Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File:                     PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier:          4RLQDrvUhUzOcue0V0VSUnJCxgMruRA7Mp2UHpsXuok=
Subject key identifier:   4E:1C:73:99:AD:9A:47:7C:23:D6:2C:CE:B1:C3:C9:59:7B:13:F0:F5
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer:       /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial:       019CAC100ACFC7D128F8FEF9B89C1482A806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 01:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:58 +0000
Files and hashes:         1: 9nNyzPySymEM7sc2oK89zLOdPps.roa (hash: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8=)
                          2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: bRAeEk0QMSaVQU134qR19/e91iovPnvgfimehDU1+90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:0a:cf:c7:d1:28:f8:fe:f9:b8:9c:14:82:a8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
        Validity
            Not Before: Mar  2 01:00:58 2026 GMT
            Not After : Mar  3 01:00:58 2026 GMT
        Subject: CN=4e1c7399ad9a477c23d62cceb1c3c9597b13f0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:3e:58:52:68:fb:17:79:ee:f8:9f:3a:3c:
                    c8:0b:cf:ad:68:2f:34:4e:1c:97:c0:7f:2a:c6:ec:
                    f5:b1:3d:61:98:e7:72:38:b2:40:14:1d:bd:67:4f:
                    38:df:7f:49:9a:0c:e7:16:81:ba:e2:c9:ba:a6:12:
                    62:55:73:c1:3a:01:63:39:ec:32:27:80:8b:27:c2:
                    ab:f2:95:85:fc:3e:71:1a:2e:71:15:22:23:e0:8a:
                    78:a5:74:4b:41:69:8d:55:2c:94:7c:3f:7a:c8:04:
                    9b:79:9a:d0:8b:e2:0b:7e:16:be:87:43:85:24:22:
                    50:64:bd:c4:aa:6c:e8:f6:3e:ad:05:9f:2d:2f:5a:
                    0b:90:d9:5f:6f:27:8e:2f:78:84:8b:ab:69:d6:79:
                    15:e0:a5:b2:83:53:f5:67:32:da:49:57:9f:62:18:
                    c0:4f:f2:96:a3:cb:47:39:44:86:ac:05:3e:86:64:
                    7e:da:b3:b7:94:c8:9d:db:0a:96:aa:27:5b:f2:4d:
                    7a:e8:37:7f:b0:6b:49:c3:43:75:bd:65:fe:53:31:
                    b8:6c:d0:4b:3d:3f:a7:00:54:5d:02:4f:49:89:f2:
                    22:ab:50:a8:33:60:5e:a1:20:de:96:a7:55:92:b3:
                    25:f2:45:03:de:00:b0:f1:ab:69:ee:24:80:be:03:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1C:73:99:AD:9A:47:7C:23:D6:2C:CE:B1:C3:C9:59:7B:13:F0:F5
            X509v3 Authority Key Identifier:
                keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:68:8f:2e:83:c9:d7:f8:9d:cd:02:8d:5d:b0:3c:35:df:
         06:3d:34:c9:1b:a5:fb:23:8d:02:71:be:bb:3f:0f:4c:be:07:
         01:7b:71:a1:48:5e:c5:76:fb:9b:8e:05:9b:3d:85:74:3b:38:
         fc:0f:42:9a:7e:6e:d5:52:5f:0f:83:c1:35:78:70:90:20:44:
         44:5c:ec:32:01:34:5a:7e:95:f4:ab:cc:66:44:13:9f:8e:5e:
         1c:b6:50:d1:19:c7:e3:71:f6:8e:b5:92:26:2a:55:7f:75:42:
         2b:58:02:fa:99:75:94:e6:53:4d:55:d8:cf:8f:e4:9f:e9:af:
         84:07:a2:15:8d:de:de:02:7f:35:59:e0:5b:29:fb:6b:b7:aa:
         a6:a3:96:ab:89:9c:ce:7d:7a:a6:d8:0d:5d:00:3d:95:9e:56:
         5e:1c:7f:10:5c:5c:53:67:f1:2a:0c:77:b3:aa:cc:7a:81:56:
         75:a4:11:72:e7:70:b7:b4:3b:31:0b:05:59:6e:38:6a:39:dc:
         f5:14:15:33:f9:67:b7:28:00:89:b7:f3:a0:ec:77:8d:71:bf:
         6b:cd:51:f5:48:d3:cb:b9:c6:0a:4f:27:cc:95:2b:52:bb:fc:
         16:45:4b:db:fe:76:3f:a0:77:58:d4:1c:58:ee:41:54:ea:ce:
         32:be:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:53 2026 by rpki-client