Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File:                     pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier:          +GOFmi/y32ISpkIOW4Qb3AMN35cCleuqXOABw1RUVCA=
Subject key identifier:   88:BA:75:E0:4B:CD:A8:8C:9E:F6:A1:E5:CD:D8:BD:87:86:DE:AA:BB
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer:       /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial:       019CAD227F055CE56D31D067786522EF0748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number:          184E
Signing time:             Mon 02 Mar 2026 06:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:44 +0000
Files and hashes:         1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
                          2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
                          3: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
                          4: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
                          5: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
                          6: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
                          7: g8ACjhxQk5J0DU745hi99GsFqfc.roa (hash: /h98eurUCwI/ZM7sMftwVJTVqywWLaik3VpX3tKiswU=)
                          8: gvmtotg3-G7C4Va6UzlSGJozsjc.roa (hash: mFRFlXOUP4cVoFa3wC4kCHkSiaXUH9pe3FPWW9xHeGk=)
                          9: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
                          10: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: F1RJWEmNsx80PaT5aebE1fR6sck64flc/MVEenP+nrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:7f:05:5c:e5:6d:31:d0:67:78:65:22:ef:07:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
        Validity
            Not Before: Mar  2 06:00:44 2026 GMT
            Not After : Mar  3 06:00:44 2026 GMT
        Subject: CN=88ba75e04bcda88c9ef6a1e5cdd8bd8786deaabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:87:00:24:ea:7b:53:98:6c:d6:69:0e:5b:
                    65:43:9d:e9:66:f6:38:4f:26:13:56:64:3f:33:f1:
                    bb:c3:08:10:37:af:07:ed:5b:f2:4a:1a:c0:ca:9b:
                    11:46:bd:7a:18:14:68:aa:dd:d9:5b:79:06:e5:b3:
                    e2:6b:2b:45:67:ac:b8:d1:31:7d:7b:f2:27:7e:7a:
                    be:b8:4b:85:69:13:c6:64:f2:97:18:b1:20:1a:fc:
                    08:49:10:13:09:7c:e8:34:7d:30:40:27:f6:11:fe:
                    76:3c:e4:94:ce:57:b4:06:70:f2:8e:84:67:3f:84:
                    4c:94:bf:f3:4c:ca:09:b4:c8:37:bf:b4:7e:c9:ef:
                    b0:e2:f4:51:eb:90:03:e8:62:d7:bc:60:2c:52:ab:
                    4a:2e:19:2e:cc:ab:7b:ac:d7:86:3c:b4:b9:4d:ab:
                    cd:a5:f2:d3:9d:bc:cc:54:8e:e6:5c:cd:dc:aa:44:
                    96:6d:bf:03:0c:32:ad:6c:38:26:26:b5:0a:49:69:
                    68:49:b0:d5:9e:33:c1:2d:27:4b:9e:35:ad:2d:b5:
                    b2:2b:79:0a:54:5d:be:47:59:c5:17:dc:b0:66:04:
                    48:3f:21:10:1a:09:e0:29:e8:bf:68:ff:01:3e:60:
                    bc:84:51:fe:42:66:67:ed:ee:5a:6e:da:66:62:ff:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BA:75:E0:4B:CD:A8:8C:9E:F6:A1:E5:CD:D8:BD:87:86:DE:AA:BB
            X509v3 Authority Key Identifier:
                keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1b:ec:df:67:64:1e:39:63:e9:3d:de:72:67:36:b5:b5:ee:
         28:e3:4d:6a:c8:c7:c8:93:94:5b:c2:8b:1f:08:a1:44:39:06:
         a7:5c:78:12:79:d0:b8:a8:3b:cc:b7:36:28:d7:f6:c2:c1:f7:
         ed:20:20:2e:8b:f6:32:33:7b:4c:f9:23:a2:e7:9b:52:5e:c4:
         48:0a:34:58:2c:64:11:5a:91:cb:2a:4c:91:71:2a:ee:61:1b:
         c1:98:ea:05:c5:0b:92:ec:6e:29:9d:17:ed:12:eb:86:56:be:
         ba:e1:67:e0:ce:98:c9:93:a6:76:bc:d9:ca:03:48:1d:b1:b2:
         1d:bf:3f:b6:5b:b4:48:cc:79:00:47:5f:5a:7b:3a:86:7a:ce:
         f4:9e:b3:90:54:97:ae:03:2d:51:7a:66:90:62:d8:01:cb:c6:
         91:f5:05:b1:53:dc:c5:a9:50:88:73:f9:9f:e0:da:c2:39:1a:
         b7:5c:69:63:85:ce:50:54:f5:84:1a:ef:c9:da:27:10:a3:74:
         5c:d2:d7:3a:a1:77:bc:03:2b:a0:fe:2e:31:45:cf:0e:ac:38:
         df:6f:5d:a6:77:e3:c7:ab:3e:0d:1b:98:37:41:b6:8f:e6:c4:
         3c:18:d8:d7:3c:ea:47:cd:67:05:e3:09:43:f4:68:81:cb:c8:
         9a:cb:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:40 2026 by rpki-client