Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File:                     J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier:          +3xTT3HkhNq9ecVol3YvBsuc7M/YsseuTHLXyHFb/VY=
Subject key identifier:   A0:C4:80:A8:E3:C3:7D:8B:18:7A:CB:4F:D3:BC:23:37:BF:97:5D:13
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer:       /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial:       019CAC4794C647C3C35D2F3AE0C2E149F010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 02:01:38 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:38 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:38 +0000
Files and hashes:         1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: 42Tf0PK6dKYrpq9B0KNP5cVEF6nFSelqWXXv0AmFcLQ=)
                          2: do8SOe-ERpHxMjDsw45T1qLXF5s.roa (hash: r8j5u9eIygVJJMrAiUaqnzsEWnLw7mdb+0WkkpHgFnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:94:c6:47:c3:c3:5d:2f:3a:e0:c2:e1:49:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
        Validity
            Not Before: Mar  2 02:01:38 2026 GMT
            Not After : Mar  3 02:01:38 2026 GMT
        Subject: CN=a0c480a8e3c37d8b187acb4fd3bc2337bf975d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:4e:dd:75:b3:6a:d2:3c:13:f9:23:82:7b:
                    1e:65:db:47:39:7e:e0:c9:0b:0e:af:55:e0:61:a4:
                    ef:04:d0:66:0b:9e:a6:c0:40:ed:c2:75:45:db:c3:
                    12:33:ce:2d:74:f9:88:bc:8b:4c:a1:52:29:bd:52:
                    c0:26:64:86:b5:e7:e0:ce:2c:e2:8a:75:9b:c0:80:
                    64:15:ab:d7:d0:da:66:d0:48:fc:66:01:6b:ce:11:
                    e6:2b:c6:b4:03:25:c8:90:ac:c5:07:7f:7f:30:29:
                    76:85:f2:98:ac:fd:48:b0:f0:9f:fb:ae:f7:33:2b:
                    04:c8:c1:b9:8e:40:40:03:36:a5:d3:4f:b0:92:b5:
                    cd:2b:68:34:4f:c4:06:fb:0c:f1:7a:f7:af:7f:81:
                    2f:30:57:44:11:d8:93:ed:60:de:ed:8c:1c:69:be:
                    ed:77:7a:de:42:67:b4:8e:c7:1f:2a:b7:8e:dc:2d:
                    bb:9b:05:2e:3a:23:7b:2f:f7:74:f1:79:99:5a:3a:
                    19:58:89:fd:34:b8:a0:b5:2d:1e:6a:51:90:cf:10:
                    82:86:7a:b1:95:4d:bd:39:a3:bb:c2:0c:13:da:fc:
                    3a:13:a7:7e:c8:0c:bf:49:5d:eb:4b:21:98:e3:c2:
                    e9:e3:8e:a8:f6:9e:0a:88:a4:57:5c:05:ac:f8:92:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C4:80:A8:E3:C3:7D:8B:18:7A:CB:4F:D3:BC:23:37:BF:97:5D:13
            X509v3 Authority Key Identifier:
                keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:60:b8:ff:ad:1f:72:c0:3f:04:90:95:b2:9f:c6:95:1c:
         aa:e6:4d:5d:c0:a5:60:88:19:10:23:6f:11:f6:83:ef:d1:2a:
         a5:69:40:24:b7:8c:ea:b4:41:02:16:b5:7e:75:2f:58:0b:10:
         37:76:a3:61:6c:72:59:5b:cc:23:ad:93:cb:25:c2:99:62:a4:
         a0:a5:d4:4f:e9:1d:42:07:36:18:d7:3f:f1:ff:ef:dd:14:4e:
         bc:ba:63:bf:0b:2a:4c:25:a5:20:02:fd:52:00:c0:62:11:8b:
         a9:a3:8f:7c:60:68:63:07:7e:cb:59:6f:dd:75:e9:51:c1:ef:
         21:53:54:f3:53:e9:89:ec:ce:d3:d7:58:0d:95:e4:4a:f0:52:
         82:bc:14:70:76:60:ac:ca:67:19:cb:fe:58:1c:e1:e2:99:f2:
         d8:b1:1d:9a:60:b7:63:0d:04:7c:5a:87:fe:1c:0f:8e:13:37:
         ec:a3:2e:6d:9d:59:eb:4b:cf:a9:51:b4:13:a3:db:8d:c7:11:
         d3:cb:1d:68:01:a7:76:ee:51:8f:02:d6:8e:af:66:8d:57:b3:
         4d:fe:7c:14:2f:8e:88:e2:fc:b7:c5:b9:00:a3:87:2f:af:c9:
         9c:53:0e:78:ff:42:97:02:5e:81:dc:5c:62:9e:a7:c4:60:19:
         7c:ce:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:35 2026 by rpki-client