Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File:                     TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier:          bdNCFRGtcYMfVVvhv1UcU2RVIL6vcDPki9Rvcem6SBU=
Subject key identifier:   73:9B:EC:67:B4:55:0C:B9:CB:1D:C9:ED:EC:B0:10:19:09:10:8B:72
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer:       /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial:       019CAD22ECF86C34BE113E24A2344E024E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 06:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:13 +0000
Files and hashes:         1: JZQkADNXuVdgoYFqB8dJihxFMqw.roa (hash: v2lJ8edD4J6npHAAgT5bKgjMcgZZ0T4RA8FIeChON/I=)
                          2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: 4+e6ctA9+ld5QgJspglAQLDIOK0upu9xiuQNI2cOTeI=)
                          3: Y4syH6UzjjHJV7JuJcxsHndTEBM.roa (hash: JfIRoO3yinIldqjXRJFR4+uBQRShxpVbREXLMon+oyc=)
                          4: _hFABtqDrMHoR6yceaa4n6HnFLY.roa (hash: RUYxYGOzRDiabfY65jWe0OVYiku/zny/wdDlEwYqRXU=)
                          5: nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa (hash: Curfm/lqD1xZHwiMDPx7ObFQjKY3PZ5mZYaISZH60CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:ec:f8:6c:34:be:11:3e:24:a2:34:4e:02:4e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
        Validity
            Not Before: Mar  2 06:01:13 2026 GMT
            Not After : Mar  3 06:01:13 2026 GMT
        Subject: CN=739bec67b4550cb9cb1dc9edecb0101909108b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:48:b1:d9:aa:20:43:3c:d0:37:92:a5:0e:
                    39:a4:69:fe:8d:53:67:40:fa:0f:82:c8:95:06:f0:
                    f7:78:0a:b8:ff:b5:8d:b2:74:25:23:93:e2:2f:ef:
                    29:da:5f:3f:e8:26:02:1f:25:1c:bb:02:e3:1f:20:
                    d4:fc:0a:67:b3:23:45:f4:cd:ab:b9:36:56:8a:bd:
                    9c:d4:90:ac:ae:80:9b:01:d0:1b:b0:ca:4b:2c:00:
                    ef:a6:a1:db:77:48:81:f7:2a:03:33:64:9f:6a:59:
                    af:48:fc:b2:30:5c:c0:3d:c3:1d:81:c3:74:b5:6c:
                    ad:52:c0:30:0a:ad:08:c7:1e:fb:fe:b8:2d:24:86:
                    1e:f3:bb:5b:ed:5c:1e:a4:f4:3e:31:70:19:7e:61:
                    51:55:b2:db:59:4e:ef:09:2f:18:25:5b:26:e9:c3:
                    8f:07:ac:93:7a:03:d5:24:bf:f9:7d:e4:9f:73:fb:
                    ee:33:55:94:cb:3f:7e:fc:8a:42:d3:2e:22:8e:88:
                    da:cf:7c:29:05:53:c9:df:d4:12:f8:2b:08:f3:8e:
                    d4:14:05:33:17:80:44:d2:12:df:06:56:9a:40:e8:
                    88:8c:1b:9f:ed:89:31:d3:ab:ce:d5:eb:75:45:88:
                    3e:1d:57:3b:7a:56:ee:fc:9d:bb:a8:13:3f:7f:9d:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:EC:67:B4:55:0C:B9:CB:1D:C9:ED:EC:B0:10:19:09:10:8B:72
            X509v3 Authority Key Identifier:
                keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bb:a6:24:17:6f:17:6d:39:9e:af:48:16:d6:ae:38:50:ba:
         cc:58:db:d4:72:7d:14:51:c4:62:f6:f2:86:76:28:51:5c:0a:
         61:65:30:cd:c8:e4:bb:7e:29:7b:11:4a:b8:a1:7f:ff:a4:59:
         0e:d1:3e:4b:f4:cc:d5:93:52:cb:7b:55:05:2f:dc:ec:14:43:
         d2:0c:0c:98:a5:a7:20:47:49:d7:92:72:66:12:49:14:c3:ba:
         64:ab:0a:6e:21:af:2e:56:35:27:21:c4:dd:23:9a:07:d1:6b:
         48:01:b6:d7:3f:b0:65:87:92:4c:ac:65:12:28:a4:41:2e:bf:
         74:78:5c:10:cf:4a:f3:f1:3f:49:2f:b6:7b:d6:e8:9d:92:b6:
         de:4e:1d:eb:39:f4:55:9e:31:15:96:a0:a1:e8:12:76:9b:b7:
         c0:83:a8:ed:34:44:8d:d0:a5:2c:3d:2d:e7:97:70:d4:7f:5d:
         82:30:78:7f:88:d3:6b:b5:7b:c6:13:e6:6f:43:67:9d:1d:67:
         e2:09:9a:22:9a:eb:8d:40:ba:1c:dd:c8:7a:fa:aa:43:03:88:
         49:32:a8:0e:74:19:02:36:e4:d3:0f:f3:43:a8:34:8d:bb:01:
         58:df:b4:8d:ce:c4:a5:cd:c0:b3:86:b8:9a:35:24:19:b5:05:
         85:e5:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:11 2026 by rpki-client