Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          VbGyQlpmvUTPA8WybBDSCATVzlPF+TMMmQ0MDLDAlzc=
Subject key identifier:   2D:AD:3B:F3:42:B2:2C:73:CE:5A:BB:92:0C:F1:FA:83:B8:48:65:29
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       019CAAC720097870FE54F11AB824FFD23695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 19:01:42 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:42 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:42 +0000
Files and hashes:         1: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (hash: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0=)
                          2: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (hash: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs=)
                          3: JXnp6HlQC-5SqdfjYLJsbtC_UIQ.roa (hash: YlECxxfSPVhcfaZ4wCUWJKldj0fpn0G8ae7MLGJ3YLI=)
                          4: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (hash: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI=)
                          5: makv0shcZ5kNgnoatV93mdzUDzA.roa (hash: pcme59je8U1s3r4CfES9LEZanBL2hRJGysIwX84CTmo=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: WYnsnEJfZLNxyBiEP1aaLkSRvExIdkUrgwj3mQ1c/IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:20:09:78:70:fe:54:f1:1a:b8:24:ff:d2:36:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Mar  1 19:01:42 2026 GMT
            Not After : Mar  2 19:01:42 2026 GMT
        Subject: CN=2dad3bf342b22c73ce5abb920cf1fa83b8486529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:47:90:db:8d:2f:55:e1:d1:df:32:ff:48:
                    bc:11:2f:02:07:97:33:75:d8:05:31:5b:a1:fd:e8:
                    64:cc:b1:d9:52:90:98:ff:d2:10:22:8e:c4:6b:a5:
                    62:dc:45:8b:df:69:a7:1f:50:f0:50:a7:ae:2d:d4:
                    ca:ab:54:6f:7a:04:f1:67:0a:ee:30:b2:e1:0c:7c:
                    a2:6e:83:6b:29:0b:5e:e9:a3:0e:18:98:19:3f:60:
                    57:80:9b:97:6e:5c:34:49:e0:d7:54:a7:4a:db:77:
                    83:8b:81:be:4e:06:42:92:05:a1:2c:b3:b1:1a:3e:
                    cf:1f:d8:68:84:fa:a6:8b:e5:75:df:db:3e:e7:e1:
                    79:2c:6a:fb:20:5a:c3:30:7c:0d:95:66:24:1e:16:
                    f7:53:83:3d:ff:b1:86:58:36:23:ae:5b:25:06:3b:
                    30:d5:9e:29:32:14:a4:dd:d1:75:e1:3b:c4:82:19:
                    99:a4:e6:17:b4:b9:db:24:eb:fa:9a:d4:a0:77:4e:
                    d6:e1:4e:ca:e5:c8:ec:1c:68:ab:c6:11:f3:89:53:
                    75:4e:69:ec:eb:5e:9b:ba:2c:03:39:79:9f:62:fc:
                    38:27:3c:1c:91:25:13:c9:96:7a:01:44:3c:fd:f2:
                    d5:e5:38:74:ba:68:a6:a2:7f:7b:53:35:04:17:cd:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AD:3B:F3:42:B2:2C:73:CE:5A:BB:92:0C:F1:FA:83:B8:48:65:29
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:04:b7:13:ea:be:2b:0e:7f:9a:29:5a:c3:eb:ff:07:41:06:
         15:3a:05:38:43:09:6e:e6:07:f0:ce:c4:fd:dd:d9:5e:b2:00:
         00:cb:5d:dc:39:69:e2:65:01:63:a3:e5:70:0a:60:75:a7:a7:
         62:71:9e:85:1a:42:67:c7:05:66:4f:6c:96:05:40:c7:6f:b1:
         bb:bd:47:7d:98:da:b3:52:fc:45:bc:34:31:4b:0e:37:8b:fb:
         c1:fe:33:b3:75:8f:73:0f:5b:c4:ab:6b:30:63:52:dd:ee:aa:
         6c:cf:cf:ec:94:c8:2b:1f:8b:96:38:f1:e0:f0:34:00:e3:0d:
         1f:0e:d4:a7:ba:49:c3:42:2d:fe:be:7a:b7:53:84:1c:ef:e4:
         3e:58:13:d5:b9:b3:c7:8d:8d:20:7d:d4:3e:11:d2:ae:74:c8:
         6c:7d:57:98:6a:a9:ff:db:93:9d:df:2f:85:dc:82:59:4b:ec:
         80:e9:80:8c:c1:35:7a:53:d0:93:cc:4d:fb:cb:03:d8:6c:fc:
         ba:42:84:00:6e:44:f4:82:24:f8:0e:8c:8f:e0:3a:91:67:d2:
         c5:f2:b9:75:11:5a:95:c6:83:7e:4c:85:ae:21:1b:06:6d:21:
         c9:a1:1f:30:10:3c:7a:9c:ed:1e:bc:8b:01:37:a0:98:e0:5d:
         16:ef:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:34 2026 by rpki-client