Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          nFd3s8wGybRXapC8WMBsbwai6zeN61b0jfSvXAYqZko=
Subject key identifier:   BE:81:53:26:C3:FC:96:77:78:2D:BD:EB:4A:BD:7C:95:A3:EE:E7:2D
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       019CADC802A79024907F4D47669083E646BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          184F
Signing time:             Mon 02 Mar 2026 09:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:31 +0000
Files and hashes:         1: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
                          2: r3hgF8w2ISQEvnYVws0uagdgXaQ.roa (hash: fTPQMjGaJ6jaiZa2YYhiWQOETzK7JUfg3B1DmMWkq3g=)
                          3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: aclD2/t/5iRF8U0nX7jllGL+ZiT9Tm8KhZfLQqWYAzo=)
                          4: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c8:02:a7:90:24:90:7f:4d:47:66:90:83:e6:46:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Mar  2 09:01:31 2026 GMT
            Not After : Mar  3 09:01:31 2026 GMT
        Subject: CN=be815326c3fc9677782dbdeb4abd7c95a3eee72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:c1:cd:b6:b5:77:47:0f:87:b3:31:08:26:
                    2e:7d:65:d8:e9:1c:54:46:35:c5:68:0b:00:9e:3f:
                    81:b0:bf:c5:6e:9a:1a:d4:c1:7a:c2:3a:cb:37:db:
                    0d:7c:9b:c4:ca:04:6c:b7:bd:d7:ac:25:8a:9e:d3:
                    c4:6e:06:07:63:ee:72:65:e4:5d:1a:63:fa:ef:bf:
                    a0:63:93:3c:e8:ca:f4:70:9f:c9:d1:54:b0:96:af:
                    41:44:f8:35:f2:70:5b:f8:b1:e1:d7:8c:16:7d:5f:
                    b4:fd:d8:69:ef:0a:6b:04:c3:52:e9:43:c7:3f:58:
                    59:31:d2:7d:f9:f6:a1:06:e1:96:51:11:f8:0f:0b:
                    33:cb:d6:a8:8b:9a:51:19:3f:38:d0:5f:19:40:36:
                    6e:7f:26:b5:58:01:c3:4b:ed:9b:b4:b4:49:e7:f4:
                    1c:48:af:0a:06:31:0e:07:fb:d1:c2:5d:1f:4f:f0:
                    4d:97:ae:7f:fd:bb:c1:6d:19:3e:71:6d:85:84:4b:
                    8b:a5:39:4b:63:f1:1d:7c:61:3e:6c:17:25:3a:8c:
                    ea:60:c7:8c:53:63:4c:d3:60:9b:55:cc:8c:cf:58:
                    a3:32:72:b3:ab:59:64:61:71:76:30:40:f8:a1:9e:
                    c4:9a:e1:77:35:e0:aa:28:37:c3:97:48:de:4a:73:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:53:26:C3:FC:96:77:78:2D:BD:EB:4A:BD:7C:95:A3:EE:E7:2D
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:20:d9:c7:55:24:ce:80:ae:4c:0e:b9:4d:a0:00:32:a1:83:
         7d:f0:9f:b8:8e:3d:b7:ff:a0:62:8c:80:d8:8f:0b:fb:f6:75:
         22:2a:cb:b2:c2:17:23:68:c5:47:53:c4:32:2e:0d:3c:88:f7:
         cd:f3:5e:1a:7f:3a:d3:59:0c:a1:14:0b:e1:41:c2:50:a2:28:
         c8:2c:a0:1d:33:fe:9e:9a:00:24:39:e9:b4:a1:e3:d0:2f:c6:
         52:a7:0f:59:ee:e2:c4:4d:6b:92:d3:46:55:33:fc:dd:83:7a:
         c1:2b:d0:f9:b6:69:b9:35:95:ad:22:5c:ae:85:db:a0:ae:9f:
         63:be:2a:92:0f:e8:bb:6a:33:ee:be:77:5e:47:37:2e:f9:59:
         73:81:60:99:ca:98:bc:41:8b:e8:16:7a:c2:58:c9:43:8c:4c:
         df:cd:f6:b7:aa:11:3a:ab:12:c2:ae:ac:22:e3:27:f5:fe:0a:
         c0:ca:53:e0:ce:20:ba:98:b9:7c:f2:69:fc:8d:f6:46:ff:d8:
         9e:82:2b:bd:aa:6e:ca:6b:da:73:9e:ad:b0:04:6c:4b:ce:db:
         88:7d:8a:be:78:6f:1c:32:9b:a8:d8:62:5b:cd:41:60:62:8a:
         8f:c6:cb:18:34:43:21:d1:d4:cf:8e:59:7f:5d:d0:cc:82:96:
         be:30:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:01 2026 by rpki-client