Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File:                     VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier:          gnT6Q0DGMO868EuDrzxsauXfVLAj6rLkWMKnMHWn/4U=
Subject key identifier:   79:9A:29:5B:28:FD:8E:9D:A7:37:08:24:9F:EB:14:25:8E:E6:AE:EA
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer:       /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial:       019CAAC6BBD7BD6B6270C3C8F722863911BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 19:01:16 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:16 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:16 +0000
Files and hashes:         1: 2e5AvXlufc-kEczHhTECSJ-V-JQ.roa (hash: I9+kJ0K5wv3UioVKT0ZYctRfAuqgjg7khDoT9z5Qntc=)
                          2: 4LBzWO_530DcCpzjlEfXk_h_vW8.roa (hash: H+p9nsy8NewbJx1+0VvALNZxKQ+AzKGCdkwiJQ4ANZM=)
                          3: GmiNV02KpRdxeBzvA-9_R7Rwp5k.roa (hash: 1nMmGCSVtG3D2xti3D/6NXcOSYqZ/aoCI5L5XEr0uig=)
                          4: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: QD7DeWecR04J6d/+zDkOMc9rp96JFSHQZ0/gpSReB1M=)
                          5: g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa (hash: KFBqHuaTNX9BJpnJ/kNbP6C31mWv4bvManEdzG/ajqc=)
                          6: mk7ttr1hKMruQA-V9YpclvWNi_0.roa (hash: DCTpzfyrUDoRJthmL9oXt5chUKx5z7hp5NsgIKGeX6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:bb:d7:bd:6b:62:70:c3:c8:f7:22:86:39:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
        Validity
            Not Before: Mar  1 19:01:16 2026 GMT
            Not After : Mar  2 19:01:16 2026 GMT
        Subject: CN=799a295b28fd8e9da73708249feb14258ee6aeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:a7:cb:60:7a:1d:5c:46:88:31:3f:8b:39:
                    9e:f6:d6:aa:98:63:93:98:a2:01:ac:45:b3:c9:ce:
                    f5:30:80:25:c1:29:c4:ed:bd:1d:55:ea:70:bb:31:
                    89:68:18:4e:0c:74:9d:f4:3b:2f:87:b6:07:37:04:
                    bb:53:11:8e:e7:42:a3:1f:91:eb:6f:3a:1a:85:6b:
                    51:82:e1:08:e9:02:41:c5:7e:0f:48:f2:6e:47:9e:
                    a8:e4:7d:51:a0:8c:9e:f2:cc:63:c1:86:89:e8:d7:
                    ca:92:55:8b:dd:ac:e5:99:91:f7:de:25:62:d1:37:
                    ba:99:c6:fd:d6:57:07:2b:77:29:0a:df:86:98:10:
                    56:e5:b2:92:2e:74:d7:b7:11:c0:4c:2c:5e:80:fe:
                    09:f6:e7:6e:1c:8f:75:7e:f9:78:82:11:a5:0f:9f:
                    81:5a:56:2d:2a:29:62:67:8c:c9:65:a5:b0:46:d8:
                    16:05:be:93:50:48:f0:f5:39:5f:0f:44:10:d0:25:
                    23:aa:c6:e5:2c:1a:6b:ee:a4:63:ef:9e:57:31:b3:
                    f5:cb:ac:e3:b4:bb:8b:bb:ca:2f:c8:df:4c:9d:fa:
                    69:b3:dd:d1:d5:17:ba:98:08:3f:37:f2:7c:da:62:
                    fd:59:a7:a8:b4:f8:c8:bc:db:8e:3b:47:e3:13:bc:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9A:29:5B:28:FD:8E:9D:A7:37:08:24:9F:EB:14:25:8E:E6:AE:EA
            X509v3 Authority Key Identifier:
                keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:18:6c:55:91:e5:25:3f:27:f3:77:9d:71:28:d5:fb:69:73:
         c3:42:2c:32:39:48:92:74:74:bb:b3:b4:04:7c:92:9f:31:83:
         ce:ca:f7:3f:98:62:17:38:62:89:40:2b:5d:1b:ff:10:5f:db:
         0e:7d:45:8e:64:75:09:0a:fa:68:10:0d:34:5e:44:df:c3:13:
         da:a9:53:b5:24:73:4d:f5:ea:2d:59:ce:70:2f:a1:5a:b8:00:
         e8:0e:2b:cc:9b:3c:8c:93:a6:73:40:68:42:31:b6:12:dd:11:
         82:89:b4:c8:a9:8e:fa:4e:1c:3c:5c:39:bc:ef:d0:43:76:a4:
         db:61:6a:b1:f1:fa:f1:5c:4b:f7:fd:9a:ef:73:6e:9f:16:c2:
         62:6f:f7:4c:ba:cf:29:ad:fe:34:db:2a:27:80:e2:47:77:7e:
         c9:49:22:2c:04:9c:36:5d:8f:11:54:5e:82:bf:3d:a7:d5:65:
         8a:ac:71:26:2e:7a:4b:9c:32:2b:fa:d7:12:cb:bf:ad:01:07:
         77:55:8a:2d:ec:a7:2b:16:80:c9:92:ab:4f:5d:b9:de:89:19:
         58:94:64:78:c7:08:a1:a7:ee:95:d7:8c:ee:8f:48:12:b8:4a:
         96:14:4f:83:3d:f1:b8:d3:f6:86:74:eb:55:93:ab:b6:1f:c2:
         d9:20:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:47 2026 by rpki-client