Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          v0uedst8ka2wDpUZuBnFW9Cm2jQ7IuACGjuDgDHf8mE=
Subject key identifier:   4C:2D:37:7B:B8:BC:C3:FB:D5:BF:22:8A:10:4C:C4:14:5B:83:E2:4C
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       019CAA217EA0081506DB383947E774177701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          182E
Signing time:             Sun 01 Mar 2026 16:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:47 +0000
Files and hashes:         1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
                          2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: +Vab6hSfdc7SXQttjBHK+S5bJrhpyhZxjn/87w4WHHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:7e:a0:08:15:06:db:38:39:47:e7:74:17:77:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: Mar  1 16:00:47 2026 GMT
            Not After : Mar  2 16:00:47 2026 GMT
        Subject: CN=4c2d377bb8bcc3fbd5bf228a104cc4145b83e24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:ca:c9:23:0b:35:f9:8e:a5:ed:9d:af:b8:
                    59:bd:a3:28:d2:ad:7e:e6:cb:03:cf:c5:c4:f5:58:
                    52:43:ee:fb:79:ec:6d:a7:1f:95:e3:8c:f2:33:13:
                    1e:6a:95:e8:2c:0d:ab:3c:50:ed:c9:7e:27:ad:10:
                    99:a1:a2:02:e9:89:dc:13:fc:01:98:89:84:fd:44:
                    70:19:ce:4e:8d:ed:11:ce:8e:71:68:94:94:b6:21:
                    4e:90:c8:e6:bf:5a:72:b0:54:e0:34:83:22:84:15:
                    41:71:fb:4d:cf:a9:bf:da:fe:55:67:47:8e:af:e0:
                    e6:25:e1:53:29:f8:42:59:9e:c1:9b:3d:74:d1:dd:
                    67:51:80:1d:c3:24:81:f5:77:96:af:83:da:46:59:
                    3c:76:69:ec:1e:c8:80:f6:78:93:26:09:74:2e:04:
                    06:37:fc:56:66:5a:b0:31:ae:a9:7e:c0:ee:4e:e0:
                    0d:cd:c3:92:69:a9:f2:9e:ef:82:9a:ce:c8:fb:aa:
                    41:3e:5e:98:09:7f:88:4e:21:fe:78:5f:5b:8a:e7:
                    f0:96:a0:24:a5:40:56:d5:6e:82:54:ea:8b:00:1f:
                    11:50:13:12:5e:50:7a:22:20:0d:3e:e6:bf:80:69:
                    31:12:40:d9:05:25:af:93:4d:98:13:9e:25:21:93:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2D:37:7B:B8:BC:C3:FB:D5:BF:22:8A:10:4C:C4:14:5B:83:E2:4C
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:61:d5:e9:b0:42:40:f2:7c:a4:d0:29:aa:5c:0c:43:aa:8c:
         c3:d5:51:df:d3:69:78:41:2f:20:48:3d:54:a1:ce:e1:40:ea:
         82:0a:cc:78:96:e8:17:47:5c:39:c0:57:fb:ff:c6:7d:d8:01:
         c9:15:b7:43:02:e5:2b:9b:3d:9a:09:46:54:45:7e:9e:70:d2:
         01:46:46:78:f4:9b:65:aa:33:c3:35:18:9c:05:8f:5d:7a:76:
         4b:e1:10:14:8a:4d:14:79:c2:c3:40:b5:0a:a5:a0:40:8f:91:
         22:11:1a:3c:c7:30:84:4f:13:f9:d4:41:ea:8c:88:1b:bd:62:
         94:94:63:1e:e7:dd:05:f9:d3:2f:73:dc:e8:3c:b8:24:76:fd:
         21:46:dd:7c:a5:00:50:8d:60:98:47:ad:c7:ca:73:a1:85:f8:
         4f:cd:3c:c8:c4:d5:74:c6:ba:eb:c1:9f:f9:35:97:ec:51:da:
         ba:7a:d6:2c:1a:98:9c:2c:c4:91:d6:93:fe:05:2e:b5:90:dd:
         06:31:1a:12:15:9b:7a:80:3d:89:f0:1e:c4:0a:63:58:26:89:
         dc:df:be:f5:e0:bb:a1:d4:a8:20:89:34:d5:c3:9a:3a:fe:1c:
         95:12:43:49:69:69:3c:60:64:c1:a5:d5:1c:a0:a8:5d:27:e4:
         ce:36:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:10 2026 by rpki-client