Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File:                     4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier:          5kPH7O2z/JSjsAzFvvFd/CVbG6vdvxy8IIO0BLVUp5w=
Subject key identifier:   E1:F2:72:3E:AC:F3:18:5C:C0:1E:3F:0C:92:DD:9C:01:B3:3E:BF:9C
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer:       /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial:       019CECDD204AFBE687CBB4654414B1F9E92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number:          186C
Signing time:             Sat 14 Mar 2026 15:00:40 +0000
Manifest this update:     Sat 14 Mar 2026 15:00:40 +0000
Manifest next update:     Sun 15 Mar 2026 15:00:40 +0000
Files and hashes:         1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
                          2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: hmw9n7mLMZiNTos0kPyen1UYc73NzoWidMd47ow0Yh4=)
                          3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ec:dd:20:4a:fb:e6:87:cb:b4:65:44:14:b1:f9:e9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
        Validity
            Not Before: Mar 14 15:00:40 2026 GMT
            Not After : Mar 15 15:00:40 2026 GMT
        Subject: CN=e1f2723eacf3185cc01e3f0c92dd9c01b33ebf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:b5:42:82:ce:76:59:4a:f4:ab:c8:70:12:
                    7c:61:bc:ea:4a:49:b6:b4:49:f2:1a:5f:fc:d6:e7:
                    a9:9b:28:9d:60:05:e6:0b:de:f5:7e:9c:95:22:98:
                    cc:76:3c:4b:4c:78:3b:8c:09:2e:95:58:aa:29:40:
                    b9:b9:58:1d:eb:7a:29:87:95:c2:5f:54:b2:9f:3d:
                    80:49:0d:21:d2:03:f6:f0:fb:07:60:2a:b3:bd:13:
                    63:c9:af:65:01:8a:c4:b6:04:fd:e4:3a:91:b5:a0:
                    de:13:5d:a2:48:b7:84:12:3b:6c:0e:52:be:71:e8:
                    0b:48:11:83:4b:98:af:0c:b7:8f:61:70:87:4a:1a:
                    ba:2b:cf:f5:fb:02:a3:ec:68:94:6a:6d:e8:8b:cb:
                    11:b1:7a:c4:bd:2d:9d:7d:6f:9f:18:e3:f1:1c:db:
                    44:65:cd:7a:02:ec:6c:d0:8c:bc:55:cf:cc:6c:44:
                    ca:33:88:f0:d3:93:d4:18:74:8e:cf:ce:1b:5e:5e:
                    3e:f7:06:6d:1b:72:fc:72:dd:90:bd:75:c9:c5:47:
                    ac:d6:52:03:aa:3b:0a:7c:a9:02:69:45:ca:45:ce:
                    d5:bb:e2:3b:94:11:ae:e3:ed:ef:c6:c2:52:9c:35:
                    bd:e5:31:5b:17:1a:34:a3:9e:4c:ca:56:2a:a3:f8:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:72:3E:AC:F3:18:5C:C0:1E:3F:0C:92:DD:9C:01:B3:3E:BF:9C
            X509v3 Authority Key Identifier:
                keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:f9:6a:87:2a:14:f4:c3:81:43:c5:7d:77:4c:8e:29:f4:
         9d:46:fc:d8:12:80:2e:f4:bd:0f:17:95:f0:de:6b:ab:e0:d9:
         d5:e8:c6:81:9a:9a:05:bf:da:90:d8:67:5e:c7:30:c4:c1:de:
         31:94:32:34:dd:49:6b:12:7a:87:08:98:60:d2:9a:3e:39:9f:
         4b:50:93:81:61:e3:c5:d1:eb:07:f7:60:ed:15:3b:92:59:5e:
         f7:55:01:dc:f6:c6:72:11:15:df:02:84:6d:08:08:17:4a:3e:
         d5:5c:bb:d1:b8:2c:29:19:d6:a8:f0:40:c7:21:99:59:87:a7:
         13:dc:b9:d9:d5:36:72:e8:2e:57:06:a3:9b:73:dc:e9:c0:4d:
         e4:1d:57:36:f8:b2:28:31:3b:78:93:51:20:95:5b:42:36:ac:
         61:a2:7c:00:78:8e:48:8d:b6:a6:e4:d5:6e:0a:74:12:07:ce:
         a2:bb:ad:2e:5d:8d:76:f7:84:2a:6d:90:c4:85:50:a2:72:f6:
         9b:e6:16:b8:e6:0a:12:b5:3f:5e:14:2e:46:a0:23:e8:d2:0f:
         bb:ff:cb:35:49:36:ef:92:f3:75:29:a2:40:9d:73:1d:07:d8:
         db:ff:56:1a:e3:80:be:b2:cd:24:ca:da:2d:56:74:0a:91:99:
         b0:5b:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:17:39 2026 by rpki-client