Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File:                     TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier:          osG1ONItlx0vM0Zuu/9GmmCftM40FcKedkB5u76c5IM=
Subject key identifier:   6D:98:7E:DD:D9:4C:78:6D:E3:45:3D:F8:9C:12:FF:24:DD:06:E5:7A
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer:       /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial:       019CABA1D8A0FBE96E72C28303032A4D05BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 23:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:36 +0000
Files and hashes:         1: ECKViBV7wRLHTav2jF-AfG9JxzQ.roa (hash: ObO6UXIOSmhNDyTyxoQq4HbBjcMNfcy2i3MVlt06RT0=)
                          2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: fK/+Tt8rAoGPPBlCgFa1j61baFg0+MHXSKtoA7MFD8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:d8:a0:fb:e9:6e:72:c2:83:03:03:2a:4d:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
        Validity
            Not Before: Mar  1 23:00:36 2026 GMT
            Not After : Mar  2 23:00:36 2026 GMT
        Subject: CN=6d987eddd94c786de3453df89c12ff24dd06e57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:dd:35:fc:ac:1d:a9:f7:38:3e:d3:e0:68:
                    5b:83:cf:d4:3c:a9:fe:81:59:d9:a2:af:52:9e:d9:
                    21:2f:51:5e:78:78:9a:67:02:8f:ed:b0:b2:c2:d3:
                    40:db:44:2c:60:9f:8d:1a:81:87:32:c1:63:48:e4:
                    bb:45:82:fd:34:b3:93:04:db:dc:4c:95:e8:94:7e:
                    6d:06:8a:94:39:28:d6:ba:34:9e:54:62:d9:f2:40:
                    a4:4b:30:96:c6:b5:38:4c:29:a7:c4:41:47:0d:c4:
                    b1:da:1e:c7:76:67:7e:b4:6c:ed:a2:b3:dd:8d:fb:
                    5d:51:ae:bd:41:79:7c:6b:8e:22:bd:99:40:78:53:
                    c1:3a:21:17:9a:57:af:0c:44:91:d3:a8:be:94:12:
                    fd:45:77:0d:5c:0e:6b:0c:9e:e8:f6:d8:57:b7:3c:
                    9b:2a:0d:00:de:e9:51:bd:b6:06:c5:87:ad:a0:5a:
                    37:5d:bc:8c:a7:6a:14:a0:cd:5d:fb:21:6b:33:a7:
                    2e:af:b6:dd:c7:df:7e:c5:06:10:e9:13:e0:4f:e4:
                    af:82:c2:55:7e:7d:ab:e7:c1:4e:f7:49:75:0e:1b:
                    f5:51:99:10:31:57:94:32:28:5f:90:1b:c3:b5:0c:
                    67:cd:ff:d1:58:19:b6:6c:34:60:7e:70:ff:83:d1:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:98:7E:DD:D9:4C:78:6D:E3:45:3D:F8:9C:12:FF:24:DD:06:E5:7A
            X509v3 Authority Key Identifier:
                keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f1:91:2a:38:5d:b4:c6:e5:73:cb:3f:44:2b:93:6c:fe:09:
         8e:0f:bc:2c:fb:4c:34:88:c5:59:cf:87:0d:d1:e7:f5:b2:32:
         74:77:c1:f9:bb:96:54:22:56:c9:8b:cf:89:69:43:f9:e7:f1:
         a3:01:69:e8:59:4b:28:7b:05:72:70:6b:9a:b7:cd:04:64:16:
         ed:0e:ba:36:45:5d:df:75:a4:6b:75:af:f4:ef:20:f9:66:e0:
         9f:7b:95:f6:50:ad:9e:da:22:89:38:2d:50:aa:25:8e:fd:e5:
         65:aa:6b:37:7b:18:bd:8d:e1:13:af:1e:82:0e:68:40:7c:2a:
         20:88:1e:5e:73:d0:15:df:1a:fd:38:7a:c6:7e:33:f1:45:69:
         87:b7:15:ac:09:4f:37:97:63:c4:93:b5:9a:48:36:c9:d1:50:
         6b:7f:3a:5a:0c:86:58:e6:68:a9:4e:fc:31:78:a6:b1:c2:e8:
         97:58:0f:4e:20:4d:9a:21:97:9f:a2:04:5b:0d:8c:85:22:a5:
         a0:32:2d:4d:c8:bc:ce:57:40:45:f1:cc:91:e7:b7:dd:9b:f7:
         f4:4a:2e:ff:ba:6a:34:f4:e2:59:6b:b6:2d:ea:2f:eb:d6:96:
         cd:9e:35:d3:f4:0c:a3:f6:43:20:0d:ac:24:72:af:db:c8:f3:
         b4:d2:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:20 2026 by rpki-client