Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File:                     sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier:          iW/MhsGpXThaUdF7HIIW94dV7JioIqK4wqSV4X/M+hQ=
Subject key identifier:   50:51:00:8B:F1:D9:87:99:74:DD:DD:59:99:99:69:1C:2D:34:E2:AF
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer:       /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial:       019CAFED2CD4236A92C703BFBF552D3EECD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 19:01:21 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:21 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:21 +0000
Files and hashes:         1: cJdPxb0RSH0QMcbmsxnfVVZLI9o.roa (hash: 7Mc+8VOQ2R5S9UUsL5A35++MoKrgCRu3M3X3wsPiNFQ=)
                          2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: VwAa48OsNrTUX9VO04pDT80aayvCpVBmq6VS8nuo0po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ed:2c:d4:23:6a:92:c7:03:bf:bf:55:2d:3e:ec:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
        Validity
            Not Before: Mar  2 19:01:21 2026 GMT
            Not After : Mar  3 19:01:21 2026 GMT
        Subject: CN=5051008bf1d9879974dddd599999691c2d34e2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:5c:5f:18:5c:e1:c5:74:9c:c6:86:e7:36:
                    fa:d1:5b:6a:75:9a:08:64:d2:99:84:c5:f3:e5:57:
                    9e:7d:93:9e:bd:90:3e:a1:95:10:10:17:5f:c2:48:
                    3f:43:45:bd:57:12:26:9c:a1:61:87:80:c5:85:04:
                    9b:36:99:ab:86:f6:09:37:5c:65:48:d9:52:98:3f:
                    cc:55:4b:32:56:bc:81:61:aa:06:56:5e:e3:3a:f2:
                    e5:e9:fa:70:19:c4:ec:1b:e6:1e:36:9f:b4:f9:e1:
                    cf:38:f6:e8:c9:63:3b:de:54:13:51:45:78:81:1c:
                    d5:60:cc:14:1f:79:4b:5e:a4:f0:9b:76:bb:2d:26:
                    d6:90:f7:22:b5:a7:d3:cd:cc:74:9a:a6:2a:80:50:
                    3a:f6:fa:c5:fb:fa:8b:eb:34:b3:f7:bb:a3:b3:53:
                    c7:a9:0d:2c:fd:a6:a4:be:f8:2d:94:ce:35:f6:54:
                    6c:94:20:ff:58:77:cb:af:70:87:e6:de:81:56:cb:
                    19:6b:8e:d9:88:4a:60:1b:9b:63:5b:27:29:14:0d:
                    f3:ef:4c:bc:01:60:31:86:6f:59:1d:ce:14:05:2f:
                    9a:1b:e6:19:cf:2a:9c:04:b7:6c:3d:5a:05:e9:1c:
                    18:4b:13:f8:4f:03:23:84:cc:38:3f:0d:10:43:da:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:00:8B:F1:D9:87:99:74:DD:DD:59:99:99:69:1C:2D:34:E2:AF
            X509v3 Authority Key Identifier:
                keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:ba:b0:f2:96:84:0c:89:92:38:fe:35:e3:12:06:31:9f:
         14:b9:c3:13:56:5e:95:75:e6:67:8e:af:26:ba:54:4a:16:34:
         3f:5a:6d:2c:bb:2f:79:74:a9:e3:2f:4a:21:60:11:f0:0a:e9:
         24:83:84:d5:85:ca:bb:f2:5d:f6:7b:f0:99:cd:a4:87:a0:da:
         ef:86:27:85:f3:1d:ab:02:fa:17:ce:fc:d0:82:58:6f:70:09:
         9f:08:e3:fe:db:eb:8b:b8:e6:d6:3c:8b:ec:0a:09:0d:d1:38:
         ba:00:3d:d0:dc:89:76:af:67:fc:6f:d8:b1:7f:2a:d6:c9:29:
         5c:95:6a:a7:6e:e0:13:d7:36:2e:2f:f2:6d:77:d9:48:bb:fe:
         54:2d:0c:3a:a0:05:e5:3f:19:84:6b:a7:47:b4:01:f9:50:8d:
         94:6e:41:67:82:d5:ea:06:f1:e8:97:46:4d:86:26:3a:46:70:
         6d:e0:98:7a:a1:c3:b8:a2:86:14:f3:6c:5d:2a:c9:e2:27:57:
         5b:2b:c7:c9:c9:1e:e4:80:d4:d2:2c:49:49:e7:c8:cf:b7:e6:
         8a:1b:39:49:b6:14:72:d8:42:31:68:c4:f6:1d:af:90:c0:12:
         de:33:c0:4a:28:f4:25:ae:e6:11:eb:68:0b:2a:ce:a3:6a:db:
         95:4b:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:10 2026 by rpki-client