Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File:                     V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier:          f3zIVB0V4iA/cjafprHSfIs1F4sqUjG8xVyljGooKsg=
Subject key identifier:   DF:B6:4F:7C:F0:1E:7B:4F:9A:81:D9:BC:64:1C:2D:C6:E3:02:E0:0A
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer:       /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial:       019CAC100561E359DC62F7A708CBCF7D79E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 01:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:56 +0000
Files and hashes:         1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
                          2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
                          3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: GlLDwbRA9Gac9HmEans4gFp7IsQ+8MGiU/oYb9XCRkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:05:61:e3:59:dc:62:f7:a7:08:cb:cf:7d:79:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
        Validity
            Not Before: Mar  2 01:00:56 2026 GMT
            Not After : Mar  3 01:00:56 2026 GMT
        Subject: CN=dfb64f7cf01e7b4f9a81d9bc641c2dc6e302e00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:08:c3:d1:ae:b3:e4:03:2d:4d:00:2c:9b:
                    b2:54:4d:f0:cb:12:9f:42:61:09:c8:3a:50:71:b6:
                    8d:1e:fc:d8:45:a2:bc:06:e7:36:b3:10:38:67:e4:
                    2b:7d:c8:03:79:3b:93:fe:28:41:74:57:e3:ad:6d:
                    8c:31:ab:c8:62:11:a6:59:07:c1:cf:ea:ad:07:84:
                    13:64:b4:c9:56:05:ec:3a:ac:99:ad:6a:9a:e8:8d:
                    7f:06:ff:db:21:2b:52:99:74:55:ba:60:dc:7a:e0:
                    ff:d9:6a:c5:25:ab:39:41:8b:f4:51:92:20:4e:a4:
                    06:16:32:18:bf:49:64:99:3d:e6:ee:c2:10:22:34:
                    75:b1:89:58:fc:c9:f4:0c:68:03:62:c5:92:14:01:
                    aa:20:cd:7a:3e:4b:cf:c6:4a:29:97:7c:3e:74:08:
                    5f:20:ef:59:76:a8:63:43:2b:19:f7:1e:e4:b8:76:
                    62:68:63:3e:cc:22:a6:37:b7:c6:24:03:f0:81:5e:
                    a4:e1:5e:61:60:b0:8f:af:21:e2:d1:4c:58:a6:ca:
                    3e:b6:e4:03:b3:d9:b1:6a:59:00:df:a9:5e:ca:ef:
                    c6:4e:8e:8f:4b:1f:a8:0f:40:89:23:ab:a4:8e:96:
                    4d:9d:07:0c:d8:6e:76:5b:86:5a:20:fd:2b:84:fb:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:4F:7C:F0:1E:7B:4F:9A:81:D9:BC:64:1C:2D:C6:E3:02:E0:0A
            X509v3 Authority Key Identifier:
                keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:60:20:0e:f3:00:6e:54:0a:1e:f0:80:50:0e:d4:34:d6:bb:
         84:52:da:68:7c:ab:b0:65:52:03:7c:b5:f9:5e:68:16:43:51:
         1d:19:1a:77:d1:15:ec:9f:19:45:2e:16:73:52:33:4c:6f:08:
         a7:1f:df:22:1e:05:7d:a2:c5:6c:58:6e:91:11:e9:1e:b5:33:
         67:b9:a9:d9:0e:fe:de:7f:39:a0:67:70:6e:32:22:c8:bc:69:
         41:75:87:e7:a5:63:ce:f6:5a:3e:ef:2a:e7:df:d9:c4:ae:ef:
         56:16:06:21:7e:ef:90:3b:74:ec:97:0d:0e:aa:e8:e8:13:b2:
         03:e9:e2:0a:b5:74:a5:95:8e:f5:88:ea:ab:4c:3c:97:8c:e7:
         c0:d4:70:85:aa:23:e3:d6:a6:e4:e5:18:66:fc:74:57:60:82:
         a9:5d:9c:01:85:cb:8b:a2:fa:93:fa:b7:6a:f8:75:3e:31:72:
         39:6c:10:7c:33:62:58:5d:1c:41:f2:b4:d6:5b:ce:3a:b0:df:
         0b:6a:49:78:62:bb:da:4f:47:45:73:5b:59:49:42:24:8d:3d:
         e0:7a:fb:71:3c:e4:f0:89:8d:e7:a3:c8:a4:9f:b8:12:87:79:
         c0:65:0e:ca:40:95:37:2b:7a:5a:6f:c9:bb:35:f6:18:cd:cc:
         e4:1d:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:31:01 2026 by rpki-client