Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          97xLNyO+ExZQD2qV1GdwL18+qUVXNlVkAwtUiffwjuU=
Subject key identifier:   84:80:7E:DF:F1:05:0D:4F:3E:FA:B4:8D:E8:8B:D4:63:00:6E:63:93
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       019CACB535922F6ED7B87F2C54C5B0D72425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 04:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:22 +0000
Files and hashes:         1: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (hash: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0=)
                          2: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (hash: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs=)
                          3: JXnp6HlQC-5SqdfjYLJsbtC_UIQ.roa (hash: YlECxxfSPVhcfaZ4wCUWJKldj0fpn0G8ae7MLGJ3YLI=)
                          4: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (hash: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI=)
                          5: makv0shcZ5kNgnoatV93mdzUDzA.roa (hash: pcme59je8U1s3r4CfES9LEZanBL2hRJGysIwX84CTmo=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: xCTu6UVo2TBzVJhE7FxPdfYCiQ0JDsIo/Ke9b9N+F6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:35:92:2f:6e:d7:b8:7f:2c:54:c5:b0:d7:24:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Mar  2 04:01:22 2026 GMT
            Not After : Mar  3 04:01:22 2026 GMT
        Subject: CN=84807edff1050d4f3efab48de88bd463006e6393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:7d:22:29:2c:7f:a8:3f:ca:ae:02:9f:94:
                    50:d5:32:83:d8:54:8d:2c:88:b7:82:de:a8:40:7d:
                    d4:5d:74:b3:79:5f:89:77:11:eb:17:e4:8d:c4:fd:
                    db:74:67:45:2b:df:a3:22:d7:d9:7b:e9:ab:1c:f1:
                    44:76:60:91:3a:ed:88:86:46:25:60:94:c4:6f:6e:
                    e8:4d:19:5c:d6:14:5b:ff:73:30:0d:cf:91:1d:d3:
                    4b:31:9a:5d:95:37:85:14:d2:67:a1:eb:6c:30:f6:
                    5f:17:d9:2b:17:73:27:22:4e:e9:71:69:2f:32:eb:
                    1f:20:a4:87:5e:5d:3a:4e:6b:04:cc:b9:56:e3:b3:
                    3f:7f:ec:65:20:10:c6:17:42:b2:a1:44:eb:6c:16:
                    4b:59:c8:47:35:ce:58:ca:2d:32:d4:54:c8:cc:4c:
                    a6:1a:80:cb:09:f8:d8:d4:a0:9e:f0:34:68:a7:5c:
                    d8:be:41:77:39:63:b0:37:7b:a2:b5:96:f1:23:68:
                    dc:a1:3a:32:f9:5c:dd:f9:df:a4:91:70:a5:99:3a:
                    34:f0:51:dc:42:64:b0:34:b5:43:64:44:c2:e1:50:
                    7a:54:73:d1:5b:3c:7f:ee:5c:34:31:9d:2a:76:ff:
                    94:bd:99:43:73:75:d4:59:9e:aa:c2:75:4b:04:ba:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:80:7E:DF:F1:05:0D:4F:3E:FA:B4:8D:E8:8B:D4:63:00:6E:63:93
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:05:a9:c8:52:bc:ba:75:8a:8f:19:19:4e:2b:3a:67:a1:
         84:88:72:9f:45:59:b6:d3:18:24:39:ae:6e:6d:1e:f2:e8:86:
         cd:22:18:10:3b:f8:31:2a:85:e2:ef:23:8f:84:34:38:6f:13:
         69:08:e8:11:46:d7:ff:f2:b4:08:4a:bf:a6:79:30:2f:83:76:
         c9:12:60:5a:60:af:f7:51:65:d1:c7:4a:b3:c8:ed:33:43:d9:
         86:4b:32:86:f1:42:fa:83:81:84:61:6c:cb:81:be:2d:01:ff:
         7e:42:92:fb:e7:29:de:8d:5d:19:41:41:ea:5e:f1:ba:52:4a:
         5d:b9:93:16:27:1d:d8:dc:20:b0:da:e8:3e:af:59:56:86:9a:
         d6:51:93:dd:7c:33:c1:8c:ba:26:24:52:e5:21:34:e8:44:59:
         eb:96:6e:b7:87:0a:41:7f:c1:55:b0:4d:32:87:74:38:d8:ed:
         95:47:fb:55:b9:04:4e:f6:f0:cb:7b:c1:7f:ed:23:6d:72:d5:
         39:75:f1:54:21:ff:26:8e:c1:7e:22:a4:05:50:c3:41:58:fd:
         f6:1b:31:28:79:8d:5d:de:8f:40:6f:0d:6e:3d:bf:4f:71:d9:
         b5:6a:a2:d8:e8:18:47:36:56:82:3f:98:ad:d7:75:c8:3c:e2:
         3b:aa:47:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystTWSL27XuH8sVMWw1yQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjZkODMzNzc3NmM5ODc0NmJkMjMxZTY5ZTE4NWRiMmE5
YTViZTIwHhcNMjYwMzAyMDQwMTIyWhcNMjYwMzAzMDQwMTIyWjAzMTEwLwYDVQQD
Eyg4NDgwN2VkZmYxMDUwZDRmM2VmYWI0OGRlODhiZDQ2MzAwNmU2MzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgd9Iiksf6g/yq4Cn5RQ1TKD2FSN
LIi3gt6oQH3UXXSzeV+JdxHrF+SNxP3bdGdFK9+jItfZe+mrHPFEdmCROu2IhkYl
YJTEb27oTRlc1hRb/3MwDc+RHdNLMZpdlTeFFNJnoetsMPZfF9krF3MnIk7pcWkv
MusfIKSHXl06TmsEzLlW47M/f+xlIBDGF0KyoUTrbBZLWchHNc5Yyi0y1FTIzEym
GoDLCfjY1KCe8DRop1zYvkF3OWOwN3uitZbxI2jcoToy+Vzd+d+kkXClmTo08FHc
QmSwNLVDZETC4VB6VHPRWzx/7lw0MZ0qdv+UvZlDc3XUWZ6qwnVLBLrN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISAft/xBQ1PPvq0jeiL1GMAbmOTMB8GA1UdIwQY
MBaAFKVm2DN3dsmHRr0jHmnhhdsqmlviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgt
MWI3NTg2N2U4ZGZmLzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgtMWI3NTg2N2U4ZGZm
LzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokIFqchS
vLp1io8ZGU4rOmehhIhyn0VZttMYJDmubm0e8uiGzSIYEDv4MSqF4u8jj4Q0OG8T
aQjoEUbX//K0CEq/pnkwL4N2yRJgWmCv91Fl0cdKs8jtM0PZhksyhvFC+oOBhGFs
y4G+LQH/fkKS++cp3o1dGUFB6l7xulJKXbmTFicd2NwgsNroPq9ZVoaa1lGT3Xwz
wYy6JiRS5SE06ERZ65Zut4cKQX/BVbBNMod0ONjtlUf7VbkETvbwy3vBf+0jbXLV
OXXxVCH/Jo7BfiKkBVDDQVj99hsxKHmNXd6PQG8Nbj2/T3HZtWqi2OgYRzZWgj+Y
rdd1yDziO6pHLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:35 2026 by rpki-client