Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File:                     9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier:          XYOzXJsHfNsMYfIgC7b7Dp0eYboKs1cW6zSPW3rOEsc=
Subject key identifier:   81:B5:A6:D1:24:AC:61:D6:46:D8:B4:2E:4E:ED:17:F2:CA:FE:7D:46
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer:       /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial:       019D1534C5111A6B97D23AF6CC67EAAEEF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number:          187D
Signing time:             Sun 22 Mar 2026 11:01:12 +0000
Manifest this update:     Sun 22 Mar 2026 11:01:12 +0000
Manifest next update:     Mon 23 Mar 2026 11:01:12 +0000
Files and hashes:         1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: RgXZpE+apyVDExa9NoFGz6lrN8mtjTacnqy3XavRNe0=)
                          2: UKATPR0b1kY7oFPVkZYEepDy3LY.roa (hash: CrwvVmRRQkszz0pHbbKO1FTUZbPyR5yvt9U+ujLmXCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:15:34:c5:11:1a:6b:97:d2:3a:f6:cc:67:ea:ae:ef:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
        Validity
            Not Before: Mar 22 11:01:12 2026 GMT
            Not After : Mar 23 11:01:12 2026 GMT
        Subject: CN=81b5a6d124ac61d646d8b42e4eed17f2cafe7d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:9e:c9:ba:d5:45:03:b8:32:90:41:e8:8c:
                    ce:41:f3:20:56:dc:b5:0f:5d:4c:a4:95:6b:c0:f7:
                    a2:8a:be:08:90:b4:e8:be:b5:e0:02:86:e0:49:38:
                    c9:da:94:f0:d9:fa:2f:29:6f:65:fc:4b:1f:98:70:
                    84:08:3c:e1:4d:12:e3:da:5c:2f:50:71:31:86:bb:
                    1a:b1:2d:4b:6c:7d:d1:f3:21:98:cf:a3:71:c8:6c:
                    3d:e3:57:db:93:99:eb:fa:94:a7:6a:72:35:29:3f:
                    aa:f8:bd:ff:62:0d:05:f9:bd:e5:14:95:73:dc:66:
                    9f:a9:3e:72:da:bb:77:d3:f7:b6:73:62:05:73:f8:
                    88:6f:b9:e0:f6:f6:6a:c4:b6:71:d2:44:e4:11:ce:
                    fb:fd:e4:6c:45:6c:88:d9:1d:28:e7:87:00:04:69:
                    f0:ff:c6:91:16:83:cf:df:f7:45:a7:d5:dd:8e:af:
                    f7:52:e1:2a:29:e2:46:3b:61:7a:4d:8d:c7:ad:c6:
                    06:18:6f:0d:98:48:86:7e:16:22:4a:29:90:c1:c2:
                    73:64:07:a3:e2:39:e9:d8:4d:77:94:e6:69:b9:a5:
                    9b:7a:8e:1e:9c:e0:e8:c5:a6:e3:dc:52:ed:35:4a:
                    2b:da:dc:cb:97:4b:f5:6b:b9:f4:cb:eb:6b:d1:94:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B5:A6:D1:24:AC:61:D6:46:D8:B4:2E:4E:ED:17:F2:CA:FE:7D:46
            X509v3 Authority Key Identifier:
                keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a0:9b:cd:70:6a:3b:be:aa:2b:7f:bc:8b:e7:1a:7c:6e:3b:
         3f:78:11:40:0c:23:ab:4a:19:81:16:db:8f:c5:00:89:b2:62:
         00:96:30:4c:fb:c9:3a:2a:36:34:d7:20:9f:1f:e4:65:4c:59:
         80:19:87:dc:11:a9:82:c0:dd:a0:6f:5f:26:a5:07:01:dd:de:
         37:84:14:27:fd:b6:e9:83:ef:44:01:d6:81:d9:7f:32:e3:cc:
         a5:3e:3a:7d:86:50:28:a2:df:1a:29:e5:17:3c:75:35:59:03:
         9c:fc:ae:48:00:a2:ce:97:ae:61:b4:c5:24:5b:8e:0e:0a:ce:
         da:7f:97:b5:fe:84:3c:2d:8a:20:eb:f9:7e:aa:c5:93:db:0b:
         07:8d:82:31:66:0d:e3:bb:aa:92:85:6a:1f:94:52:91:c8:f5:
         17:0d:f4:25:e5:ee:cf:00:dd:bf:31:e2:c9:91:bb:01:7f:92:
         dd:e4:1b:68:be:23:7d:98:81:b0:85:7b:cd:c7:df:f2:de:43:
         e3:f5:1c:35:b2:b4:74:96:de:6e:03:23:34:8d:1b:0e:03:7f:
         15:29:59:fa:6e:ff:0b:93:8f:9d:52:79:c3:0d:57:9b:5b:c3:
         4b:ac:31:43:bf:7a:65:eb:3b:5f:ea:a7:18:15:b5:f1:63:43:
         e5:9f:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 18:59:06 2026 by rpki-client