Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File:                     soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier:          dFTL0d0XWnH6YxYiRfBTks0di5D2KbsYOHBlG8iQ/9M=
Subject key identifier:   84:C0:7E:13:60:0D:4A:59:F0:B9:DA:82:D0:47:FB:C8:20:C5:B5:C4
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer:       /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial:       019CAD22EAFD365916E4CC46F2875FC13EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number:          184E
Signing time:             Mon 02 Mar 2026 06:01:12 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:12 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:12 +0000
Files and hashes:         1: _oMe5r1pVk1eWmBM0xQjlQQMYoA.roa (hash: vP6cRMyhx+tL5mecHizDEMHQb47lEApjkAoW42mWOaI=)
                          2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: 1GFjveP0r31fTDh7WXPpOYmn5Nvck+H9YoudQ8Mi57M=)
                          3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:ea:fd:36:59:16:e4:cc:46:f2:87:5f:c1:3e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
        Validity
            Not Before: Mar  2 06:01:12 2026 GMT
            Not After : Mar  3 06:01:12 2026 GMT
        Subject: CN=84c07e13600d4a59f0b9da82d047fbc820c5b5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:80:7a:8b:9f:6a:50:10:12:85:2b:25:64:
                    e7:56:a4:9c:ed:5d:9c:5c:a3:9a:1d:c6:3e:0f:ec:
                    cb:1c:9c:a3:a2:f6:c1:34:ca:5f:17:a3:d6:2c:b2:
                    7b:cd:45:81:b8:39:f0:b1:26:96:9e:75:d1:15:5f:
                    db:e4:9e:38:2e:94:98:0f:75:a9:47:a8:d6:fb:3e:
                    22:6c:1c:5d:4e:9b:6c:de:47:49:14:92:54:77:6b:
                    e2:58:1e:a6:6f:0c:a5:e2:c5:55:05:35:4c:f7:d5:
                    c9:6c:e4:4c:ef:59:dc:4b:f8:da:b7:59:e4:e9:f3:
                    06:5e:8a:61:97:4b:2a:83:4c:29:88:8d:de:3b:76:
                    6a:64:3e:a0:f3:e9:bc:e6:d7:24:09:90:ab:b9:ee:
                    91:81:81:ca:af:e7:bd:07:a9:43:48:c1:f2:d7:9d:
                    f4:94:d0:29:b3:b2:3d:63:42:38:f8:93:94:0d:a8:
                    27:11:51:b0:c5:99:90:e1:b3:e3:26:ec:d5:0e:cd:
                    90:18:aa:1e:b9:bd:47:a7:c9:98:a0:b4:a6:07:2c:
                    79:57:36:9c:6a:f4:5c:f0:eb:da:a6:82:9a:65:ff:
                    9b:39:85:2e:e8:4f:0d:9e:8b:97:ba:21:f7:d6:37:
                    95:9a:ff:b5:07:2f:26:f8:9d:47:3c:31:94:d3:2a:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:7E:13:60:0D:4A:59:F0:B9:DA:82:D0:47:FB:C8:20:C5:B5:C4
            X509v3 Authority Key Identifier:
                keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:4c:68:5d:79:b8:89:53:90:a4:0b:b7:62:1e:92:d2:7a:1c:
         c9:76:08:75:2a:37:5f:6a:a4:fe:83:d6:0a:79:a8:d5:7c:88:
         55:9e:35:06:e7:8f:cc:e8:7a:e5:15:34:35:a2:a8:85:26:e3:
         90:62:5c:96:e6:e9:ae:2b:d0:21:66:fd:08:c2:04:5d:26:36:
         3f:96:8a:eb:4a:46:e1:74:6a:75:25:13:31:c8:7d:5e:88:03:
         d9:5a:61:42:cc:00:8f:3d:67:f3:2f:ed:62:1d:75:dd:0b:18:
         35:ae:b2:dd:17:97:5c:bf:7b:21:68:5d:c9:b4:78:24:e1:64:
         4e:e9:02:6f:8d:d0:af:8f:c5:06:aa:a6:b5:ec:fe:ab:7d:6e:
         69:80:b6:28:86:6e:be:e7:3f:0a:62:c9:ed:6c:10:2a:5b:72:
         ec:d1:bb:26:c3:ab:44:ec:c0:ca:aa:88:00:f4:97:d2:88:80:
         d0:3e:95:4b:7c:59:3b:13:4f:69:d8:87:e9:8d:48:45:d5:eb:
         7d:14:ad:71:d9:b0:41:b3:3a:a6:84:63:a3:27:fd:cb:24:78:
         7b:14:b0:4f:e6:cc:a2:d8:9d:02:68:09:52:ca:e2:07:3b:a5:
         6a:8d:09:95:cf:c4:9e:d8:8b:f9:7a:c9:3d:56:ce:2a:d3:f0:
         b8:ca:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:48 2026 by rpki-client