Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File:                     1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier:          BvIO1z5qfOItKNYcvzPy+UEam2EhL1qNaeKqyqZr4/c=
Subject key identifier:   8F:6D:A8:C9:9B:68:F0:B3:81:F7:A9:2F:B2:61:00:C0:16:4D:1F:B4
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       019CAAC6875E504EB6DCBC258EEA1B9EE5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number:          184E
Signing time:             Sun 01 Mar 2026 19:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:03 +0000
Files and hashes:         1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: K2tIepWww8oF7M63B8m+iYZdbpHxor8HJmxbM4QhUY0=)
                          2: 5K9Oh9VZsr3HOBptEMVsjoP_e_Q.roa (hash: YLy3at+4CK7XbYpoK63TH6Fci1Db7Ppm/QM9MlBVSzc=)
                          3: 7IcPHrXROTuNTf_SahmIzDpYk_c.roa (hash: L5UDzTnOOmL94lsJB5GitXxrT2tqiHBlNusXsGvxUwU=)
                          4: 8MABlsDBV8LP0o72Ps6uS8md-EE.roa (hash: fXmqgSgl411LYZCpGZdGkCF4TgXdZdFuZkTr9EWcmVw=)
                          5: fgjW20ZQ04xgq_qRpAWkrcJGzFo.roa (hash: pmOI3CWB5wHFkABDYT1l6+9Xm8dMktyYSLlosvObWto=)
                          6: ypRDxsb3_AxTrENYh76-1Wq0x3s.roa (hash: AXPwQ40+ytvDYVbgMoQ9hylazSVqs3q0IglBPe/qi70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:87:5e:50:4e:b6:dc:bc:25:8e:ea:1b:9e:e5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: Mar  1 19:01:03 2026 GMT
            Not After : Mar  2 19:01:03 2026 GMT
        Subject: CN=8f6da8c99b68f0b381f7a92fb26100c0164d1fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:82:6c:3f:a0:6b:05:99:32:55:2d:1a:4e:
                    8c:e6:36:f3:b0:60:1a:ee:61:59:09:68:9c:b1:ca:
                    54:c1:ed:30:0c:1c:5e:aa:51:fb:4b:71:eb:82:b3:
                    3c:52:24:89:03:2a:1c:50:71:2a:ae:64:4b:34:86:
                    a9:4b:95:17:47:b8:83:9b:7e:8d:f7:e4:13:0e:a8:
                    66:1a:4e:3c:6c:1a:3c:7e:ae:2d:ea:3a:e3:82:57:
                    6a:72:48:7e:c7:19:aa:d1:f9:d0:a8:3b:d6:66:1f:
                    7f:4c:13:87:fa:27:c7:4a:f7:f0:8b:20:9f:be:e9:
                    d4:ce:dd:06:77:65:a8:8b:40:5c:f5:02:36:97:0b:
                    b2:f6:50:60:f1:81:41:3f:1f:21:e5:69:2b:15:22:
                    fb:f4:80:05:2d:81:e3:20:41:e5:fb:1e:42:24:7b:
                    29:ef:bc:7f:dc:8c:b3:87:c6:b2:a2:8c:01:41:44:
                    e7:56:41:ff:1d:4d:39:de:b5:1b:53:d7:98:e2:f1:
                    a6:54:31:7d:08:eb:27:17:02:cc:e9:31:6f:b7:cc:
                    8b:2c:c1:1f:78:39:e5:6d:2c:3e:1a:87:d6:cf:3c:
                    14:45:29:c8:18:46:df:a9:c5:96:94:ec:9c:5a:1f:
                    ad:b8:6d:eb:97:f5:de:48:25:e1:9d:80:61:f8:99:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:A8:C9:9B:68:F0:B3:81:F7:A9:2F:B2:61:00:C0:16:4D:1F:B4
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:86:0b:d6:7a:3f:f4:38:35:43:61:f8:74:bf:4e:12:70:
         07:af:ad:3b:8a:3b:08:b9:b2:e3:50:8d:b4:06:ae:8e:10:8c:
         b2:7a:cf:e2:5b:b0:70:17:6c:90:cf:44:e6:5b:1e:18:08:40:
         08:5d:a5:ba:8d:f8:af:82:de:53:74:c3:75:a7:2d:bf:6f:0b:
         eb:dd:df:5b:9b:cc:6c:32:25:36:e3:af:50:6b:27:b0:4d:93:
         bb:6b:45:91:58:dc:9f:02:d8:9c:20:80:db:0a:2f:af:8c:ea:
         e3:9e:b5:54:b2:70:d5:b6:0d:cc:11:3b:03:d8:5a:5d:98:45:
         6d:4f:f9:87:61:08:87:7b:3f:f8:3c:24:ca:cb:72:ea:f3:77:
         89:84:31:8c:07:5c:b6:6c:4d:0c:26:6e:19:02:ce:81:eb:bb:
         ef:b4:f3:20:b9:5a:4c:b4:c9:00:00:a9:28:f5:a3:0d:e9:fc:
         3d:cd:b0:61:e1:4e:93:09:85:3c:9b:1c:ad:18:80:cc:21:2c:
         0d:22:3c:68:15:bb:84:c3:c8:44:10:78:8a:f6:23:d0:33:be:
         98:76:26:69:dd:77:44:e9:ca:8c:bc:6e:e9:c1:41:35:50:18:
         59:68:cf:b4:70:7e:59:5a:0e:86:c0:cd:8c:20:f5:3b:30:81:
         e7:74:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:16 2026 by rpki-client