Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File:                     DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier:          hDW6Ki8B4HxWyHKn5Wl4Ocr3KIYuo3f4CjPr2ITIHSo=
Subject key identifier:   51:DE:F1:C4:78:A2:39:0B:37:86:34:0C:67:D3:6D:35:3E:28:D2:29
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer:       /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial:       019CAA5869DBA3941BC62760C94DF25D09CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 17:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:46 +0000
Files and hashes:         1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: MYH4V2p6x73JzEsSJi4uJirKkXIle6/XIjqZxZL0VAk=)
                          2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:69:db:a3:94:1b:c6:27:60:c9:4d:f2:5d:09:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
        Validity
            Not Before: Mar  1 17:00:46 2026 GMT
            Not After : Mar  2 17:00:46 2026 GMT
        Subject: CN=51def1c478a2390b3786340c67d36d353e28d229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:ab:c7:76:e3:3f:1e:27:b9:53:18:83:87:
                    88:ae:b2:80:36:f0:0e:d7:9d:c6:18:e0:d9:b5:e1:
                    2f:fe:30:4a:5c:8f:55:d9:f2:1c:8a:54:62:b4:b7:
                    db:9d:5e:98:80:11:23:69:4a:99:e4:bc:1a:90:1c:
                    52:d9:02:7c:1c:c6:42:0d:87:74:66:2b:92:f0:52:
                    13:7b:ee:d1:bf:3d:01:03:ee:94:9d:2f:40:4c:2a:
                    35:22:ab:61:3e:27:93:9d:a5:d6:40:e5:51:91:48:
                    dc:93:1b:d3:9e:f1:43:4b:67:18:7d:68:be:16:6c:
                    05:a3:d3:f9:68:b9:75:69:fe:23:12:46:a5:27:02:
                    57:23:97:00:d7:7f:ce:71:71:69:1a:ae:22:b1:a9:
                    5e:48:f3:e9:9b:04:1a:89:e4:35:3b:b8:ce:99:49:
                    f6:e9:22:ef:b9:f8:0f:4f:3d:d1:3e:9e:ad:e7:2a:
                    2e:7f:4e:f9:90:7f:3d:e1:a8:b5:ed:7a:00:b0:98:
                    0c:05:f8:7a:a5:1b:68:a0:3d:91:58:66:1e:58:74:
                    59:c5:8d:fd:1d:c6:2a:2c:7c:1f:ec:e5:40:ac:8d:
                    c5:ee:d9:5b:6b:96:89:1b:67:9e:0f:43:12:46:01:
                    1f:96:fe:14:42:eb:ca:4e:eb:49:31:78:96:0f:e3:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DE:F1:C4:78:A2:39:0B:37:86:34:0C:67:D3:6D:35:3E:28:D2:29
            X509v3 Authority Key Identifier:
                keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:40:66:cd:e1:70:36:92:43:a0:68:cb:94:eb:56:8c:98:
         42:db:2f:07:56:b2:b7:40:40:c8:19:04:e1:9e:30:0b:e3:af:
         82:40:34:a2:c6:0f:f5:f3:be:1e:9c:70:1a:a6:c7:d5:46:9c:
         ae:d0:f0:aa:90:02:0d:cb:6f:2b:84:d0:aa:34:19:f5:72:5c:
         a9:25:56:28:df:d6:2a:cb:db:f9:a9:76:ec:f0:4e:45:85:49:
         2a:64:6d:6f:94:ab:95:6a:06:c8:a2:b7:e5:dd:bd:eb:61:6b:
         3e:8a:2a:d8:01:19:d3:cc:22:c2:c7:79:20:1a:c6:b4:92:ef:
         5f:30:e0:81:eb:b4:b9:2e:1f:f8:e7:52:4d:7b:87:57:f2:b5:
         13:6b:3b:3e:81:5d:70:ba:43:03:8c:3a:aa:32:6c:25:e1:f6:
         e8:4b:21:d3:e0:c4:d7:7f:8a:a7:1d:4f:f7:28:19:7b:26:11:
         a6:85:8e:0c:da:28:82:a1:fc:a4:63:bb:18:e3:b4:eb:48:3f:
         84:36:2f:d5:62:47:89:a8:73:1d:6f:66:4f:60:ae:3c:6f:ce:
         37:49:a6:b9:44:55:a4:fc:91:69:a2:cb:06:b0:3d:d7:ad:bb:
         a1:30:88:59:25:77:ca:0b:08:3a:fc:5c:53:9c:0d:16:a9:5d:
         9d:bd:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:22 2026 by rpki-client