Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File:                     peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier:          9j4+VgEBySEyn/qLuECGWZDj7QGUDglh+FtNVYWJ6Xk=
Subject key identifier:   A4:18:03:BC:7E:E3:5D:72:31:BE:ED:B4:25:B7:1F:05:2A:ED:26:F6
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer:       /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial:       019CAE34E49797232751617F9F6776815AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 11:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 11:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 11:00:27 +0000
Files and hashes:         1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
                          2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: 55U9P2OvxWH3IlRjmtwi3K5bBGWEYCQvcAkFxmzzTOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:34:e4:97:97:23:27:51:61:7f:9f:67:76:81:5a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
        Validity
            Not Before: Mar  2 11:00:27 2026 GMT
            Not After : Mar  3 11:00:27 2026 GMT
        Subject: CN=a41803bc7ee35d7231beedb425b71f052aed26f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:c1:d7:9d:11:36:91:df:76:6a:45:65:23:
                    1c:9a:fb:26:e0:3a:b1:57:0d:e5:74:71:7d:91:60:
                    64:ad:7c:78:28:f4:41:e9:e9:23:65:69:3b:f3:7c:
                    c2:74:7b:1b:47:d8:b4:d7:a8:ce:66:c6:a9:47:ac:
                    23:6c:ca:c5:d8:0d:3d:ad:ee:db:7c:47:da:d5:a9:
                    1a:f7:f7:d4:09:c9:db:bc:f3:f9:b5:fc:c6:1c:65:
                    ab:34:db:38:23:75:07:68:ec:c7:89:4b:5f:8e:a9:
                    f8:17:cd:50:d1:23:fa:48:44:e3:31:b3:d2:75:d1:
                    8c:7f:4e:17:54:a6:5a:6f:b6:9a:19:dd:cf:7a:96:
                    0d:34:68:ab:7b:78:81:e7:b3:2a:9f:1f:e8:30:4d:
                    29:ff:a2:75:a4:6a:47:48:79:9b:a3:8d:7f:b6:26:
                    53:21:68:1d:b6:63:d6:92:73:cc:b5:31:92:a5:f8:
                    a5:f0:32:f8:cc:c5:20:2a:ff:26:ba:36:f0:35:68:
                    fe:1a:17:3c:5d:32:4d:5d:cd:98:40:81:6d:53:6b:
                    97:f0:f9:a2:32:2f:44:24:a3:d2:bc:a3:8d:2e:4d:
                    8f:5f:eb:9e:1f:6a:92:c9:bb:93:99:4d:12:21:ee:
                    04:95:c6:e3:b6:32:04:d3:5b:7c:7d:5e:0d:00:33:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:03:BC:7E:E3:5D:72:31:BE:ED:B4:25:B7:1F:05:2A:ED:26:F6
            X509v3 Authority Key Identifier:
                keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:65:e8:8b:6f:d1:ea:a4:88:f7:49:67:e2:ba:03:7e:10:
         74:0a:81:7d:27:6a:39:40:db:46:ae:26:6e:ad:c8:cc:ba:30:
         a9:b1:17:6b:00:63:41:de:8a:50:33:5a:84:46:47:59:7e:86:
         d3:a4:f6:e9:7f:09:40:f1:5d:9f:83:b1:91:a3:bd:06:ac:6c:
         2c:ff:b4:de:dc:1c:e3:ee:de:db:a1:b7:17:5b:d4:45:eb:c2:
         ac:03:54:c6:68:b3:7a:96:d2:da:43:b1:90:f0:7a:63:31:71:
         ce:ec:6e:c3:2c:07:c1:c6:09:da:54:3e:f8:41:ba:42:db:7f:
         31:f0:3b:08:b1:64:9d:a0:c0:44:86:73:51:df:bf:25:fd:73:
         73:0d:03:d2:41:f8:d1:87:74:bc:54:c5:13:27:fc:3b:9d:4e:
         de:38:45:40:69:26:82:9b:c3:a4:dc:b8:1f:53:59:ca:68:93:
         52:c3:12:03:29:8c:eb:e4:49:ae:e9:c7:a0:e6:e8:3e:46:ea:
         99:a8:39:02:7b:6c:f4:83:a5:e9:17:e3:76:c1:46:ba:41:07:
         5e:35:d9:93:77:9d:f6:57:50:a6:0b:18:7b:e8:1f:9e:9b:5b:
         d4:8f:ed:15:08:a0:3f:69:f5:88:57:98:9b:34:78:ac:7d:fc:
         c1:e3:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:43 2026 by rpki-client