Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
File:                     bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json)
Hash identifier:          ulHu6fg4iGGw0Jq4hlGh0mK5W9YBuurSXZkLtiLPSks=
Subject key identifier:   2E:AA:2C:A8:4C:D3:98:9B:30:D5:5D:F8:73:A5:9D:86:3A:29:31:C3
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Certificate issuer:       /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial:       019CAE6C6BCD990EBA9BB9DC1B91F2CE5206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 12:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 12:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 12:01:06 +0000
Files and hashes:         1: Q0DDocvIKXHiQubA2ngrZtN9sss.roa (hash: 0a8d7PBCfHewby32uiXu3Z8pOtDp0RIdoWEgJJZMaoA=)
                          2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: osRuaA6EYhn4f4Icno3uQaboN2LiXcC8ima3M6OSs4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:6b:cd:99:0e:ba:9b:b9:dc:1b:91:f2:ce:52:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
        Validity
            Not Before: Mar  2 12:01:06 2026 GMT
            Not After : Mar  3 12:01:06 2026 GMT
        Subject: CN=2eaa2ca84cd3989b30d55df873a59d863a2931c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:20:49:f8:70:54:14:15:df:b9:bb:af:79:
                    7a:79:f7:af:2c:fa:a2:19:01:2c:61:fb:1a:b7:f8:
                    32:dc:da:ad:08:07:08:21:c7:a5:72:8e:fb:d6:de:
                    9b:90:dc:13:f9:50:d7:47:a5:3c:f4:61:74:76:d6:
                    e1:9e:ad:85:e2:d9:4f:9c:4e:ca:f1:14:44:6a:39:
                    46:f5:b0:ea:98:a6:92:22:4a:ac:24:5b:cc:9e:f8:
                    eb:13:c3:ce:dc:cf:be:91:04:81:56:45:01:17:7f:
                    96:d0:cf:92:62:0f:29:b2:4a:a7:0d:81:7b:5c:0c:
                    19:61:dd:ce:89:f1:fb:32:2e:9a:f6:84:1b:47:9f:
                    47:cf:f5:54:fa:ff:8a:be:ff:44:4e:61:b1:46:9e:
                    5f:60:d7:c6:77:70:17:79:2e:8a:d9:fb:57:af:cd:
                    eb:29:e1:90:1e:a8:bf:13:9a:cc:cb:9f:1d:c5:a7:
                    cd:e1:9f:e5:c8:69:20:90:21:fc:a8:29:d9:67:b2:
                    f0:7f:4a:48:ad:2e:05:6c:dc:ed:99:05:2e:5e:c3:
                    a8:2c:53:08:ab:a5:45:81:3d:6e:98:82:bc:b1:03:
                    56:e3:3e:e9:c3:28:d7:07:a1:bb:52:f7:b5:af:30:
                    30:7f:44:14:cd:ec:66:65:e0:91:40:a5:0b:3a:7e:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AA:2C:A8:4C:D3:98:9B:30:D5:5D:F8:73:A5:9D:86:3A:29:31:C3
            X509v3 Authority Key Identifier:
                keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dd:34:50:0d:14:9e:ac:42:63:b5:1b:4c:85:0d:41:85:ad:
         b6:80:33:79:6a:1d:9b:b8:b7:92:2c:93:f8:5b:d3:46:fa:83:
         a0:6b:6e:ae:3e:32:43:40:e8:b6:0e:76:70:84:5c:38:1b:38:
         1c:d4:71:14:f9:e8:e4:fb:95:a9:c9:c2:58:69:0c:7b:ec:d4:
         dd:b9:63:e0:67:e2:cb:df:cc:b8:58:4f:68:57:94:43:17:d5:
         78:92:c7:7e:5a:a5:4c:79:0b:e1:50:83:a5:1c:59:40:1e:57:
         30:18:7d:28:4e:b1:26:0d:b2:18:c9:2d:21:12:6e:47:b1:2a:
         f1:57:e4:e5:25:de:e9:86:27:05:d7:a2:a4:8c:30:3c:21:6e:
         22:72:07:25:8f:3b:15:f1:8a:a2:93:2b:3c:b3:fb:3b:e5:eb:
         79:2a:53:2a:5f:53:75:fd:f4:47:93:84:b5:a0:ea:a2:4f:b4:
         8b:79:82:a0:16:3e:ce:1e:f7:d7:64:72:2d:4a:dd:45:05:77:
         13:f1:89:e4:84:77:9e:33:7b:3b:2f:f5:64:c9:91:66:f7:07:
         70:19:6d:f7:df:24:7b:cd:39:40:5d:f3:7a:64:3f:c9:aa:71:
         d0:98:6e:92:be:91:97:2f:5d:37:03:18:4c:20:ad:3a:8c:53:
         aa:b0:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:10 2026 by rpki-client