Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File:                     dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier:          teUm2YbQs11KBjpw6A/slpeMm9Fm0rHH6pE/JQk0X4M=
Subject key identifier:   B5:E7:FB:5D:83:43:BB:84:DC:6C:A7:6D:32:8B:8D:FC:2D:28:F2:2E
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer:       /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial:       019CAD22ABED64E8DDB3C26C36DCE87489C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 06:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:56 +0000
Files and hashes:         1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: YMwJaNJZM9ARWRy9LLek1i4OYc47Jm1TO/C+y26nRRA=)
                          2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
                          3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:ab:ed:64:e8:dd:b3:c2:6c:36:dc:e8:74:89:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
        Validity
            Not Before: Mar  2 06:00:56 2026 GMT
            Not After : Mar  3 06:00:56 2026 GMT
        Subject: CN=b5e7fb5d8343bb84dc6ca76d328b8dfc2d28f22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:eb:01:92:69:3e:c2:de:5f:7c:2b:96:53:
                    aa:81:52:42:92:8b:e0:8d:ed:ac:92:b8:a3:5a:de:
                    0f:2b:d4:8a:06:7d:79:24:99:12:43:da:7f:b3:d5:
                    d9:b9:29:69:8b:8e:02:9f:dc:80:c9:e4:72:ed:ef:
                    21:02:b5:8b:8d:c6:4b:54:af:45:9a:d3:0b:b1:2b:
                    94:94:63:4f:93:e2:52:7d:62:78:a4:b3:92:6c:6c:
                    13:0e:ea:ad:39:db:11:12:0b:c4:ae:95:97:f8:fe:
                    d1:7a:e1:36:72:01:1c:0c:8b:2f:69:85:af:59:74:
                    77:22:75:67:c6:c9:b3:bd:ed:5b:57:df:ba:da:ce:
                    46:a7:c0:cf:97:93:7e:4d:fd:6a:89:d5:2b:1c:da:
                    98:1f:b1:a9:c7:ca:69:af:a5:18:45:6d:6e:78:ab:
                    28:47:20:01:46:a2:84:05:ba:b9:2f:2c:4e:e7:db:
                    dd:53:00:a5:3f:b0:00:1f:6c:f8:55:9c:1a:9c:9e:
                    86:78:7a:81:f7:d6:51:41:68:f5:8d:8b:71:84:66:
                    41:cf:ba:80:4f:0b:8d:a5:87:91:d6:a4:b4:55:98:
                    ec:c3:34:04:98:2b:19:da:77:8c:bf:07:16:92:3c:
                    97:0d:32:37:26:f3:40:d3:cc:80:51:f4:41:88:47:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E7:FB:5D:83:43:BB:84:DC:6C:A7:6D:32:8B:8D:FC:2D:28:F2:2E
            X509v3 Authority Key Identifier:
                keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:55:c5:a8:16:5a:0a:a7:a5:72:18:04:5d:36:7e:df:ed:
         60:38:f9:bb:37:cc:62:a1:40:39:50:c5:ce:3f:00:28:ff:d0:
         8b:88:6a:ef:3c:96:0a:c9:1d:39:9b:e6:61:b9:fd:db:d7:b7:
         d2:ef:78:0b:74:36:57:6a:19:d7:cb:87:8d:f2:38:f7:66:bd:
         df:29:ad:d0:ee:1e:66:73:a1:21:42:40:7d:49:eb:9c:3e:4d:
         80:88:84:19:9d:a5:2b:c2:03:67:e8:aa:f8:b7:14:54:58:73:
         c3:ea:d6:31:c2:91:05:19:8d:0f:26:86:89:2e:46:c2:30:dc:
         b4:6f:c4:7b:86:0e:a0:a2:28:1c:48:77:11:44:aa:51:63:e6:
         61:23:d6:5f:77:9b:e4:8f:09:48:05:27:58:75:75:e9:ba:9f:
         77:91:5f:00:a4:17:b9:c9:b8:f6:07:4c:67:eb:5b:30:84:b8:
         62:3a:b9:35:70:92:4c:0f:17:a8:f8:d0:9b:bc:14:72:ad:0f:
         40:03:e6:af:9c:c4:3c:6b:04:0b:9c:b3:c7:9c:fd:ad:6f:20:
         24:d7:af:d8:92:86:fc:57:b3:1c:f1:4b:98:fc:2b:a3:36:0c:
         26:3f:51:c3:ea:73:cb:c1:76:6a:f3:3e:cb:dc:74:39:c8:38:
         ca:6b:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:38 2026 by rpki-client