Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          6DyBtlNrMDxyQLMXNMpG6lXUkH3cUsJZ2P5UdBbL7/E=
Subject key identifier:   50:EF:5C:9F:92:DF:12:04:AE:AE:7E:34:CA:3D:D1:9D:A6:1F:17:D9
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       019CB05AAA8FF148B1D3A4BD05017FE0FD82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 21:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 21:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 21:00:57 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: ZW9JPL6DAAqVAR6iUnMgc7ST5HElyK63Rx4JKGOitIc=)
                          2: Zs-v1rw9g1MYTe4z_xC60lFfzak.roa (hash: gDQsejW5I6NwbA9XiA+PvZS2jChO/DirRuBkqy+plZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:5a:aa:8f:f1:48:b1:d3:a4:bd:05:01:7f:e0:fd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Mar  2 21:00:57 2026 GMT
            Not After : Mar  3 21:00:57 2026 GMT
        Subject: CN=50ef5c9f92df1204aeae7e34ca3dd19da61f17d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:52:1c:e1:d8:b6:83:6c:b0:cc:d7:41:32:
                    4d:5a:73:41:1c:93:66:d3:56:50:c1:36:76:ca:f2:
                    15:8d:3e:9a:4f:78:19:09:8f:ea:de:d4:dc:53:9e:
                    90:20:8e:47:54:e1:c5:d2:17:e0:16:f9:fd:d2:9c:
                    79:57:06:56:d4:2c:3c:50:b1:1a:c1:11:6e:f7:30:
                    87:d6:a4:39:42:79:6f:fc:55:ef:74:93:3d:22:e3:
                    bc:e2:d4:4a:4c:34:3b:b1:ba:55:3e:ef:a4:af:6f:
                    8f:92:e5:de:03:d3:8d:25:01:76:db:c5:92:7a:68:
                    d7:d8:51:87:be:4e:1f:b5:0c:26:13:64:48:03:6c:
                    4c:bb:08:6c:b5:b7:b0:00:06:34:df:03:b0:a4:62:
                    a8:3d:a3:02:83:e1:82:37:b9:eb:a0:41:f4:9b:fe:
                    64:c4:18:7a:6d:08:59:e8:63:28:eb:70:9c:2e:5e:
                    99:0d:57:d9:0c:95:63:cb:b8:6d:4c:bd:7b:ee:5a:
                    7f:be:3c:03:d0:6c:62:77:6f:d8:41:cb:d5:42:cb:
                    31:02:0e:24:44:80:c2:b3:57:53:2e:12:b7:53:a2:
                    1c:c0:52:3d:f2:c2:b4:2f:75:a1:a8:3b:74:c3:93:
                    b9:bc:57:c9:b0:1e:0c:e3:18:3e:0d:37:bc:30:bc:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EF:5C:9F:92:DF:12:04:AE:AE:7E:34:CA:3D:D1:9D:A6:1F:17:D9
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:29:06:50:e2:3b:b5:30:a2:bf:9e:60:a7:86:11:db:5a:2d:
         9c:d6:b4:71:4f:e6:cb:57:69:e0:dd:54:12:bd:af:41:60:6e:
         d5:d9:cf:43:ca:e4:20:82:dc:f6:3f:eb:90:3a:c9:c4:5b:1b:
         b3:6f:3f:82:98:94:2f:15:b7:e1:06:54:89:06:04:b4:0e:0b:
         66:05:71:23:25:a0:51:2c:38:0c:a0:65:2e:af:11:a4:01:90:
         5a:45:69:e8:07:3a:b4:47:18:c3:4f:15:cd:a3:07:e8:5b:ae:
         cc:b0:f2:49:76:6c:6f:50:d8:7d:12:0f:cd:7a:3b:2d:ec:93:
         fe:f4:11:a5:38:de:88:9a:02:ad:0e:35:34:d0:a5:d5:72:2b:
         fe:f0:dd:57:c2:12:e0:36:22:48:32:63:5f:70:2c:d0:a1:dd:
         09:c5:18:8a:4f:2a:ba:1c:f2:df:80:d3:3f:2d:61:8b:d2:64:
         0b:52:0d:4e:16:4a:e3:57:ad:91:b3:fd:6a:60:08:a6:8d:fa:
         2d:66:f4:c7:e5:a2:2a:bc:fd:8b:39:5c:1f:08:d0:c7:d6:ec:
         11:44:bc:8e:6e:b0:bd:ff:17:f1:2b:2d:d1:98:1c:2f:8d:8d:
         51:85:0b:08:97:15:92:51:1f:b5:7d:89:c2:4b:f8:77:54:c7:
         31:ff:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:40:27 2026 by rpki-client