Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          4vm/ppNcCS1TTX6m6AB2Bw0K2sFc2Ld+9J+ZIs+xDXw=
Subject key identifier:   D8:52:04:42:44:E1:4B:5D:60:03:83:3A:58:E8:58:F3:64:1C:69:86
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       019CAC478749D35198F0768F5B00116D395E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          185C
Signing time:             Mon 02 Mar 2026 02:01:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:34 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:34 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: NpBuUAs275wfQmix4yLvKOReYpX55nsE445riq9n/10=)
                          2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
                          3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
                          4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
                          5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
                          6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
                          7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
                          8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
                          9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:87:49:d3:51:98:f0:76:8f:5b:00:11:6d:39:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Mar  2 02:01:34 2026 GMT
            Not After : Mar  3 02:01:34 2026 GMT
        Subject: CN=d852044244e14b5d6003833a58e858f3641c6986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:97:d8:18:56:76:1c:c9:42:37:4c:34:0e:
                    55:b2:43:3b:f0:4c:7c:6b:a7:5d:99:94:59:0f:96:
                    6c:9e:65:2c:8e:1f:b5:62:a5:8a:b1:03:07:d5:4d:
                    4a:d9:b7:24:ef:44:59:c8:bc:76:65:0e:ea:f0:cc:
                    5c:0c:06:63:11:41:a4:6d:53:9c:27:50:48:9d:99:
                    6c:2c:4c:10:d7:33:ec:32:52:a9:83:69:55:18:3d:
                    ec:18:5d:1a:6b:5c:50:15:99:e6:fc:ad:c7:35:a0:
                    c1:c7:db:4d:64:61:e6:cb:33:e6:b6:d1:80:71:8c:
                    0c:81:47:5a:32:d2:43:e5:8f:28:19:71:52:b6:7e:
                    82:d8:51:57:22:13:57:ae:31:85:b2:97:b1:b0:4c:
                    e0:a4:f8:3a:76:a1:77:a2:8d:05:be:4f:06:6e:f8:
                    df:3e:3f:8b:de:09:64:02:5c:79:8e:82:67:92:6f:
                    b5:8b:63:b4:4e:21:17:aa:21:aa:ec:61:3d:ad:a0:
                    71:17:37:4c:26:06:53:cb:20:6c:08:a3:7a:33:78:
                    51:84:82:cd:25:3c:f5:0d:46:65:d7:ec:5b:91:4f:
                    ab:cf:ab:36:2c:38:79:ec:9f:c0:1c:bf:85:6c:72:
                    c7:2e:35:bd:40:f1:c0:3b:51:ac:b0:3e:db:64:08:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:52:04:42:44:E1:4B:5D:60:03:83:3A:58:E8:58:F3:64:1C:69:86
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:87:52:c7:49:d7:3f:c4:31:26:27:da:7f:a9:80:7a:9e:
         32:2f:fb:98:d1:54:f5:9e:43:4a:73:2d:e9:7c:c3:21:56:d8:
         8c:f8:c3:53:a2:ee:91:48:6b:a0:b1:44:aa:a8:ca:1f:50:f9:
         91:75:20:b5:cd:ad:87:e2:58:41:a2:9e:ff:20:44:46:1d:06:
         14:17:7e:ad:69:ce:30:07:d5:1e:37:2e:a3:08:bf:d3:9a:7c:
         b5:61:e4:40:33:d8:bd:51:6c:42:1b:b0:97:70:86:23:6d:13:
         9d:95:b4:ea:f6:f6:4c:18:eb:00:35:11:cd:3b:20:9a:b1:96:
         b0:cb:00:c0:67:98:09:6f:c6:ac:20:c4:25:24:41:0a:62:f1:
         c7:38:e0:d9:b0:3a:35:ea:6c:07:d7:b9:80:fd:61:62:4b:67:
         b2:d3:61:c9:a0:e7:e0:29:e4:dd:08:8d:59:54:e6:c2:75:74:
         64:88:33:d0:3f:13:4f:1a:b7:6a:65:d5:60:da:4e:2d:fd:ce:
         3f:b5:80:09:ab:26:81:d7:54:f7:a8:65:80:49:95:9a:9c:9b:
         ef:eb:68:38:84:06:59:3a:b6:a3:0d:cb:82:23:f3:2f:dc:28:
         6e:d1:59:3e:80:57:b5:5b:64:68:54:7e:47:24:24:73:b2:ed:
         32:ec:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:34 2026 by rpki-client