b:51:ca:89:19:e1:49:3f:6b:b3:41:
         86:6a:fb:48:c8:15:f7:c6:24:a3:ee:ae:96:87:b1:a1:17:d2:
         8f:cb:c0:c4:69:f5:29:72:1d:0c:fa:33:d3:83:f9:fd:92:4b:
         10:7c:7e:50:45:4b:61:bd:91:23:f7:92:05:68:65:9b:3d:3b:
         7a:37:57:b1:e2:02:e5:16:de:dc:6d:94:00:32:2d:df:f4:d6:
         51:92:7a:5f:c7:83:01:fa:14:c0:47:5b:07:62:2e:35:50:94:
         b8:14:5f:a8:4c:ee:c2:cc:45:b3:6e:9d:90:40:7b:c0:4e:d0:
         36:6c:1d:62:e3:95:62:fe:64:d0:20:79:6f:d5:a3:c8:66:3c:
         0b:16:04:a9:4f:5b:c0:5a:fe:74:0f:f1:e2:42:10:1d:a1:3f:
         76:d3:a4:3d:76:8d:3b:a9:ee:0f:12:39:11:af:18:05:e5:de:
         a6:ae:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:42 2026 by rpki-client