Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File:                     T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier:          5LYcyaePmB9KabyR/4bgjPYLjYdDYTVMcR9rzsqJpRc=
Subject key identifier:   CF:CF:0F:4E:E0:90:EC:3C:51:B3:37:8F:79:71:D2:9C:F4:98:68:7D
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer:       /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial:       019CACB547DBB3B733E69863577604CAC68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number:          184F
Signing time:             Mon 02 Mar 2026 04:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:27 +0000
Files and hashes:         1: 8ZRlNNc35z7_o90cin0lnPRuC2o.roa (hash: v3k+bHpxtw/4UrPsyDE1vbWZluRfTlgNFYTkoDqmNws=)
                          2: HCGfFsFzdEdOgL94q44-LrKFOk4.roa (hash: z2rwFnfOIUrAmdSR0Bpv+q/6wHr2zoObtpToXBsamGU=)
                          3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: jpSbYULO2cdYE6xbJb3ofO1k+AamZssXhLOOu74ZwnI=)
                          4: bEtxOVFEe6RgofyeDUv0F4MuQwg.roa (hash: P00yl0lvfAFq6gWwP+lokbttZWyi8V39INq/nWNvt1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:47:db:b3:b7:33:e6:98:63:57:76:04:ca:c6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
        Validity
            Not Before: Mar  2 04:01:27 2026 GMT
            Not After : Mar  3 04:01:27 2026 GMT
        Subject: CN=cfcf0f4ee090ec3c51b3378f7971d29cf498687d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:ff:65:8e:fb:26:30:bf:fb:fb:5f:3a:8f:
                    37:ec:14:9c:fb:e0:4f:f0:df:ac:92:f9:5d:c0:12:
                    98:6a:1d:08:68:ff:57:c9:ac:0d:c8:3e:b2:d4:b9:
                    a0:89:4e:b3:f5:d7:3c:75:a3:7e:f2:8b:e9:61:88:
                    90:fe:ab:f7:04:2e:b9:ae:f6:27:43:62:c9:c0:ed:
                    16:31:01:6c:80:75:81:25:0a:df:35:8f:35:4a:09:
                    61:fd:21:7d:9f:51:17:7c:c2:90:a1:4a:c8:b1:1f:
                    66:11:b2:f1:93:e5:6e:6b:3c:93:f4:a0:14:c7:cc:
                    69:4f:07:02:f2:c2:4a:f5:dd:4e:e8:1f:da:9f:6a:
                    dc:4c:34:0b:ad:e2:8a:5c:0c:46:43:c3:3d:b8:73:
                    75:d1:5e:c8:2c:32:48:6e:5f:b1:b2:df:05:1c:28:
                    a3:da:f4:e7:fc:d4:00:e2:7f:ed:b3:dd:c5:ae:af:
                    ac:cd:b7:cd:b3:88:2d:51:9f:0c:bd:cc:31:63:31:
                    e7:79:2d:85:e8:2b:b7:09:46:4c:02:51:c3:e1:69:
                    a6:ba:81:d4:0a:14:a2:0f:86:7a:0d:93:28:c2:36:
                    cb:85:0d:f0:47:d5:62:ce:28:23:97:20:e1:08:bf:
                    22:1e:dd:50:dd:37:f5:ec:fb:b5:4a:9d:fa:ca:5f:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CF:0F:4E:E0:90:EC:3C:51:B3:37:8F:79:71:D2:9C:F4:98:68:7D
            X509v3 Authority Key Identifier:
                keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:72:fc:c3:b0:0e:4f:0b:5f:ec:00:09:37:3b:49:ff:35:2d:
         a6:c8:80:b4:9d:12:58:7e:a0:01:c4:ec:da:bc:7b:d8:22:c4:
         57:1f:72:8a:d4:bc:ba:45:a3:0c:40:cc:71:cc:d9:7e:9f:fd:
         61:58:d8:8b:16:15:35:51:60:c4:0c:cc:5b:2a:b3:66:af:0b:
         8c:e9:0d:ae:51:95:be:db:37:53:b6:6c:06:8f:99:b5:09:c9:
         59:3a:b9:b5:03:32:6d:05:66:56:f5:f3:09:a4:67:3b:e3:c0:
         1d:fe:36:20:c7:a1:3f:d3:bd:9e:4f:45:f7:3d:3b:ae:84:d1:
         f6:85:18:4b:dc:a7:ae:59:e6:a9:97:89:03:1f:86:3d:a4:58:
         f7:6a:49:6d:4b:25:d9:5e:72:f4:d1:64:5b:94:92:f0:f4:93:
         a8:ce:c4:78:a6:83:f0:35:48:40:47:0f:bf:63:b3:bc:a7:18:
         27:e8:b9:80:33:a1:2d:aa:7c:23:17:5c:30:b7:86:ed:d4:39:
         2e:d7:00:10:00:2f:85:0a:a2:05:9d:57:c8:e2:a4:35:d9:54:
         50:81:6c:f6:56:33:c5:f2:7a:53:d5:99:ff:17:c2:30:ea:a4:
         5a:4f:bd:25:51:1a:5b:b3:a5:96:a5:b5:fe:b1:66:6e:44:37:
         c2:3f:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:50 2026 by rpki-client