Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          0OjMbZx2OxwZgD49ToLYiZ4z25bYrVfQAfE6A7oob9w=
Subject key identifier:   94:A6:5D:59:65:6F:C1:31:3A:6E:72:4E:22:CD:F5:F2:E2:6C:78:2F
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       019CAA21F1A0A5C818FC3A4E7E8A62651151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          184C
Signing time:             Sun 01 Mar 2026 16:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:17 +0000
Files and hashes:         1: 3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa (hash: +nC3QJ9RCWlqRE3Uosm7QmqFU0HBkZbw83GEtUPhBdQ=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: Wae/jHXKGVpsOe62TI0IYOXz/tizaLs2GrApxTk9/u4=)
                          3: _7qWKS1csoWUqUsFNNOiL6451ys.roa (hash: /iDif7LQhjMSe8pOojFBssleDtOr1vNWkexVpZHh8kU=)
                          4: nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa (hash: ygakFRiKlCc1AsCZ9QHkHBLmK3WGXgznTKZOHRqQphU=)
                          5: uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa (hash: pfVCme09A/8wk/MnxkHB5VKNGtvo4YKdgY3uHx7H4D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:f1:a0:a5:c8:18:fc:3a:4e:7e:8a:62:65:11:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: Mar  1 16:01:17 2026 GMT
            Not After : Mar  2 16:01:17 2026 GMT
        Subject: CN=94a65d59656fc1313a6e724e22cdf5f2e26c782f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:9e:4a:2c:6f:fb:a3:76:29:42:78:b3:b6:
                    39:46:00:b9:1e:ee:33:df:76:b6:66:71:6d:0c:2c:
                    61:ac:c6:b2:d7:56:c4:29:a1:54:22:66:e0:75:79:
                    d8:e7:78:75:69:4a:4a:47:8f:eb:81:9e:a4:30:80:
                    60:47:23:51:75:b6:bd:52:76:8e:43:c8:13:5e:40:
                    33:71:06:f6:63:b4:a3:64:f2:0a:26:98:1d:fa:b3:
                    99:da:10:4a:1b:c5:55:72:28:96:51:f2:fd:68:7e:
                    23:24:80:0a:1e:0a:1d:cc:d9:3c:ef:98:e1:9d:65:
                    16:11:b7:6a:0b:f5:66:06:0d:19:98:97:53:7d:57:
                    9e:18:a9:6b:4b:eb:d1:d4:af:5f:26:45:e5:48:04:
                    a6:a7:b8:32:8a:b3:06:da:ea:85:b1:e4:cc:e0:b2:
                    68:a9:ab:f3:c1:83:a4:5d:c2:d9:dd:d2:bb:b4:d5:
                    fe:a0:fd:df:50:cc:fc:a5:ac:71:0c:bc:04:7c:f2:
                    22:de:0d:a2:08:a2:8e:e7:04:e6:58:da:94:ee:53:
                    3d:3f:80:a8:62:ec:3c:5d:e1:39:9a:66:f2:b6:a7:
                    b5:63:7b:6c:4c:0a:04:31:cb:cd:18:3e:10:92:9d:
                    63:ad:76:c2:58:04:30:22:0b:40:ab:33:24:b7:55:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A6:5D:59:65:6F:C1:31:3A:6E:72:4E:22:CD:F5:F2:E2:6C:78:2F
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4b:d6:e5:cc:79:15:8e:62:c4:45:f2:d6:62:3c:af:ae:62:
         3c:76:b4:1e:5f:c9:2a:5e:46:02:f2:66:2f:4a:0d:76:24:e3:
         6f:78:19:6a:24:41:e3:c1:da:f9:51:66:31:5d:cd:1f:d8:26:
         38:00:65:fe:4b:a3:57:0c:9d:f9:fb:87:df:36:e6:5f:56:17:
         3e:27:5a:af:78:29:11:dc:18:dc:59:2f:7e:64:2f:b5:af:f9:
         7e:5f:f7:1f:4f:15:64:af:a3:f7:b6:d1:a8:59:e9:a3:d6:a6:
         ff:75:85:37:7a:f3:91:a5:69:00:9d:70:d5:97:62:bf:c5:c7:
         da:fb:87:30:9d:c5:d5:51:9c:58:8b:b1:ea:52:13:90:ba:ba:
         9e:a0:94:a1:91:c2:a4:d5:c3:b0:2a:c5:c2:f4:23:d6:f8:7a:
         d5:01:42:b5:60:89:a0:06:7b:c7:65:20:eb:14:98:fe:4c:96:
         3b:02:cc:0e:79:a2:f7:13:79:c9:24:6d:14:d0:35:ec:4e:d5:
         d4:b0:53:0a:47:a0:ef:c7:68:6b:0a:e8:1c:9e:e1:48:b2:e6:
         6d:de:d0:b6:79:0d:df:92:9b:8f:20:b6:a2:38:91:b0:42:42:
         d2:cf:77:c7:4c:58:64:b6:d3:ec:0d:3b:5f:12:ef:01:c9:cc:
         02:2d:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:02 2026 by rpki-client