Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File:                     hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier:          1OTcOjBAFZz8ydUBXUMzWgLybhrtlRSzNFXzb6c9FS8=
Subject key identifier:   5E:77:66:CF:A9:BD:D2:99:7D:61:F1:EE:93:EC:39:C6:A4:4D:89:14
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer:       /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial:       019CAEA382BA1A76C5D43ED63C0637D6D2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 13:01:17 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:17 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:17 +0000
Files and hashes:         1: YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa (hash: yfGpXBMwfuCn+DMxXYn3DWhF4inc0qBH11Kt+d+QCNw=)
                          2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: UPURHqETRnERNbExjm0dcFhxeKLQAQwtX4xAilkgutM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:82:ba:1a:76:c5:d4:3e:d6:3c:06:37:d6:d2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
        Validity
            Not Before: Mar  2 13:01:17 2026 GMT
            Not After : Mar  3 13:01:17 2026 GMT
        Subject: CN=5e7766cfa9bdd2997d61f1ee93ec39c6a44d8914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:5e:47:1f:0d:d2:d7:3f:fa:f9:44:29:b7:
                    6a:21:e6:7c:24:4a:fc:1b:ba:7c:fb:17:fb:84:3b:
                    52:9c:a0:a9:5d:ba:d9:e2:e9:1b:99:1f:01:69:f6:
                    33:b3:1b:a0:a8:9f:9d:ac:13:3c:51:42:36:bf:e9:
                    61:a7:12:26:9d:63:3a:50:07:18:71:c0:66:bd:f8:
                    18:d7:57:eb:c4:08:38:1a:70:72:de:44:16:02:39:
                    19:14:ec:e0:f9:af:c7:99:50:29:49:e5:2c:44:a7:
                    45:33:bc:56:8a:66:df:51:be:61:59:d6:a5:09:2a:
                    ec:5a:2b:e6:4b:76:a2:38:0d:bd:23:21:73:ca:22:
                    42:39:3b:66:58:ce:56:9c:8f:35:04:7d:6c:ff:6f:
                    41:f5:33:fb:76:ef:95:93:44:58:a7:49:93:03:3b:
                    5e:91:43:6c:6b:64:11:4c:2b:69:cd:40:ec:64:58:
                    7c:0f:ff:f7:c2:24:ba:e6:b2:a9:9f:94:a5:29:9f:
                    d1:d8:09:1f:ef:9c:df:97:66:35:8f:8f:cf:0f:e3:
                    88:39:c4:07:61:14:59:61:10:2e:dd:07:53:c9:bc:
                    60:c1:6e:bf:c7:57:f8:aa:25:41:f9:3f:c9:fc:17:
                    18:81:44:e7:d7:f1:b4:0d:33:84:e6:81:b5:30:a8:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:66:CF:A9:BD:D2:99:7D:61:F1:EE:93:EC:39:C6:A4:4D:89:14
            X509v3 Authority Key Identifier:
                keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:07:23:92:bf:ce:c3:f7:af:70:6b:25:38:05:b1:48:56:cc:
         4f:7c:2d:3f:02:ac:d3:a5:f6:e8:ce:b0:6f:79:c2:9b:b5:85:
         f1:32:88:a4:ec:6c:0c:0a:8d:7e:21:fc:59:49:e5:9e:be:b2:
         13:12:78:16:fe:33:17:e9:61:5a:7d:70:2c:34:38:a7:d7:85:
         49:63:e0:3a:f1:73:30:a7:8a:a2:c5:b6:79:24:c6:29:2a:f8:
         1f:fd:4d:0a:dd:fa:8c:0f:2e:ad:e7:ee:f5:78:cb:ef:1a:9f:
         7c:f1:06:cc:97:a2:25:38:0e:4b:c5:00:b8:1b:18:bc:c7:b8:
         c0:b7:5e:7b:56:28:79:69:01:c5:6c:cc:91:72:8f:73:91:03:
         54:4d:3e:78:9b:14:16:d5:c6:e6:9a:61:aa:ab:4f:3b:9a:3d:
         7f:c3:97:99:ca:1e:10:d2:3f:14:67:fe:d0:e3:a3:cb:38:67:
         99:07:3b:06:a6:23:ed:3a:60:48:ed:9c:e5:60:c4:e2:f9:69:
         7d:68:85:89:59:52:da:8c:f9:2e:2b:69:fb:cd:70:7f:06:c4:
         70:8c:d0:68:69:a8:af:c7:8f:5f:4a:e2:be:37:d9:b1:ec:17:
         0e:11:34:8c:16:6a:01:69:46:dc:d9:ba:27:d1:e5:21:ed:f2:
         f5:67:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:11 2026 by rpki-client