Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          usbGigYTOy0UvGKCxZOqSAqe3fDI54QGGcDQ5njH2+c=
Subject key identifier:   F0:D5:48:E7:99:FD:9C:EC:B5:74:B0:EF:3A:1C:10:9A:79:B2:92:8A
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       019CAE6C369281A662495F3D5B1A00463272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 12:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:53 +0000
Files and hashes:         1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
                          2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
                          3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
                          4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: GTw8q/JCpm1K4h/rIE4dRQp3mPlZPlpzQS7n2ekB9ig=)
                          5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:36:92:81:a6:62:49:5f:3d:5b:1a:00:46:32:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Mar  2 12:00:53 2026 GMT
            Not After : Mar  3 12:00:53 2026 GMT
        Subject: CN=f0d548e799fd9cecb574b0ef3a1c109a79b2928a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:aa:2d:f4:fc:9c:69:da:4f:67:e6:c6:ef:
                    ec:f1:e3:9d:7d:3d:5f:db:2b:5b:1b:9a:98:e0:54:
                    da:4f:ed:c1:93:43:fd:7e:ec:a8:04:d3:36:88:6c:
                    c0:a0:24:73:40:12:3c:d8:3d:7c:27:95:17:76:96:
                    57:d7:62:d9:e1:2b:26:90:60:0e:8f:34:7f:56:f3:
                    70:83:98:4a:d5:c6:0d:90:96:22:6c:11:63:ca:0f:
                    21:8a:26:01:05:61:88:08:91:2d:4c:aa:bb:12:43:
                    94:52:24:f8:c0:47:6d:3a:1a:42:49:6f:d4:ff:6f:
                    43:8c:0e:d5:ed:70:7a:89:a6:9a:7b:59:d7:18:04:
                    1f:1b:a5:df:c3:76:c3:0a:56:b4:57:ac:d2:91:de:
                    8a:70:61:d2:c4:3f:7e:f6:8c:9f:5b:7e:df:fc:34:
                    0d:2f:85:9a:93:53:74:d9:4f:ca:b8:61:6b:5b:92:
                    2d:e1:41:e7:ad:42:6b:2a:28:69:8c:1c:51:ef:5d:
                    56:42:57:f8:a4:95:aa:b7:2b:bb:21:32:8d:9b:13:
                    2a:39:ae:a7:73:f8:cb:41:ee:f0:13:df:0d:bb:1b:
                    79:3d:0b:fd:07:1c:46:5a:c8:a1:33:2b:0c:b2:d2:
                    0b:46:66:d0:f8:3f:d3:8a:44:a8:24:4e:a7:e3:e5:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:48:E7:99:FD:9C:EC:B5:74:B0:EF:3A:1C:10:9A:79:B2:92:8A
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:21:44:3c:a2:c5:22:6c:9d:10:f3:d9:7c:b6:a5:bd:37:cf:
         d0:66:7a:a5:8e:1e:50:e7:43:9f:2f:a0:3e:6d:d6:97:ed:3b:
         a1:15:9e:0a:4d:a8:15:88:b5:9d:cd:79:af:30:06:8f:84:3d:
         4e:94:d3:39:56:15:10:96:49:59:c2:a5:4a:76:af:49:26:3a:
         2f:b5:e5:a4:ac:5e:55:27:24:99:57:be:bf:29:44:e4:f7:b9:
         ad:5a:4a:e3:23:b2:38:28:f8:db:ba:4c:f7:ad:3f:fa:55:e7:
         d7:b4:f8:7f:c3:91:49:46:c4:08:ff:33:c3:db:ee:5b:e3:18:
         b7:a5:fd:a0:8d:2a:1e:2c:96:b9:59:63:1f:a2:2b:c7:c7:d8:
         8b:00:2b:02:dc:1e:d0:0b:12:7f:ee:d4:c8:41:23:0b:fd:ed:
         c2:ed:53:ba:04:24:3d:16:ab:de:cd:78:f5:e0:53:cd:b6:67:
         00:4c:89:85:22:16:0a:fb:78:c2:38:0d:f3:7c:34:17:bf:cb:
         cb:95:33:0f:69:cd:cf:73:a3:82:ab:a7:72:8b:25:28:e0:b7:
         2a:36:66:e3:ff:b9:b6:87:b4:35:fa:40:7a:16:32:ca:31:f5:
         78:d8:1c:97:79:94:c7:fd:f2:2e:e4:83:65:d6:37:0c:81:75:
         97:de:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:49 2026 by rpki-client