Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File:                     YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier:          rUaIX+GOMyS3nVWlRRi9o4oZOOdSJo5bMuVM+wrUHgQ=
Subject key identifier:   04:E3:96:92:58:BB:9C:F4:72:AF:09:7B:07:AC:E5:A2:3A:02:6F:08
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       019CAC46DA2CC28FC58A4B14437AD1607976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number:          184E
Signing time:             Mon 02 Mar 2026 02:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:50 +0000
Files and hashes:         1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
                          2: Dch7ul5aVnL_m2XEZjfUT9TlzKI.roa (hash: dY0WBC4mPaz5+Exli1KBR1KbgYfTH82golhb7jbBUj0=)
                          3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: DRGJMaG8zOfDWmudevKW+E4PxG6B20yaN0WiiqPOWms=)
                          4: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:da:2c:c2:8f:c5:8a:4b:14:43:7a:d1:60:79:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Mar  2 02:00:50 2026 GMT
            Not After : Mar  3 02:00:50 2026 GMT
        Subject: CN=04e3969258bb9cf472af097b07ace5a23a026f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:57:1f:50:b7:a0:99:59:35:02:07:88:0a:
                    6a:c7:f7:df:f5:f9:14:5c:a7:d0:93:bd:81:7b:8e:
                    fe:87:2a:df:d2:21:bd:3b:ed:1d:82:43:9a:9c:75:
                    05:15:4d:69:c6:fa:0b:a8:c8:75:17:ad:9d:3c:0d:
                    19:51:ec:b8:10:61:d5:cf:11:e2:83:f6:00:bf:a7:
                    c5:f4:59:5d:74:ef:f0:d6:9f:fa:d1:3d:af:e3:28:
                    64:58:ac:fc:4a:01:a0:17:3f:58:f9:c6:18:5e:01:
                    d0:88:41:96:4f:18:00:b3:d8:72:f4:9e:fa:ce:60:
                    a3:44:6a:b1:48:e8:9e:5d:50:3f:76:39:3a:5c:d2:
                    9a:49:cd:99:a5:58:f2:70:b9:e0:8a:69:89:a5:7f:
                    3e:5b:50:b8:6b:a0:67:03:84:c1:a1:d7:07:3b:61:
                    d1:8a:82:64:bc:98:aa:16:bc:49:cf:33:df:c3:c1:
                    3f:c1:f5:9a:d0:44:6a:9c:f8:a8:de:e4:09:1f:6b:
                    46:39:0f:36:ea:1e:1e:46:32:2e:c7:fd:bd:a5:ba:
                    1d:78:43:9a:0e:22:ac:8a:a7:89:59:7c:99:0f:53:
                    f7:c1:2a:c5:80:08:67:27:d0:ac:79:9f:7e:fb:52:
                    3c:95:77:d0:03:aa:2d:49:63:9e:fd:e7:7d:34:1e:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E3:96:92:58:BB:9C:F4:72:AF:09:7B:07:AC:E5:A2:3A:02:6F:08
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:a5:d1:53:c2:27:a7:6a:8f:7b:58:98:f8:3c:53:b8:96:
         26:14:48:91:38:33:dc:7f:c3:ca:2e:e2:43:e0:08:a9:6b:98:
         89:b6:cf:4e:bd:4a:5e:df:d6:6f:3f:bb:96:0a:f4:e2:33:93:
         ef:1f:a7:9f:8a:84:d0:8f:f1:00:31:1e:e3:d1:10:bf:b8:0b:
         d8:68:d3:24:7d:0e:f3:bd:0b:c1:fa:a3:40:26:05:ec:23:2f:
         c5:6b:71:52:ac:6a:ad:c6:4b:2c:ee:b5:2c:12:47:86:2c:23:
         4d:2f:e1:ca:aa:82:7a:16:0e:36:35:ce:19:d1:ff:89:ab:d6:
         0b:b6:94:9c:73:ef:54:a5:63:8e:04:ec:c1:eb:86:35:0d:b2:
         f4:56:98:69:4d:a6:3b:d7:13:6d:6e:4d:29:07:94:67:99:2c:
         15:b0:4a:51:aa:21:c3:a6:33:50:63:21:c9:4f:84:63:8b:86:
         8a:ec:83:25:20:f4:8a:1c:c4:aa:1c:37:cc:24:a3:40:5c:b5:
         93:bb:5d:aa:b3:1f:b1:ab:c2:b5:0a:a5:79:40:8b:75:b5:ad:
         10:e5:98:35:d3:e5:dd:45:d7:fa:d6:6f:d3:37:99:ef:28:b3:
         f2:5c:0b:11:9c:16:cb:22:52:ea:d8:a7:f9:3c:24:7e:f4:8f:
         71:aa:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:39 2026 by rpki-client