Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File:                     B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier:          rccGXMkR7mi/0QfaWVCjLcw0XjZZqajNxQO0BDexEzo=
Subject key identifier:   31:FE:D2:A5:64:4B:A0:45:E9:4D:F3:8B:AA:52:9F:BE:94:95:D3:77
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer:       /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial:       019CAB6BDB4F31E5F9F40C736F97E189C133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number:          184D
Signing time:             Sun 01 Mar 2026 22:01:38 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:38 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:38 +0000
Files and hashes:         1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: hojKC58kI8BpQ2kLXY5zjFdH5MfffTiz7NxBdzu4MyM=)
                          2: jGH-B0ZtHWB2vW4ZWbbJ0o66MCY.roa (hash: 3Hjbziobt0NexfpenfCsX8qQDjMLoP2uJzMZMRnjlcw=)
                          3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:db:4f:31:e5:f9:f4:0c:73:6f:97:e1:89:c1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
        Validity
            Not Before: Mar  1 22:01:38 2026 GMT
            Not After : Mar  2 22:01:38 2026 GMT
        Subject: CN=31fed2a5644ba045e94df38baa529fbe9495d377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:f3:17:cb:6b:82:e5:9b:b8:33:bc:d1:69:
                    03:65:a4:1e:f7:f7:f7:01:08:dc:0c:7a:27:9e:43:
                    b5:1c:ea:68:1e:bc:01:98:8e:68:b8:06:1c:2d:dd:
                    06:eb:17:58:86:8c:4c:a6:d0:97:22:7d:6f:cd:7b:
                    65:14:f7:18:c2:9e:fe:e1:ed:fe:a8:8a:ff:fb:1d:
                    d2:2e:f2:b1:63:2f:71:73:86:a3:0f:78:02:30:60:
                    05:04:34:4e:d5:28:1e:49:9d:01:f0:0a:da:d9:a9:
                    3e:eb:ce:bf:e7:d8:31:88:ff:19:32:52:70:05:e1:
                    58:c7:6f:5e:f9:cb:af:dc:4b:a8:85:b5:b8:75:ef:
                    a8:67:3b:c1:ac:b3:63:72:dd:38:01:aa:5e:c4:18:
                    03:9a:e5:4e:1b:5a:64:23:ab:da:81:8a:da:7b:4e:
                    d2:0e:11:8c:ee:11:7a:0c:4f:11:60:9a:eb:23:39:
                    d4:f7:df:51:6c:85:e7:39:40:3b:af:5a:8b:99:7b:
                    4d:4e:ce:0b:2a:9d:98:c6:43:d1:5f:b7:1c:80:c4:
                    f5:07:c3:76:83:1e:85:de:18:57:f1:6f:7e:a3:55:
                    64:24:05:d6:95:44:6e:99:ba:a1:87:51:1b:71:f1:
                    e1:ff:ef:0f:b5:f9:d5:4d:cd:4a:58:d4:75:1f:35:
                    2c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FE:D2:A5:64:4B:A0:45:E9:4D:F3:8B:AA:52:9F:BE:94:95:D3:77
            X509v3 Authority Key Identifier:
                keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:89:86:24:f9:b5:fc:8c:47:c5:50:e9:a4:4c:94:13:34:24:
         88:a8:63:1a:7f:4a:42:db:88:d8:59:e1:8b:d3:6d:56:df:fa:
         dd:c5:ff:b3:98:d4:bb:aa:b0:ef:e8:24:6c:06:4e:b1:34:65:
         4f:c5:14:c1:aa:45:bb:35:3a:d3:1b:20:45:0c:e4:ec:09:87:
         f1:a6:db:d0:b1:34:38:ca:dc:61:9f:b2:04:8a:38:85:f3:ed:
         1f:0a:28:83:15:7b:97:50:0c:ac:31:1f:99:a8:db:f2:b9:92:
         45:ae:c4:bc:b5:c8:2a:ab:79:1b:ed:73:37:6e:e7:93:f1:74:
         91:21:e1:54:6a:47:c4:d7:b9:28:21:f9:71:26:86:93:41:86:
         00:0b:79:71:7e:c6:94:d7:a8:b2:02:a1:b6:cd:89:60:f0:dc:
         c5:3f:63:b7:20:51:a8:f2:d9:53:e6:49:67:51:23:65:69:90:
         d3:1d:d9:af:41:63:e5:91:b6:66:5c:30:c6:ef:e7:bd:1f:b3:
         40:af:8a:9a:e6:63:8c:be:e4:76:8c:4b:f4:9d:b6:36:f7:51:
         db:5e:64:20:42:1f:97:90:8c:c2:54:cb:07:85:2f:87:77:8c:
         69:f8:64:d3:e6:a5:63:7d:8b:21:0e:12:85:cc:bd:fd:38:6c:
         64:ec:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:39 2026 by rpki-client