Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File:                     Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier:          6p0Dzwsky3AdBa/w8CDJHl+i/UngT28Gn4QslxajeSs=
Subject key identifier:   40:A9:14:1A:0F:5C:38:E4:E4:B3:CF:C3:DC:3B:64:76:61:F4:FF:4B
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer:       /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial:       019CA8D7F89D068F56A2502C02EA568C106B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 10:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 10:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 10:00:51 +0000
Files and hashes:         1: AAidcFfKKn8rLVgZFcWgd6oXzBA.roa (hash: deNWXJoBp3T1ikz9GPZx7PgODBggEVznDAhwm6Au8ww=)
                          2: G3golYRCkelEfHAfABmrlnYv0EY.asa (hash: Qew4qOtn77j2TfbcFgyr9LY4AUHudNWIMGajK/7d088=)
                          3: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: vUPvGd7cW5eaDvsVJyx8GyAf8Z/F+E1ACtGZNInT8Vo=)
                          4: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (hash: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:d7:f8:9d:06:8f:56:a2:50:2c:02:ea:56:8c:10:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
        Validity
            Not Before: Mar  1 10:00:51 2026 GMT
            Not After : Mar  2 10:00:51 2026 GMT
        Subject: CN=40a9141a0f5c38e4e4b3cfc3dc3b647661f4ff4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:8f:a9:45:5c:d9:9e:61:1b:8f:aa:98:74:
                    4e:41:c4:b6:b1:9a:8e:5d:c4:f1:a0:0d:e8:ad:6d:
                    09:eb:cf:37:c4:22:46:0e:b9:93:cc:6c:f3:57:39:
                    00:aa:37:51:1c:99:a7:2a:e6:e0:d6:9e:8a:2a:53:
                    4b:84:d1:5d:e5:d3:53:b8:49:19:dd:ec:4d:6b:0b:
                    33:98:ae:7c:34:d4:1e:fe:71:64:2b:8f:fa:cd:17:
                    e1:c0:a4:fb:48:83:73:9e:4d:b6:ae:77:b3:86:86:
                    1a:27:93:2d:2a:f3:47:a5:a1:f9:49:2d:29:32:00:
                    eb:d6:9c:c0:58:c0:cc:9e:16:61:f4:14:da:02:7a:
                    a9:fa:e2:fb:33:8f:b6:fc:98:d4:ff:4d:66:35:2c:
                    ea:b8:46:34:55:ab:25:e1:8c:5b:d4:18:5b:5a:c3:
                    57:ca:13:c1:15:69:07:6a:65:c0:47:dc:e3:eb:ce:
                    2b:dc:54:90:04:28:c0:89:98:80:00:94:8f:f1:f1:
                    a0:5c:ef:6c:40:fc:b9:1e:94:13:b6:b8:d9:be:3f:
                    50:9e:16:b2:9d:3a:09:06:b5:7f:d6:d2:42:06:76:
                    4a:1c:c6:c3:9c:3d:bc:dd:c9:41:43:55:db:00:9d:
                    05:a1:a7:ef:a5:34:9b:9d:84:d6:ff:a7:c3:77:66:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A9:14:1A:0F:5C:38:E4:E4:B3:CF:C3:DC:3B:64:76:61:F4:FF:4B
            X509v3 Authority Key Identifier:
                keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:db:04:8b:57:05:49:00:6d:b3:ad:d1:6a:bb:de:fe:76:35:
         2e:e4:da:4c:7c:e8:9a:cd:da:ec:ae:5d:ce:b4:17:0d:4e:4b:
         3d:73:f3:79:4a:dd:1e:69:5e:9f:79:0e:17:64:cb:ad:05:a3:
         16:51:e1:f6:74:6b:db:af:9e:f9:83:d7:09:b1:89:11:ed:e5:
         ec:01:0e:9c:88:34:88:ee:14:97:f0:a4:53:c2:32:3c:a1:26:
         d6:e9:0c:12:0d:aa:bb:b5:09:52:41:5c:c1:b4:ed:81:2a:57:
         ec:ee:e7:16:42:3c:db:57:57:0b:bb:64:b1:6f:a9:bf:c0:bf:
         d7:64:40:e1:27:5b:9c:09:cc:cc:c8:08:1a:13:22:0f:90:51:
         32:45:9c:bc:25:cb:2f:d1:91:17:dd:f0:c8:60:30:5e:97:59:
         f4:b9:93:66:15:ac:8f:3c:c7:60:92:de:1d:6a:d8:34:56:d1:
         a9:41:a9:d6:4b:1c:9f:1c:15:cf:b6:58:1d:47:86:e9:6d:a4:
         83:72:fb:00:0e:f0:61:09:1c:cc:07:40:a6:d9:0c:5c:aa:da:
         6a:ce:d3:fe:06:7b:35:fb:5e:7c:f0:4d:08:31:5a:ff:ea:b7:
         88:a1:7f:26:fb:0a:44:94:74:06:14:82:a2:46:76:38:35:49:
         36:f5:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:39 2026 by rpki-client