Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File:                     sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier:          oZTB5H4mHRXCezJSMtpH1ThJ+l9unlLmiS+obWj9Dqs=
Subject key identifier:   0F:4E:80:D8:68:7F:B2:D7:EF:AE:11:F1:C5:6B:53:4D:17:0A:89:67
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer:       /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial:       019CAC101B6701F0816F1412B9C239856F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 01:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:02 +0000
Files and hashes:         1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
                          2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
                          3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: D1qjNTwcC6I1PgbZvd2PjzR4w0jYLhqAUmE/UkSBxNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:1b:67:01:f0:81:6f:14:12:b9:c2:39:85:6f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
        Validity
            Not Before: Mar  2 01:01:02 2026 GMT
            Not After : Mar  3 01:01:02 2026 GMT
        Subject: CN=0f4e80d8687fb2d7efae11f1c56b534d170a8967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:7b:a0:82:42:69:1b:b8:79:74:da:79:fb:
                    05:f8:7c:66:0a:a3:84:59:bd:75:da:a3:13:10:73:
                    56:7a:78:77:f5:e0:8b:b3:fa:a6:8d:e6:4e:eb:71:
                    fa:83:e3:ca:4b:2f:45:58:2f:35:0d:28:00:e7:db:
                    a3:51:98:ed:4f:0f:c7:f1:5f:45:aa:32:68:3b:f9:
                    65:c7:ad:f4:d6:18:5a:d9:5f:e7:0b:95:9f:08:8c:
                    3c:ba:f8:cc:23:9d:20:6d:f3:9c:77:84:38:56:d5:
                    2e:93:04:01:8b:bb:26:2b:46:85:1d:94:17:3d:d9:
                    a4:0d:f1:17:40:53:cd:3f:67:72:3c:02:7b:b1:49:
                    be:7b:87:b3:0e:13:d1:6e:4c:bf:3c:f7:d1:0d:51:
                    9f:c3:a3:a3:f0:80:58:fb:d2:b2:3e:ff:56:59:00:
                    bc:a2:7a:81:4a:32:4d:10:12:a8:de:4f:bf:44:e4:
                    03:68:ac:e5:c8:6e:74:b9:fb:40:ad:e4:83:44:fc:
                    b1:cc:cf:30:15:1f:a5:f1:f3:89:1d:d5:6e:d8:12:
                    d6:d0:86:8d:81:36:6e:fd:ff:80:34:ff:75:9f:6c:
                    61:8a:f0:05:a2:f0:64:c9:a4:de:07:e4:44:c5:ff:
                    07:4b:f3:7e:56:04:73:0e:6f:05:54:2a:71:0e:9a:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4E:80:D8:68:7F:B2:D7:EF:AE:11:F1:C5:6B:53:4D:17:0A:89:67
            X509v3 Authority Key Identifier:
                keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:56:e8:2e:6a:f2:4a:02:ac:85:cf:13:8e:de:13:36:f2:62:
         cb:a8:83:65:c1:fd:7b:69:82:27:d3:31:18:c7:e9:64:5d:6d:
         2e:da:e2:7e:2e:07:76:7a:f4:b2:fc:ef:5d:42:dc:c6:18:e9:
         e4:96:63:27:1b:da:ea:e3:d4:65:68:27:2a:b8:80:c4:b0:a5:
         b2:9c:01:76:20:d4:c6:17:4a:c6:f1:c6:17:ce:ce:ee:a5:63:
         d2:6a:69:4d:99:9c:72:65:b4:55:6f:70:20:8c:4c:aa:bc:d0:
         e8:2e:61:65:26:f5:1e:f7:78:5f:45:1c:4c:86:7c:c6:96:e2:
         74:63:8b:42:cb:42:40:67:8c:90:bb:45:26:72:71:4a:fd:67:
         31:47:0c:2a:44:7a:de:1f:2e:07:42:a7:5b:81:78:af:1a:e1:
         50:c6:5e:a7:87:f4:5d:80:c5:de:ad:f4:68:2c:d7:d0:68:f6:
         bb:ba:9c:db:9a:30:7a:5b:01:96:52:cd:7e:4d:76:0c:03:34:
         df:25:80:c6:4f:9e:5e:2e:83:88:95:71:b0:0c:d6:c1:22:2a:
         91:f4:1b:35:80:d3:af:86:6a:33:ca:b7:c9:47:57:a3:be:79:
         ee:b4:0d:37:61:af:1b:65:17:bb:23:c5:60:4b:6d:cc:90:6f:
         df:1f:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:52 2026 by rpki-client