Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          ifRLQSzc7ofqU8QrakFCdwmGyf2pe+Pf51Qpp1ipwEA=
Subject key identifier:   7C:28:A1:63:5F:BA:A6:89:F4:91:7E:88:28:54:94:08:9A:52:A2:2B
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       019CACB497BE3CC91FD3D7AA0F754D6E7E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 04:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:42 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: oy/BRfwjF8kU/4E7xS26MfuZ9J1G2/iIzYmVy54qqFE=)
                          2: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (hash: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0=)
                          3: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (hash: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA=)
                          4: kj8-3DtT32XqscwKCiQPzi9o7X4.roa (hash: VlQ7LnPKpNwk4BdUZ5Ryr+mzC2TSKzAr4UDFF48gtfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:97:be:3c:c9:1f:d3:d7:aa:0f:75:4d:6e:7e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Mar  2 04:00:42 2026 GMT
            Not After : Mar  3 04:00:42 2026 GMT
        Subject: CN=7c28a1635fbaa689f4917e88285494089a52a22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:38:2f:69:59:b0:5a:27:11:46:68:30:51:fb:
                    9c:4e:8e:aa:aa:c8:7e:25:06:55:f0:a7:bf:09:3e:
                    d7:fc:57:03:27:78:f2:c3:4a:c3:6f:37:b9:92:62:
                    8b:74:fc:7c:98:7a:da:e2:a6:2b:e9:7a:2f:c7:91:
                    e5:4c:53:51:0e:48:7a:60:26:a1:e2:34:2e:77:09:
                    43:bb:0f:23:c7:fd:3c:ed:b3:7e:1b:52:e3:82:be:
                    d0:2f:fa:35:75:3e:b2:86:67:14:cb:2b:3f:d8:52:
                    89:c3:0e:98:9b:d8:72:54:67:93:ac:c8:67:83:0a:
                    68:86:59:1e:91:d6:6a:75:b1:81:4e:75:c5:f6:59:
                    7f:3a:60:9c:0d:dd:c1:90:be:8a:d2:aa:6e:87:db:
                    be:a6:87:48:2e:35:b7:fe:b7:98:80:60:82:cd:05:
                    bd:d8:77:30:7c:b7:6f:38:97:87:97:2a:4c:f2:43:
                    ee:5d:0f:b3:db:91:69:db:2b:f5:d7:59:6a:cc:e1:
                    cf:c3:09:f7:a6:ef:6a:64:d5:1a:e9:64:56:ac:08:
                    ef:3d:a1:e2:17:6a:8b:24:40:e8:c3:aa:0f:e8:c8:
                    77:46:82:eb:0b:2c:86:33:c3:32:51:a6:b6:c8:bd:
                    fe:8a:87:90:16:b6:15:36:25:16:96:94:a6:56:40:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:28:A1:63:5F:BA:A6:89:F4:91:7E:88:28:54:94:08:9A:52:A2:2B
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:3f:a6:24:ac:41:4a:5a:e3:a5:92:79:e3:70:2d:43:84:
         3c:5a:bc:bf:93:b9:e6:10:ce:39:77:b4:7a:dd:f9:7c:14:f8:
         e0:5e:31:a1:c0:0d:be:ea:8b:d8:3a:82:d7:84:13:dd:a9:3e:
         72:df:65:48:c9:ba:d5:12:ef:2f:44:1b:1a:90:3c:cf:69:e5:
         2b:2c:3b:b3:54:54:76:6c:e2:e7:06:53:00:47:4a:3d:9a:e3:
         66:30:4b:73:69:39:57:48:de:f5:a9:65:1f:8f:8e:eb:84:ee:
         dc:d9:67:ca:a3:39:24:cb:db:80:42:90:11:ad:93:71:99:68:
         0c:ba:8b:8c:b4:c0:c5:f9:4b:a3:58:57:18:92:4c:c2:d8:ca:
         25:68:7e:4f:c4:e3:d0:f0:4e:38:bf:b5:37:bd:3b:71:3c:ab:
         d7:f7:b5:89:ce:8b:13:61:de:12:12:08:06:45:4a:e2:3e:07:
         f5:9e:15:1e:4b:bc:2d:b2:1f:2f:76:39:32:d2:6c:95:e1:3b:
         5c:0d:98:a5:2e:01:0f:69:ea:86:7e:d4:a4:e7:b0:66:3c:46:
         c2:a1:33:d0:a4:79:a0:e6:17:18:6d:f5:1c:41:b9:89:76:76:
         34:da:56:e6:60:3a:40:e1:38:93:e1:f4:9d:be:e4:a5:71:d7:
         19:a5:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:40 2026 by rpki-client