Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File:                     v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier:          On5B9xckvfiwXQ3b+g5KsQICwLnL6NDNsXY1b/e3YYQ=
Subject key identifier:   52:AE:C5:4C:82:4A:26:63:AA:34:08:D9:B0:10:4D:32:2F:AA:66:4C
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer:       /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial:       019CADC7DCC6AF818AD41A8643F1CA5BD56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 09:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:22 +0000
Files and hashes:         1: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: 3dFcDtU9D1M6rWifuAqpggJtzOqLzSPMYq52xG3+mZA=)
                          2: yOtgoQUSDDTF6dzBLbgn19zbD20.roa (hash: FLmTb8uB8aThQGwMLCsGAZe9JiC1Qd3BPfuyYTN+2do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:dc:c6:af:81:8a:d4:1a:86:43:f1:ca:5b:d5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
        Validity
            Not Before: Mar  2 09:01:22 2026 GMT
            Not After : Mar  3 09:01:22 2026 GMT
        Subject: CN=52aec54c824a2663aa3408d9b0104d322faa664c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:27:73:c5:de:98:dc:dc:3a:09:d9:74:0b:
                    86:62:50:1a:6b:44:a3:b7:05:6e:af:1d:44:ed:7f:
                    da:2c:68:6b:cb:b8:9d:b0:8b:88:1d:98:f8:1b:2a:
                    21:37:c2:2d:24:18:65:21:f4:cc:65:7f:59:bc:dd:
                    18:6d:08:62:35:f9:60:ad:7e:24:24:ee:87:64:1d:
                    d2:f3:c8:44:41:81:7b:f5:9b:ce:32:fd:f4:21:cf:
                    40:8e:87:22:ff:4b:ad:61:75:17:9c:b1:af:24:85:
                    74:c9:a7:30:3f:fc:00:dd:f8:53:c8:1c:06:ef:27:
                    4a:1e:97:23:4c:be:18:d5:74:e6:71:b4:3f:fe:56:
                    c4:01:83:38:15:70:cd:ce:5a:3c:68:3b:a4:2a:66:
                    55:12:07:f3:4e:3d:0f:c0:b4:c7:71:db:7f:7e:65:
                    d8:0b:5f:3d:3a:6a:2b:23:54:07:f4:87:c8:a6:59:
                    5e:78:c4:03:d5:02:46:98:f3:ad:d6:4e:43:4f:f0:
                    45:61:b4:b5:84:8d:bd:38:01:db:1e:f6:58:b4:e7:
                    49:50:95:b5:05:b5:85:ce:75:f7:9d:c0:78:be:49:
                    16:61:ec:d3:71:41:a0:24:ce:51:89:92:9c:93:02:
                    cd:54:47:69:1f:95:0c:5c:8d:b1:d2:65:4a:2f:09:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:C5:4C:82:4A:26:63:AA:34:08:D9:B0:10:4D:32:2F:AA:66:4C
            X509v3 Authority Key Identifier:
                keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8e:b4:d2:5a:2f:ac:7b:96:16:52:1f:57:12:39:b6:cd:25:
         58:88:1e:1e:f6:6a:24:1f:63:47:04:04:cc:54:c4:77:e5:cd:
         56:d0:45:69:79:64:b6:60:6f:63:05:0b:06:cd:f2:8b:24:e2:
         8a:c1:b0:b5:12:ba:9d:bd:70:95:bb:da:1b:21:c7:00:47:b8:
         b0:69:01:6f:7a:ee:38:7c:8f:d8:c4:d0:83:9f:c8:76:8e:4e:
         fc:f8:a4:e3:e1:38:b8:3e:1e:1c:93:40:78:43:da:94:5f:de:
         73:37:67:a5:38:0e:7b:0b:c6:7e:cb:d2:e6:14:30:3c:bf:97:
         ac:1e:6c:1c:24:1c:96:fb:1b:ef:f0:01:e7:37:08:b1:53:5d:
         ad:ad:40:0a:6d:24:cc:c7:7f:55:5b:60:b4:f4:8d:e6:f6:f6:
         03:ca:c3:26:e4:e7:b5:fd:aa:b6:bb:d6:61:43:0f:d7:47:21:
         32:6d:e2:7d:cb:c2:c8:fe:4a:28:cb:10:5c:3a:42:9b:3f:ea:
         72:99:e3:18:d0:6b:ff:05:6b:d4:5e:1e:d4:2c:9e:b2:9d:a9:
         a8:a1:31:61:b1:9a:f3:fb:6b:e1:49:45:cc:e3:4e:88:85:bf:
         de:28:03:d1:35:49:cb:20:66:ff:12:0c:6e:86:6c:f3:80:f4:
         fc:04:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:01 2026 by rpki-client