Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File:                     xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier:          4rr09jdlJpLZ3EeYHKZBGXvekyurYS/RZNOdIuFNZuE=
Subject key identifier:   F3:5E:C8:86:2D:DF:1F:B7:D2:34:6C:BF:5E:AA:D4:AB:5C:95:00:78
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer:       /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial:       019CACEB4AE363B83697410B322EFA657E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 05:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:27 +0000
Files and hashes:         1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
                          2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 5tqAR0p5vidqrtuw0Kvx8/eFQWeY6cuH8E1icV/lcOQ=)
                          3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:4a:e3:63:b8:36:97:41:0b:32:2e:fa:65:7e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
        Validity
            Not Before: Mar  2 05:00:27 2026 GMT
            Not After : Mar  3 05:00:27 2026 GMT
        Subject: CN=f35ec8862ddf1fb7d2346cbf5eaad4ab5c950078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:0e:55:96:e5:8e:5a:60:4a:17:2d:7b:49:
                    a8:fc:b1:5c:7c:98:e5:d0:38:6c:26:1c:b7:cc:f9:
                    5e:df:b2:8a:d8:4c:13:00:50:f8:14:a7:71:a9:f7:
                    28:2e:5d:67:7f:d9:fd:88:26:79:5b:44:dd:a1:8a:
                    9b:83:bb:7e:0e:e2:cc:6d:fe:8d:aa:c1:1a:46:cd:
                    d3:32:ed:87:30:ed:62:0b:74:44:a6:72:4a:89:ff:
                    56:28:1d:e0:ec:92:d5:42:50:dc:55:aa:4d:44:c7:
                    13:fa:a1:1e:54:3e:59:00:ec:92:55:3c:74:4c:81:
                    3c:d6:93:d7:2f:0b:1b:06:86:92:ea:1e:04:a0:ca:
                    3c:87:cc:32:98:cf:0c:46:37:5f:8a:df:f8:3f:86:
                    57:76:c5:8d:82:09:5d:ee:22:5e:af:da:85:5e:fd:
                    ec:95:32:e7:23:5e:cf:76:9c:bd:bd:11:c7:c2:84:
                    58:8a:b5:eb:79:a0:4a:c5:09:9b:f1:54:40:b4:14:
                    f8:9e:2a:b6:3e:cb:1e:89:bf:7c:3a:93:75:58:a6:
                    0d:f3:06:31:3c:79:1d:2e:5f:fe:87:70:04:61:f6:
                    0c:dc:06:67:ee:e1:96:2b:05:fb:37:20:5b:01:61:
                    a7:1e:89:a5:14:f7:23:0a:13:02:26:bf:ce:88:d5:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:C8:86:2D:DF:1F:B7:D2:34:6C:BF:5E:AA:D4:AB:5C:95:00:78
            X509v3 Authority Key Identifier:
                keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:8e:cb:25:7e:b0:2a:48:8d:08:c5:85:85:e9:3a:70:64:
         b9:b1:ec:7b:da:4a:ca:12:81:b8:df:a9:9e:53:51:39:b1:aa:
         75:f5:6d:57:6e:28:d5:2e:4d:35:68:13:5b:52:dd:33:af:89:
         65:5e:49:26:be:bb:41:23:38:cf:ae:35:8f:a9:05:71:3b:0a:
         f2:85:37:34:20:ae:2b:ac:5d:7b:24:88:31:d3:9e:33:3e:f6:
         63:a5:38:25:9e:e3:6a:9f:4b:34:62:9f:43:17:57:4a:93:02:
         e8:83:a6:69:9d:1b:a0:70:5a:b8:80:73:d4:2d:86:7b:01:92:
         42:73:f7:6f:77:92:f3:3c:68:31:fc:91:6a:04:74:78:42:e1:
         c1:11:ca:e6:d4:7a:2f:b2:2b:2c:28:c6:cc:c2:91:44:e5:46:
         8e:f4:4f:ae:19:ec:b0:58:72:d1:7c:f4:03:25:66:99:72:20:
         7c:b1:3e:5c:b8:52:62:fc:a7:e9:79:17:19:f9:0c:b9:b9:0b:
         f2:50:87:a2:82:39:c5:e5:2a:94:6f:20:9d:44:43:49:3c:2f:
         f6:a5:6d:84:eb:fc:c5:e2:44:0e:cc:2f:67:48:a5:ca:a7:bf:
         52:89:84:fe:cb:c1:bf:89:b8:49:57:8d:33:c9:1e:2a:ca:98:
         67:2b:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:13 2026 by rpki-client