Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          QLB2L8uhFDMj3cMsNuGEPBVz7VvmedYWf+obwuwTsB0=
Subject key identifier:   85:E8:BF:6A:37:59:5C:0C:FB:7F:EF:2A:6A:60:D4:36:13:95:93:83
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019CABD95CA552CC65D535ABF12748BD088B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          184E
Signing time:             Mon 02 Mar 2026 00:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:14 +0000
Files and hashes:         1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=)
                          2: Or_Trx_pyk3P2RfQHAGvSoa3E_o.roa (hash: D6cpvG3bXYxnFOjIpxhw7hO0pHmMSae7H7JteYOOGpA=)
                          3: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=)
                          4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=)
                          5: VqNP0Im1R2Xhcy1xVWos-OfuEPE.roa (hash: iduPoCIxSjpp0ZSpvCwLlS/MLtsMgKgNiTHnlQR8wrA=)
                          6: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=)
                          7: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=)
                          8: e71RJyBktjssZjwClroR216iOMA.crl (hash: HnmaGBrNBxW9hB7nDcp0+4/71lvmaB626AslfL5lUoI=)
                          9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=)
                          10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:5c:a5:52:cc:65:d5:35:ab:f1:27:48:bd:08:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Mar  2 00:01:14 2026 GMT
            Not After : Mar  3 00:01:14 2026 GMT
        Subject: CN=85e8bf6a37595c0cfb7fef2a6a60d43613959383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:48:04:89:bd:a0:59:03:7d:a8:27:ab:6e:
                    cc:15:28:29:32:8e:d4:85:22:d5:fb:d8:97:86:1d:
                    80:32:0f:cd:f0:04:3f:fd:82:88:c6:2b:f7:54:c1:
                    8b:12:37:3e:94:c4:0d:36:14:0e:97:5b:3f:b9:b9:
                    2b:bb:9e:1b:ca:da:59:d8:40:f6:ea:5f:25:c7:41:
                    99:26:5f:da:b7:86:f0:6f:4a:03:ba:98:24:fe:30:
                    37:a7:7c:5c:83:48:c5:38:f2:7e:9b:af:29:d2:b2:
                    9e:8e:df:35:de:da:00:df:1b:da:17:17:d2:94:3b:
                    47:10:11:fc:21:bc:08:20:2c:66:53:52:7a:32:5b:
                    e0:48:a7:7e:45:75:a2:ae:ee:99:df:68:d2:00:1f:
                    17:63:77:fe:d5:ef:79:5e:07:a1:be:3c:bf:b1:ea:
                    82:dd:af:12:14:ca:0c:cc:2a:05:8d:7d:98:72:f4:
                    bf:a6:06:73:ca:ad:f3:7c:45:fc:e3:05:7c:7b:ed:
                    4c:46:ab:6e:e9:90:fe:a2:70:99:72:1d:e1:ac:67:
                    31:92:54:bc:1b:64:d1:56:3e:7d:89:a3:3e:02:2a:
                    6b:d5:7f:17:c8:24:17:47:66:0c:e9:fa:a4:46:d4:
                    85:e1:89:78:cf:97:f0:f5:b0:ed:08:06:ca:e0:23:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:BF:6A:37:59:5C:0C:FB:7F:EF:2A:6A:60:D4:36:13:95:93:83
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:9c:37:b5:34:c7:9b:05:e3:48:3e:d3:fa:a1:8b:8a:44:09:
         ea:38:31:fd:72:1b:46:d1:6d:95:f7:3f:47:d6:ac:fc:60:4a:
         de:0c:49:38:51:45:0c:e6:61:95:86:87:83:d5:56:b9:0a:a2:
         53:20:aa:fc:ad:42:72:cf:d0:78:15:f8:42:8c:cf:fa:6b:d6:
         15:b8:55:13:e2:51:13:02:5e:6b:bc:19:db:0b:1b:ca:9e:58:
         e3:50:c2:bf:4f:fd:77:f2:9e:b7:cf:f1:8a:fc:94:09:b4:7c:
         9c:e2:d6:02:93:90:5e:84:7c:ff:e3:b2:f7:c9:6c:92:98:ca:
         59:f9:d1:db:ba:a5:ec:47:bc:4c:04:c3:d7:fe:59:fa:9b:fe:
         2a:a0:f9:cc:26:7b:ab:25:13:15:cf:0d:3f:17:ea:9a:aa:b8:
         98:42:cd:36:f9:ca:6b:87:08:fb:33:ab:b7:da:a9:ce:78:ad:
         15:b5:95:d4:f6:4e:04:ae:f0:63:e9:82:76:49:12:8a:61:1e:
         23:f8:2c:df:39:89:84:a0:54:30:6b:c1:ca:8e:e9:00:15:fd:
         ec:90:96:9a:43:f4:e8:b2:f5:a2:03:5c:a4:ba:08:bc:0d:95:
         4e:56:fe:ef:af:82:30:e4:23:ec:77:c9:be:49:f0:f5:68:22:
         5a:c5:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:46 2026 by rpki-client