Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          wUX92upvvl2jkb5D1+572lZFronzUVBlp9YD3EuGjXw=
Subject key identifier:   02:9E:DD:72:BC:04:9A:F8:22:68:98:17:4B:4D:E5:50:FD:76:56:62
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       019CA945C78F5E0EA410850D26AC4A891C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          184F
Signing time:             Sun 01 Mar 2026 12:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:48 +0000
Files and hashes:         1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=)
                          2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=)
                          3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: SGUlhg7+llm6YO/Iru5zfi9OwQ4QW/rSuI16N/irkXQ=)
                          4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=)
                          5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:c7:8f:5e:0e:a4:10:85:0d:26:ac:4a:89:1c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Mar  1 12:00:48 2026 GMT
            Not After : Mar  2 12:00:48 2026 GMT
        Subject: CN=029edd72bc049af8226898174b4de550fd765662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:f3:7e:4d:73:24:36:c3:c2:1f:07:2b:c9:
                    9a:65:72:c9:a0:00:69:08:d2:48:7b:54:1a:43:b5:
                    94:5a:59:1d:4c:18:77:b5:6d:07:4f:ad:7e:94:5c:
                    80:8e:67:98:cb:86:41:52:6e:a2:74:f6:ae:a6:97:
                    78:ac:3c:89:fc:d4:a8:50:a1:34:4b:74:24:e5:7d:
                    49:b7:e9:50:50:db:f4:c4:78:aa:e0:c9:1d:80:30:
                    53:2e:c9:5c:45:22:45:a8:95:09:d9:95:a6:ce:2d:
                    ff:ad:33:a3:1f:af:cf:11:68:7b:e3:96:b9:e1:e8:
                    00:83:5b:88:7c:e1:fa:90:8e:9f:18:d6:d3:93:9b:
                    cc:f7:ee:78:09:dc:c8:b2:95:5d:1c:0a:58:56:29:
                    e0:ab:6c:3a:25:e0:c6:c6:d1:8c:25:31:d4:dc:53:
                    d0:e9:d5:c7:f1:8c:26:bb:36:d6:6a:38:c1:70:6f:
                    83:54:d7:c3:fe:87:a0:f1:89:bd:7c:8d:2c:9c:52:
                    23:c4:ec:eb:80:32:36:e9:1e:65:58:8c:e7:71:a0:
                    40:a5:7e:6c:44:46:12:5c:39:e1:37:f3:6e:07:41:
                    51:66:b0:53:64:6e:6f:43:fb:97:56:52:85:7a:12:
                    f1:0f:cb:d1:b1:4f:1e:a1:e8:ab:1c:be:0e:64:6c:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9E:DD:72:BC:04:9A:F8:22:68:98:17:4B:4D:E5:50:FD:76:56:62
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1f:5c:d6:88:38:f9:3e:fe:14:79:5b:ca:d9:98:99:a6:df:
         85:76:61:61:3b:29:8f:04:fb:54:11:6e:5d:a9:80:83:bc:ef:
         14:4d:b8:5a:ff:5f:f8:2a:76:05:18:17:73:46:ad:0a:2b:27:
         34:b5:a1:ab:15:40:d8:96:9e:66:f7:7e:44:6d:c9:27:03:0f:
         7f:d6:8e:aa:54:40:5f:c9:2f:26:7d:35:5e:81:87:86:47:0f:
         1b:33:34:42:5c:c2:09:e6:66:63:49:1a:bc:40:1c:09:74:30:
         11:49:77:2d:ab:bd:19:d0:13:eb:ea:27:f7:a7:9d:fb:a3:11:
         73:e5:ad:11:9a:38:8b:57:bc:a6:52:cf:42:7d:b5:89:1f:bb:
         c8:57:5e:50:88:2b:66:f0:0d:ba:e7:b3:aa:4d:38:52:05:cc:
         6e:ed:01:d5:10:7e:b6:50:68:76:77:df:8e:b0:9b:84:68:e8:
         01:c2:5c:54:1c:f1:6b:53:cd:f7:45:9d:13:b2:1d:35:c3:63:
         aa:ac:a8:07:0c:6a:85:7d:e0:9c:cf:df:db:b1:df:88:c6:70:
         d4:08:94:55:b0:8d:bf:1d:61:36:e4:a9:72:18:8d:09:7b:08:
         09:ad:cd:4c:dc:ef:64:92:54:84:b0:78:62:7f:4c:97:3c:63:
         3c:0b:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:40 2026 by rpki-client