Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File:                     rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier:          RE5ZZoVsKPmJbwYugahZBMKezqe4MI+hwECjsfFvrf0=
Subject key identifier:   20:98:8D:EF:2F:D4:2F:16:3D:29:4C:B4:5A:98:CC:CD:2F:E9:52:FD
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer:       /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial:       019CAA58814574E58B0DDE63A33613951204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 17:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:52 +0000
Files and hashes:         1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
                          2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: ok5ZLDU/iIimy7qZlk81/CeQzGWkKJISShkUCxVyG1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:81:45:74:e5:8b:0d:de:63:a3:36:13:95:12:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
        Validity
            Not Before: Mar  1 17:00:52 2026 GMT
            Not After : Mar  2 17:00:52 2026 GMT
        Subject: CN=20988def2fd42f163d294cb45a98cccd2fe952fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:9b:a4:9e:56:87:1f:94:ad:be:a7:be:a0:
                    98:26:19:24:c5:2c:a3:d7:53:45:10:d6:3c:1e:48:
                    79:9b:92:1d:ad:26:67:08:62:61:ff:e0:89:58:96:
                    ce:ef:f1:59:0c:76:a9:21:43:bd:ef:5c:c2:5b:28:
                    b6:3f:32:d7:93:bf:d1:36:b5:38:0c:c2:12:47:5a:
                    de:e1:f3:e9:4e:f3:60:2c:06:fd:fc:11:37:fd:cf:
                    2a:e0:a1:8c:b0:49:b1:64:74:1e:68:c3:92:09:be:
                    e9:13:25:39:06:3d:79:93:64:52:e0:16:c4:4f:e1:
                    67:42:47:c7:81:12:39:19:f7:5e:3a:56:ef:74:95:
                    88:94:22:ac:5d:7c:47:ad:11:f5:0b:1a:c8:6a:0d:
                    58:f2:68:7a:dd:ad:8c:51:4c:1a:54:ef:2d:79:b5:
                    db:9b:06:e7:a4:36:db:7b:f9:c3:88:ee:9d:c6:d3:
                    91:30:5c:31:b2:d7:88:af:4c:fd:fc:07:3c:62:7a:
                    71:55:4e:1d:27:6a:97:b8:d4:7d:96:0f:19:b1:81:
                    45:52:81:72:46:c6:bc:39:a2:f8:33:3b:af:1e:0e:
                    eb:f7:4e:f1:f1:15:5d:ab:8b:c4:ef:5f:49:14:a1:
                    a5:d2:25:79:6d:77:00:c5:1f:d7:9e:51:51:d3:d6:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:98:8D:EF:2F:D4:2F:16:3D:29:4C:B4:5A:98:CC:CD:2F:E9:52:FD
            X509v3 Authority Key Identifier:
                keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:82:6b:d1:3d:89:18:cc:60:78:7e:7c:d1:f5:92:56:92:ea:
         fc:83:41:a7:9e:e2:4c:48:e4:b8:cc:16:ad:18:0c:bd:97:3a:
         a9:57:bb:0b:8d:d9:77:4f:6a:e7:35:91:fd:d0:1c:7a:29:4a:
         3a:c3:63:f8:52:d7:2a:43:06:d4:01:b2:97:33:32:5d:10:dd:
         46:93:a1:b5:7f:46:71:af:a7:ed:96:8d:c6:2b:5c:51:c8:cb:
         dd:a2:60:cf:a3:58:89:7e:b6:da:47:20:8a:10:eb:01:6c:be:
         39:b4:2c:f0:a6:c9:02:99:51:04:54:41:c3:e5:ff:68:6c:7d:
         3a:67:d1:ab:d2:e9:26:1b:ce:05:a8:24:46:ea:e9:8d:52:71:
         f0:1d:f2:c4:bf:35:9e:dd:10:8c:1f:8d:85:21:f7:8d:38:01:
         e8:3a:73:41:4f:2b:5d:84:b4:00:4a:7f:58:bf:0e:d6:9a:01:
         c1:1e:16:4d:ec:96:95:55:94:5c:9f:d4:9f:c9:c0:8a:c8:d3:
         08:49:fd:47:88:9d:78:f3:2f:9d:4b:c2:50:a9:64:04:69:c4:
         61:d9:ae:bd:a8:50:9c:78:05:78:b5:bb:78:de:dc:78:63:32:
         75:db:c7:3b:fa:75:dc:e0:96:b0:7c:2b:88:6b:6e:e3:8d:67:
         cc:b9:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:40 2026 by rpki-client