Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File:                     rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier:          8YvoCoqqOVGkbQ/KywKEqMwNzdA+lIbjoOrG0Qi7tiQ=
Subject key identifier:   E8:3B:0F:01:B4:54:68:EE:69:43:07:57:20:65:B3:F3:E7:8F:F4:E9
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       019CA97D83F7B8AE5182973C1A29597671A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number:          184C
Signing time:             Sun 01 Mar 2026 13:01:41 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:41 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:41 +0000
Files and hashes:         1: LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa (hash: WjIjLuXn3A1xNvSwh1XgBv48UJzhklp1E8+xHhdyWoU=)
                          2: PSfeFOCMS0X0DbK201fv7mhOqbQ.roa (hash: WJgLDQpReiQHOtzp+BWaEyBhXQtmTrQB0VphBgJmuek=)
                          3: QjQLmAt4m_YleTlWkKVih21BNgk.roa (hash: dq7HIavQuv8fREOJW5tnnd2hgLRsWh/EorRZKaqBVuc=)
                          4: Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa (hash: P11t+kwQnqI3kW3ZxTjDZFiJEM3aRQP5One4Rpc6tsg=)
                          5: du7armHnMdJDuNQqNV4R0NlwAvw.asa (hash: ci8jOh/1Qd1L/TuKvOYgtQOXNQCcGjWJZ4+8rrUkpRU=)
                          6: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: D8OuUM/9BJV/37EqJYSh67mih1OQdc5qCn3ZvCpgDiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:83:f7:b8:ae:51:82:97:3c:1a:29:59:76:71:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Mar  1 13:01:41 2026 GMT
            Not After : Mar  2 13:01:41 2026 GMT
        Subject: CN=e83b0f01b45468ee694307572065b3f3e78ff4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6c:9a:20:85:26:3c:d5:3c:32:a7:98:bd:51:
                    ce:81:27:06:94:4d:aa:79:e7:16:60:c4:e6:8f:2f:
                    26:6f:47:9e:a8:df:b4:2e:f8:3a:e6:4c:f5:ae:da:
                    65:9b:63:d8:80:b2:ab:8d:4f:8a:49:77:30:32:c8:
                    e7:b6:49:71:66:f2:bb:1c:db:08:a4:d2:0e:01:f9:
                    8c:8c:31:aa:05:d6:4a:67:99:32:6d:28:7a:a7:06:
                    c2:9b:32:a0:79:fe:70:45:31:a4:91:e1:a8:41:89:
                    5c:26:80:b7:9a:54:80:ca:c4:a2:a1:63:46:5a:70:
                    65:34:89:a3:3d:9c:35:0c:e6:a0:0f:8d:02:f6:87:
                    de:6a:27:c1:30:26:8e:bf:40:5c:5c:21:47:67:9e:
                    9c:9f:87:83:53:e6:b2:47:82:12:84:9d:b1:dd:4f:
                    5a:52:12:c0:d4:e7:4e:f6:9c:99:22:50:08:a4:b9:
                    b1:34:33:31:ee:1d:33:11:0b:0f:ba:a6:b0:dd:29:
                    4a:eb:56:11:4f:4d:ac:e4:6a:89:2a:10:5f:1a:0b:
                    60:fe:33:d5:03:ee:58:6c:ba:f6:3a:40:88:d5:fa:
                    d1:fa:28:79:2c:fd:f7:ed:27:0f:c8:64:4a:b6:f8:
                    ff:b6:a4:2c:9b:5b:e3:a3:89:d5:6c:c5:6c:bc:d7:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:0F:01:B4:54:68:EE:69:43:07:57:20:65:B3:F3:E7:8F:F4:E9
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:85:02:5a:d8:97:10:d6:a0:5e:00:65:03:0c:bc:86:f4:
         2a:47:67:ff:10:c4:b1:e3:4b:87:53:9f:6c:47:62:97:eb:54:
         62:3c:ba:6a:f4:3e:d3:2f:f5:07:11:c8:d8:f0:20:ff:74:34:
         89:ae:2c:95:59:17:83:3e:aa:8d:77:b1:7c:59:fe:65:de:46:
         f0:dc:ef:1c:4e:fb:0d:7a:7d:16:c3:96:cb:bd:83:62:4c:be:
         8e:d3:2e:d9:ff:9e:ee:dd:dc:f8:98:4d:8c:cf:11:70:5a:e2:
         3a:12:3c:0a:fc:9d:0f:f4:3b:ce:02:5e:d3:43:c7:3b:49:83:
         bf:f7:d7:e3:37:25:1a:c3:c1:e0:6c:af:3a:9d:ff:ed:b4:0f:
         b8:63:83:36:18:88:54:68:31:e2:b9:5c:33:88:49:bf:f4:c5:
         76:6d:94:e3:32:4a:27:c7:03:53:1f:23:35:b5:e3:20:9f:e7:
         fe:d8:bd:c4:c4:61:40:18:c3:49:16:1a:c4:b8:9f:d8:1f:d2:
         9e:7b:55:d0:00:f3:da:8d:67:6e:b3:79:64:70:eb:09:b2:26:
         36:d5:bb:69:3d:5c:38:a6:f8:59:e4:cc:55:27:23:eb:9a:8a:
         a8:b0:5b:36:ff:aa:a1:be:10:10:a8:2f:e6:8c:cc:37:fc:8f:
         6a:26:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:29 2026 by rpki-client