Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File:                     9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier:          z0uxq3SgNKZ8zi3Fxu1Gwn7KiQ75SNezrsb8z55KG8M=
Subject key identifier:   DA:AE:49:2C:42:26:28:DD:A5:81:25:98:78:9B:3E:5D:1A:C7:AB:21
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer:       /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial:       019CAB6B0E4AD3ED388CEC1E8AA25A45E348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 22:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:45 +0000
Files and hashes:         1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: wa3/FwFAGhykIhKjatrA43d17KEq9529tZHkls/W6dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:0e:4a:d3:ed:38:8c:ec:1e:8a:a2:5a:45:e3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
        Validity
            Not Before: Mar  1 22:00:45 2026 GMT
            Not After : Mar  2 22:00:45 2026 GMT
        Subject: CN=daae492c422628dda5812598789b3e5d1ac7ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:1d:4b:b8:11:56:49:90:90:25:79:e5:7b:
                    70:7a:01:7b:89:f1:89:6a:53:a8:36:e7:51:2d:b5:
                    c9:32:2e:05:56:f8:3b:a5:28:b6:82:65:cf:fb:f6:
                    ae:f1:3d:92:e2:40:c5:80:2d:15:ea:a8:df:e3:6e:
                    47:2e:62:22:03:ef:57:38:7b:d4:be:84:b2:50:9b:
                    a6:b1:89:cd:38:93:56:c7:f2:e9:79:0d:d5:8d:88:
                    9a:e1:cf:23:7e:de:f5:1b:12:00:7b:fa:d7:e5:39:
                    38:3b:3b:9b:06:d4:98:81:7d:7d:f0:f5:e4:ce:43:
                    2c:7f:e6:da:5e:88:15:f2:1b:4e:97:52:f9:1f:aa:
                    b4:e6:fb:11:58:25:3f:e6:7a:e4:01:a7:9e:c9:cf:
                    23:94:db:c7:62:0f:8b:c0:f5:2a:e6:39:5e:e4:4b:
                    20:d0:4b:ba:e1:94:ee:58:14:20:3b:58:31:26:0a:
                    a8:51:d1:d0:0c:8c:4a:05:0a:3e:ba:5b:2d:24:fc:
                    44:68:dd:5e:56:e3:bc:2c:b3:75:64:b0:b2:c1:8e:
                    be:ba:e4:cf:08:35:76:fe:ce:ce:83:f5:e4:13:fe:
                    35:ad:49:3a:d8:cd:f0:89:8f:8b:a9:22:5b:2b:94:
                    c3:15:a8:ee:cb:48:24:03:29:b0:b9:9c:bd:a3:21:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AE:49:2C:42:26:28:DD:A5:81:25:98:78:9B:3E:5D:1A:C7:AB:21
            X509v3 Authority Key Identifier:
                keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:ce:18:23:1e:ba:99:36:03:75:77:0c:30:e3:ef:9f:d0:
         49:56:14:cf:dc:97:e4:f4:50:0b:6a:af:99:a9:db:c3:45:81:
         e5:d9:09:f3:94:31:06:5e:59:57:7f:fe:81:fe:9f:a6:dc:93:
         5e:14:9f:61:15:14:ba:a7:dd:3e:d0:83:96:e8:24:9b:70:a7:
         a6:89:2e:e8:35:30:fb:ef:a0:ee:07:e8:47:28:5a:34:69:18:
         29:a8:1f:cb:df:61:76:83:46:e1:00:c3:35:11:fd:68:12:f3:
         9a:21:df:4e:b0:e3:3e:f2:4a:1f:b9:27:72:b9:85:48:c7:57:
         5d:15:56:13:ab:7b:c8:9c:67:dc:8c:af:51:a6:b2:69:db:c5:
         60:7f:d6:72:b4:84:fc:c6:31:68:cf:79:f2:e0:9a:54:45:22:
         ab:ee:22:bf:d2:5f:d7:f0:96:be:e1:17:b9:2d:24:29:32:72:
         99:19:5f:ef:1f:d6:ac:87:12:e4:aa:a0:64:2b:b7:b0:d4:d4:
         87:b7:42:5b:72:c9:9c:03:c0:2c:0e:fa:33:de:92:31:8c:65:
         16:fe:00:42:c4:66:7c:16:d5:50:f7:f7:84:0a:f7:e0:1b:3e:
         df:17:a7:25:3e:f2:1c:c2:e7:22:c1:9f:64:2b:71:79:e6:94:
         91:3f:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:50 2026 by rpki-client