Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File:                     cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier:          NIYO/rPGQ8v43WPJgxD6bqp3AnjVwiwsjptdvcbQkjY=
Subject key identifier:   2F:0B:96:32:14:0D:8F:29:16:47:0E:FD:06:6F:79:6E:DF:0F:B2:76
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer:       /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial:       019D382E144E2C48A2EB4935EAFC734BC0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 06:00:37 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:37 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:37 +0000
Files and hashes:         1: BYGANzLgHzSaUc6K7ae41nnbLMw.roa (hash: AJMi9HENlmzpAiYF/4FsTemXgQje3J6PHtaGAU4r+0I=)
                          2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: mSrkQR5lthH+1n2EGF7WsLIUzd4w9BhrvZW/Ie+dbgY=)
                          3: d0cD2OQNwvBbl6ZoayOyhKGW84E.roa (hash: 0hRHMR3AECHRvpDLm6VnO82EHkZj8wfWxDmhhkfMCS8=)
                          4: nTbT18OCDUNW4azZC3MKOG8N8oE.roa (hash: ShlwcG/vZJL5OcI4En0cgO+lRO+Afw70u3xxHsMil/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:14:4e:2c:48:a2:eb:49:35:ea:fc:73:4b:c0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
        Validity
            Not Before: Mar 29 06:00:37 2026 GMT
            Not After : Mar 30 06:00:37 2026 GMT
        Subject: CN=2f0b9632140d8f2916470efd066f796edf0fb276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:f2:53:7f:ff:06:24:96:5d:37:a6:c6:3e:
                    ca:9c:17:b2:38:c5:b5:e3:84:16:26:a4:81:2a:f8:
                    00:56:d9:9a:c6:ad:8b:37:e0:ee:ae:57:05:46:5c:
                    36:1b:58:4f:b4:ad:aa:3d:19:35:db:a7:af:ff:b2:
                    6d:b0:ca:cd:be:35:ff:1d:a7:03:ff:99:bb:e8:d2:
                    b0:c6:5a:82:f5:d2:77:a7:f5:b7:b5:e3:fc:78:9e:
                    5b:99:db:11:77:45:af:54:1f:63:f4:ba:34:b4:f1:
                    34:54:ab:ee:f5:60:ff:be:c8:09:36:92:a4:26:cc:
                    f1:4e:97:5b:5c:13:fa:97:60:84:40:ef:38:0c:97:
                    2c:bc:a8:4e:07:62:6e:a2:6c:40:a6:de:b5:52:00:
                    50:86:a0:de:cd:cb:c4:17:20:13:be:49:7d:25:14:
                    a9:0f:08:f0:bb:73:02:f9:7b:d2:aa:1d:72:b8:48:
                    a5:dc:8a:03:22:81:ff:2a:fa:a0:bf:3c:de:83:e6:
                    ef:91:7a:c3:89:6c:71:e3:39:1e:45:58:ef:6f:f8:
                    0c:c6:94:ef:80:7e:2c:4b:ad:9d:80:c0:d7:13:34:
                    3b:17:45:86:1c:ac:c0:7b:01:67:42:0a:f2:01:61:
                    28:95:78:38:a3:dd:e6:5d:95:69:25:a1:e3:b2:78:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:96:32:14:0D:8F:29:16:47:0E:FD:06:6F:79:6E:DF:0F:B2:76
            X509v3 Authority Key Identifier:
                keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ab:01:03:7f:69:34:1a:f7:ce:2f:52:80:6a:bd:c4:82:64:
         66:37:88:8a:5a:c0:56:6f:f6:a9:cf:bd:65:48:a0:e0:f4:c7:
         d6:f3:83:a8:15:bd:a9:60:15:de:bc:a7:4a:e7:5a:36:b4:39:
         94:f7:77:f6:ad:06:70:68:b3:8c:b7:27:89:a8:f7:94:6d:4b:
         82:09:5f:d8:d0:e1:7c:c0:2b:aa:c4:2a:bf:bb:98:b5:2b:19:
         4f:49:90:00:ab:b3:6a:4c:2e:3f:ed:e3:b0:9d:9a:ab:d7:09:
         8b:68:9c:1d:d7:9a:3d:0d:d1:a3:ae:9c:35:5b:14:9f:b4:68:
         7f:16:d1:7e:7b:29:52:da:89:f0:8d:08:e7:59:f3:f4:b5:c4:
         ab:ff:cf:51:3d:83:e1:a2:50:e5:87:bd:86:d2:11:ef:51:56:
         bf:fb:0e:77:de:2e:a3:ce:d8:c2:e3:4a:42:a0:da:ad:45:14:
         b0:38:a3:66:4d:d7:39:7c:be:ee:fc:6a:8d:db:a0:65:a4:c4:
         ea:0b:0c:6a:ae:f9:da:6c:5f:a0:ca:38:b9:ba:fb:bf:e9:cb:
         d8:0f:20:41:fe:d7:45:53:45:77:a5:c6:19:c0:e5:85:53:b6:
         d1:b5:77:e4:16:9d:68:d1:f1:7f:5c:11:50:23:9a:15:69:f8:
         2d:0c:00:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhROLEii60k16vxzS8DmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjVkOWVlZWZhMzA1YWVjYWVlMzFlNmZjYjRlMjIzMjFi
MjgwNGEwHhcNMjYwMzI5MDYwMDM3WhcNMjYwMzMwMDYwMDM3WjAzMTEwLwYDVQQD
EygyZjBiOTYzMjE0MGQ4ZjI5MTY0NzBlZmQwNjZmNzk2ZWRmMGZiMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfnyU3//BiSWXTemxj7KnBeyOMW1
44QWJqSBKvgAVtmaxq2LN+DurlcFRlw2G1hPtK2qPRk126ev/7JtsMrNvjX/HacD
/5m76NKwxlqC9dJ3p/W3teP8eJ5bmdsRd0WvVB9j9Lo0tPE0VKvu9WD/vsgJNpKk
JszxTpdbXBP6l2CEQO84DJcsvKhOB2JuomxApt61UgBQhqDezcvEFyATvkl9JRSp
Dwjwu3MC+XvSqh1yuEil3IoDIoH/Kvqgvzzeg+bvkXrDiWxx4zkeRVjvb/gMxpTv
gH4sS62dgMDXEzQ7F0WGHKzAewFnQgryAWEolXg4o93mXZVpJaHjsnhtiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8LljIUDY8pFkcO/QZveW7fD7J2MB8GA1UdIwQY
MBaAFHD12e7vowWuyu4x5vy04iMhsoBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYt
YTU3MDM1NzkyZTU3LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYtYTU3MDM1NzkyZTU3
LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqsBA39p
NBr3zi9SgGq9xIJkZjeIilrAVm/2qc+9ZUig4PTH1vODqBW9qWAV3rynSudaNrQ5
lPd39q0GcGizjLcniaj3lG1Lgglf2NDhfMArqsQqv7uYtSsZT0mQAKuzakwuP+3j
sJ2aq9cJi2icHdeaPQ3Ro66cNVsUn7RofxbRfnspUtqJ8I0I51nz9LXEq//PUT2D
4aJQ5Ye9htIR71FWv/sOd94uo87YwuNKQqDarUUUsDijZk3XOXy+7vxqjdugZaTE
6gsMaq752mxfoMo4ubr7v+nL2A8gQf7XRVNFd6XGGcDlhVO20bV35BadaNHxf1wR
UCOaFWn4LQwA3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:15 2026 by rpki-client