Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          VHxWfrClrBxq/u2R00pbXy9cEAhS52mXnychzAqcF1I=
Subject key identifier:   9F:BD:54:A3:B7:1C:85:8C:C5:85:43:0F:D8:86:3A:B2:69:67:00:01
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       019CACEBAD7C4CBD640F857BE669C5C56C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 05:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:52 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: OHKiDRsJagvlDmh+y9fB6s4vTvFyB3qMXFXlL3pJx4Q=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:ad:7c:4c:bd:64:0f:85:7b:e6:69:c5:c5:6c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Mar  2 05:00:52 2026 GMT
            Not After : Mar  3 05:00:52 2026 GMT
        Subject: CN=9fbd54a3b71c858cc585430fd8863ab269670001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:64:8c:13:b1:e9:d8:99:7c:ad:aa:25:a2:
                    2c:9f:27:40:1e:08:69:1f:bd:69:84:bb:9a:cb:ed:
                    3c:c3:f1:d1:41:a7:f0:dd:15:ad:cb:e0:c7:14:db:
                    bf:e1:5b:dd:45:cf:27:98:cd:63:99:59:9b:41:ad:
                    86:f8:04:40:5d:00:ca:80:11:50:14:1c:3c:5c:1e:
                    19:c0:ff:6a:88:05:93:f7:d2:58:c6:a4:74:91:40:
                    1a:5a:19:c9:f8:68:3d:3b:f2:9e:1e:6f:0c:63:90:
                    73:33:56:b9:df:c2:91:bb:23:43:ba:2a:69:ed:7b:
                    81:16:25:d8:06:f7:15:cc:44:9d:8a:d4:3b:d5:42:
                    50:e7:aa:18:e9:c2:51:3f:f8:d6:35:42:dd:e8:39:
                    ee:41:62:66:91:5b:6a:f0:84:69:d7:e4:4b:9c:92:
                    b5:6b:ee:66:f9:9a:e9:8d:38:f7:39:da:6f:7f:56:
                    98:45:9f:94:b1:34:7f:9a:6f:9c:2a:49:2b:b9:84:
                    51:4d:1c:36:13:bb:2d:9e:ec:04:ed:a4:6a:a1:45:
                    37:13:9c:8c:df:43:b2:50:d6:1f:19:df:d7:15:2f:
                    dd:05:c0:21:cd:d5:93:75:8b:0c:b5:88:a2:e1:3d:
                    5f:5c:6b:1d:9b:3c:2d:81:e4:ae:59:d3:1c:0d:ae:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BD:54:A3:B7:1C:85:8C:C5:85:43:0F:D8:86:3A:B2:69:67:00:01
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:e9:7a:05:36:b1:f6:e8:6a:8b:ab:c7:53:a1:04:9a:4c:
         9c:88:3e:b5:cf:d2:6c:3a:94:cc:f8:d5:ed:6a:7d:87:a2:5d:
         ac:de:16:0c:f8:3f:b5:99:74:08:4e:13:e6:32:43:29:ad:a1:
         8c:26:a0:35:47:97:35:2c:6a:e7:45:aa:28:75:18:96:f2:d3:
         02:51:c4:4c:e3:d6:2f:2b:28:0a:07:5a:3f:61:19:41:8a:a4:
         22:44:51:cc:bb:87:d6:26:6a:c3:4c:2f:fb:af:90:be:af:9a:
         dc:4c:c2:f6:7e:79:a4:a0:8f:e7:a0:5e:69:05:66:8a:5a:8b:
         ea:cb:39:d6:b0:1a:d3:01:68:69:ce:9a:08:ee:30:d1:02:3b:
         8d:92:e7:5f:09:25:7f:d0:82:bc:ce:a0:36:79:17:ac:d7:82:
         81:de:f2:3f:01:81:0a:6d:6f:51:db:44:e7:7c:30:ac:52:d3:
         3e:e4:33:33:43:29:10:11:c1:49:53:c0:84:1e:cc:31:82:c6:
         e0:a8:5c:b9:cb:5c:82:01:eb:b8:f9:f2:68:d2:8f:e6:dc:93:
         2e:6b:ee:29:7a:99:08:01:03:5a:84:e6:2e:a0:b9:0c:4c:b8:
         f0:6d:77:19:47:19:40:4c:82:c0:a2:a0:55:fa:2a:5c:c6:e5:
         e3:f5:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:58 2026 by rpki-client