Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          aqzkSWwTXjP8xpugg4UNfQt5B3vg9pnCtuSoQfxoKTI=
Subject key identifier:   9B:17:6C:CA:32:46:DD:30:D8:AB:84:0D:99:B3:66:8A:41:B0:56:06
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       019CAB344E8EADE320893BA27BC80E83FE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          185A
Signing time:             Sun 01 Mar 2026 21:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:57 +0000
Files and hashes:         1: 3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa (hash: nrPCTtkuQDIcy3WjV2PDeyqXdxGsNrOVS6dTe/yokSw=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: kTUpjpALveNO6Gee+4BGL2cC5tNsz1zJchlNR0eK06M=)
                          3: X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa (hash: L/kFEnNplgovPacWJl2tFaydAgsY/9Zn113PwxIDUis=)
                          4: ZH-fOKhfhXtTvq5cNeuUVWkcFIQ.roa (hash: 2xvhce+amLHD9b2VUMk2z7GO/hZOLwWwWRJLNXmF+4g=)
                          5: u9ivcp0Mnia0HnQ0D4IzKd6ABQI.roa (hash: 7vFIT7RVuGNWtyZo6py9uIoAR5B/gd1YarQbs2RvWTM=)
                          6: ue1ofATco1WyASgglUMXvaTcbAA.roa (hash: 7NG4eNgD3uRpxbInL8ONmLKALYMO6RfhX+P8iMxG0cg=)
                          7: w7bLCCx1wCzEhIJTLJSgrAAyI94.roa (hash: xKotcxgu+SFt13dTwTupn3pf3OXdH+smODfsZIVeV0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:4e:8e:ad:e3:20:89:3b:a2:7b:c8:0e:83:fe:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Mar  1 21:00:57 2026 GMT
            Not After : Mar  2 21:00:57 2026 GMT
        Subject: CN=9b176cca3246dd30d8ab840d99b3668a41b05606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:59:c2:90:8d:7a:85:7d:a1:55:e1:3d:c7:
                    25:80:e6:8c:85:61:6d:5a:7b:d4:b7:03:a0:91:d5:
                    06:04:a9:1e:48:b1:b6:d9:ca:87:db:45:b6:cf:ec:
                    f6:fb:9d:46:7c:9e:e3:5f:ca:b2:88:c3:eb:7f:3e:
                    80:5f:f1:3e:05:d2:04:98:a7:0c:fc:1c:a3:c4:3a:
                    23:33:d1:69:98:92:ca:5e:fe:cf:21:8c:38:5c:67:
                    66:db:51:71:07:d6:1c:a1:6f:0b:49:d1:3c:58:f9:
                    b3:c6:70:5e:95:1c:61:13:ff:d2:d3:d6:fc:ef:1e:
                    b7:d9:f7:8d:ec:c3:b1:30:37:f0:9d:9a:02:c6:07:
                    0c:0b:b6:90:57:f1:09:71:9f:fb:64:6d:82:85:79:
                    4f:e3:84:89:a7:30:dc:12:c5:5e:6c:b0:2b:14:f6:
                    d7:ac:37:01:ba:b5:a3:63:a0:76:67:b8:6c:23:15:
                    32:86:90:bb:4e:76:7a:38:49:c0:52:99:9f:42:96:
                    74:fa:53:28:01:ab:9e:45:e7:e3:7d:6f:fc:cd:56:
                    fb:a3:05:bb:ab:3e:bb:7d:98:74:46:ec:58:cf:cb:
                    b2:06:b4:18:42:93:70:e2:a8:77:7f:5d:cb:40:64:
                    34:4a:f1:4e:fa:54:e1:da:45:2c:e3:df:cb:bc:f0:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:17:6C:CA:32:46:DD:30:D8:AB:84:0D:99:B3:66:8A:41:B0:56:06
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:40:5e:3a:f0:d6:10:d1:64:48:ef:13:93:70:1d:af:8c:
         44:eb:c9:ee:2e:e9:b2:e3:80:9e:8b:4a:1e:fa:03:e0:38:7f:
         0f:9e:ec:2d:d1:12:9d:2c:a5:f0:ea:6a:62:cb:10:8a:5f:78:
         2b:d7:cd:93:82:c3:b1:3b:e1:7f:b6:45:98:b8:d4:35:2e:e2:
         9c:4f:42:09:ea:a2:d1:e4:41:9c:17:ff:05:b5:01:53:73:2d:
         60:e8:36:78:57:b8:0d:e4:ea:ed:48:56:cf:2c:36:d1:0b:10:
         fa:0d:51:bd:8c:db:ef:7c:fa:39:a1:cc:e1:98:37:89:a3:a6:
         7b:09:d3:83:ba:ed:ac:71:61:37:23:57:fd:93:b8:e8:15:e9:
         0c:7f:4e:f8:8b:90:d9:df:5e:f0:ef:8a:6a:18:b5:91:78:96:
         a9:0e:94:e0:da:a9:0c:98:cd:91:74:13:c6:b1:26:cc:0c:a6:
         0f:fb:69:bf:5e:cf:1c:dd:15:77:0f:29:85:34:e9:b2:2e:bb:
         ac:c3:b0:2d:3a:cb:9a:b3:df:c3:71:ef:90:46:73:1d:61:b2:
         55:6c:3b:e5:8c:31:48:78:fc:e8:a8:2c:97:a0:0a:79:3a:c9:
         c1:c0:6f:39:98:b5:3a:38:14:8a:3d:f3:b2:42:ba:96:e9:f8:
         8c:63:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:53 2026 by rpki-client