Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File:                     9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier:          /nNYHvDR+BLwDlRaUNrd6rvUNdKzKK//67CS2A1Li6M=
Subject key identifier:   99:A0:3C:C7:AC:56:13:E7:35:FE:90:93:FA:ED:F4:8A:85:C5:0F:79
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer:       /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial:       019CAC103856F713CB0554C151E8F33E70C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 01:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:09 +0000
Files and hashes:         1: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: x/HUX4xnPne5U1wCoU4n3ZegbPsrF9fzVOiSxzNBCWY=)
                          2: WR2mMv7qmUceN0Mkq4FVsAqss34.roa (hash: BI2UfIzSLpmq5ZqkIGDg6SgwwPzP/38b7CPwIY4B+T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:38:56:f7:13:cb:05:54:c1:51:e8:f3:3e:70:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
        Validity
            Not Before: Mar  2 01:01:09 2026 GMT
            Not After : Mar  3 01:01:09 2026 GMT
        Subject: CN=99a03cc7ac5613e735fe9093faedf48a85c50f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:a5:ff:a1:6b:c2:0d:50:f9:b5:27:be:bb:
                    4a:be:fb:c9:fb:ed:3e:03:a5:5c:5d:de:86:e2:9c:
                    ab:dc:8a:9c:e6:bd:45:95:ee:12:74:31:a6:bf:cc:
                    01:8f:45:0a:d3:0f:3d:3a:e2:85:d3:9f:4f:c2:6b:
                    2f:e8:37:46:9d:34:85:88:ee:04:a2:53:3c:a0:57:
                    e4:56:98:9a:df:74:b2:1d:11:34:b8:89:bb:08:e7:
                    7d:74:83:61:0b:9c:ce:1c:8f:c7:60:85:ac:f5:b0:
                    63:98:9e:5c:47:f3:a6:4c:f5:de:ef:13:f8:09:3f:
                    50:98:1c:5d:78:db:cb:3a:b7:6d:7b:6c:9e:12:a0:
                    d4:7d:b2:3b:85:20:6a:cf:b4:38:f3:9f:c5:bb:dd:
                    ae:d3:ba:7c:ac:4d:d0:36:0f:22:e4:ab:76:83:b4:
                    25:0a:10:1f:65:35:33:6c:9f:64:f7:f0:c4:56:5a:
                    9f:39:2b:a7:43:a1:58:32:da:15:a8:6e:c0:94:85:
                    86:7e:02:4b:b7:8f:ba:c3:be:d7:13:c8:20:8f:89:
                    f8:38:15:c0:6b:62:e6:3f:c9:3d:64:d4:27:aa:65:
                    0e:11:ba:4c:7c:30:91:36:7a:6e:bf:90:89:4b:09:
                    3d:77:e5:bd:2c:d4:96:ea:e0:a8:a5:53:a2:19:6c:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A0:3C:C7:AC:56:13:E7:35:FE:90:93:FA:ED:F4:8A:85:C5:0F:79
            X509v3 Authority Key Identifier:
                keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:05:72:13:d4:7a:50:51:de:df:86:06:65:5d:ce:b9:65:
         64:a9:2d:54:4c:00:af:7b:75:6a:95:1a:1e:1a:32:73:60:a4:
         85:dd:d9:6b:ea:56:dd:47:2f:3e:44:03:16:16:c4:1f:71:db:
         93:a6:9d:e5:33:ce:70:bc:88:e7:8a:fa:72:3d:69:c8:8e:d6:
         c5:44:ad:8c:7b:12:ed:27:70:36:ee:6f:6e:09:78:1a:60:c3:
         7d:64:e0:07:51:b2:39:c4:7d:f4:df:2e:b6:ea:b1:8e:0f:c5:
         5c:11:f1:54:46:94:21:59:c8:61:d7:e4:32:d2:40:cc:92:cc:
         0b:56:d2:3f:81:95:86:22:cd:c0:02:e9:90:6e:8a:15:d7:41:
         d3:1c:cc:9e:0d:98:7b:07:b7:45:10:90:61:92:a0:f5:97:e0:
         d0:e1:b0:a9:88:4a:47:13:85:67:08:94:75:00:3e:cf:19:17:
         97:bc:6b:1a:a6:3d:18:90:5a:54:24:ed:59:fc:62:07:8c:3c:
         88:0b:a7:93:0d:18:f7:f7:72:5c:4b:fa:13:a6:70:b6:bc:07:
         e2:cc:32:71:fb:e8:5f:e4:9f:4a:1c:95:28:0c:2f:46:d2:0e:
         f3:69:94:1b:38:01:0f:39:0c:cb:ba:86:cb:8a:01:e7:bf:a5:
         6c:c6:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:54 2026 by rpki-client