Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          v8R5zsl4+pntrg8X8hoBLLR+6Cu3PMfcBS84beiS+Jo=
Subject key identifier:   E0:AA:0D:61:80:8C:E7:71:CB:22:38:68:20:ED:7B:75:1C:6C:96:3D
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       019CABD93C4C57E28E842A5BDC9193F835B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 00:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:06 +0000
Files and hashes:         1: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: w8ljWXgavBu7uNdBYId5zhach43sYil3RZs5N97AKMw=)
                          2: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
                          3: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
                          4: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
                          5: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
                          6: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
                          7: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:3c:4c:57:e2:8e:84:2a:5b:dc:91:93:f8:35:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Mar  2 00:01:06 2026 GMT
            Not After : Mar  3 00:01:06 2026 GMT
        Subject: CN=e0aa0d61808ce771cb22386820ed7b751c6c963d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:82:83:34:38:c5:7c:c4:bf:7f:b1:f1:99:
                    8b:ec:e3:95:97:69:7a:08:8d:2f:58:0b:cc:19:af:
                    14:39:0c:86:16:eb:ff:8a:8a:03:e5:ef:f2:0a:e3:
                    9a:7f:4d:ee:a4:07:b9:2b:0b:ca:f4:d3:44:51:a8:
                    28:2f:20:7f:08:40:81:40:8e:b7:77:a0:98:a0:b0:
                    96:df:a7:c3:5b:03:03:62:46:24:cf:aa:91:16:de:
                    f1:9f:27:52:7f:71:6c:d1:5c:38:b0:d0:0b:54:a7:
                    22:41:75:63:57:10:12:e9:17:2d:17:63:16:7d:84:
                    87:e9:b2:75:9c:b5:0d:f5:33:88:bc:7c:3b:f0:1e:
                    87:41:e2:4e:7c:6a:14:91:06:c1:45:3f:65:c3:d4:
                    e9:83:a1:4b:ac:ab:4b:a2:00:eb:5d:8b:b9:c8:c3:
                    d3:44:7b:5d:93:16:45:ee:7f:45:62:e3:47:5d:48:
                    94:e2:51:05:e0:d4:c5:d7:32:dd:70:0f:89:cb:0a:
                    fc:af:2b:fd:3f:fc:b6:cc:01:1f:62:47:14:85:4f:
                    9d:84:67:95:dd:2a:44:0f:30:04:65:5a:f5:92:0f:
                    0c:c8:98:a6:c7:12:8a:e9:45:85:01:92:01:90:62:
                    c0:31:b7:02:d9:df:3d:d8:f5:44:5d:5d:8a:9e:f9:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AA:0D:61:80:8C:E7:71:CB:22:38:68:20:ED:7B:75:1C:6C:96:3D
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:b9:1b:aa:bd:7a:a9:4b:c0:a6:3b:0b:8c:b3:9f:69:83:
         a4:ca:a2:73:87:31:ae:23:42:1a:80:89:84:1a:45:f9:f8:2b:
         9d:13:20:bd:5b:19:fd:66:10:98:cd:d1:3d:3d:c1:ec:b8:e1:
         61:11:7b:03:7e:43:3f:78:6f:b7:31:9d:54:1e:b9:24:f2:56:
         64:00:d2:8a:03:6b:1e:d9:00:f0:dd:b6:b3:e9:cb:49:0a:1d:
         88:00:f5:68:b6:e1:e6:85:dc:08:0c:5c:32:fe:90:1c:87:5d:
         45:68:74:01:17:7c:82:4a:28:58:33:fe:5b:31:6f:32:4b:63:
         54:d5:5b:f8:0a:b5:03:1d:20:62:78:c7:fd:3a:8e:d9:83:cc:
         fb:0f:25:65:41:4f:2b:06:3e:13:ea:d3:3f:a4:c5:0b:f0:df:
         6c:48:4d:d0:30:d4:3f:53:30:87:8c:eb:cc:ac:da:fb:4b:cc:
         65:fe:72:bc:cd:da:0e:7b:d1:0d:56:55:27:4c:11:03:82:65:
         99:bb:54:b4:79:7e:57:e2:01:a5:d6:03:1d:de:72:eb:05:65:
         b9:f7:4b:0a:78:1c:f7:07:c3:10:d5:ea:cf:d0:c5:86:60:84:
         e4:f6:19:72:6a:93:b1:eb:9f:f9:fb:9f:28:a2:09:e9:f4:6f:
         4e:f6:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:35:33 2026 by rpki-client