Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          j9kevu24+t6UsGAS1QblnZ7yo4khnHp6htUIp1Lusqo=
Subject key identifier:   3E:35:1B:62:FF:D2:15:50:D8:7F:E8:6B:78:30:74:81:99:F1:27:8D
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019D12D87287CB2631F1384F0A06384B3838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          187E
Signing time:             Sun 22 Mar 2026 00:01:08 +0000
Manifest this update:     Sun 22 Mar 2026 00:01:08 +0000
Manifest next update:     Mon 23 Mar 2026 00:01:08 +0000
Files and hashes:         1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: sFUl+yYBcWTOmoHGA54iPPlR5v7YzhUOG5y0ELPE9zs=)
                          3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=)
                          4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=)
                          5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=)
                          6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:12:d8:72:87:cb:26:31:f1:38:4f:0a:06:38:4b:38:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Mar 22 00:01:08 2026 GMT
            Not After : Mar 23 00:01:08 2026 GMT
        Subject: CN=3e351b62ffd21550d87fe86b7830748199f1278d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:98:47:af:3e:f3:7e:15:33:b6:5c:ea:0f:
                    e0:9d:e1:6d:ae:0c:dc:42:7a:5e:54:5e:50:3d:e5:
                    3f:90:90:4c:b4:3a:76:99:64:1d:13:f8:30:95:da:
                    48:cd:fe:f8:81:c1:44:c2:11:98:59:c0:4f:cc:99:
                    cd:6e:b2:99:c2:e1:f6:5d:c9:15:50:e0:1c:f7:95:
                    13:34:28:e4:5b:03:c5:7a:59:a7:19:c6:7a:04:00:
                    cb:19:8e:e8:90:96:19:e3:d4:db:a0:99:2f:0f:25:
                    bf:53:8f:3d:8e:9f:31:fe:80:2e:7a:98:69:01:f2:
                    3e:e3:79:d7:c9:34:f7:0a:49:7e:1c:0e:78:9a:d9:
                    1d:d3:44:2a:24:81:7f:4f:50:51:b8:23:a0:06:03:
                    90:d8:1e:15:e5:c7:23:2b:92:50:a5:e2:6f:4b:b8:
                    fc:cb:9f:d2:d4:13:f4:c8:1d:7f:08:e0:7d:0f:4f:
                    b5:7e:82:bb:8d:61:75:15:85:af:40:5f:67:a3:c9:
                    6e:3f:d3:69:49:ed:b2:23:41:f4:99:95:40:9e:b7:
                    b1:27:3f:eb:bb:ff:3a:c8:1f:e1:3a:4f:6d:12:3f:
                    9b:dd:1a:db:97:6e:76:67:15:bb:1d:f2:2c:1f:ea:
                    29:de:d3:2c:21:d9:c9:93:ba:82:d6:c2:b4:6f:04:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:1B:62:FF:D2:15:50:D8:7F:E8:6B:78:30:74:81:99:F1:27:8D
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:44:35:0e:65:f8:9b:a7:70:f3:19:0e:a7:30:c4:a0:e0:89:
         f8:64:61:6e:72:95:be:c3:23:81:ca:a7:35:90:1b:73:b5:2e:
         ad:31:78:b0:2c:41:d8:e3:2f:59:38:7d:72:e0:7d:8e:db:6a:
         cf:d4:3f:51:d0:23:06:21:88:91:03:64:bf:6f:92:65:c0:37:
         8c:38:ac:ef:96:22:ed:df:1b:55:00:52:e2:f0:b5:e1:45:bb:
         45:23:0b:9a:cd:da:78:6c:e8:0f:fb:44:88:d7:e6:91:ca:38:
         00:1e:53:bc:ef:4f:39:af:39:68:a6:38:85:c8:e1:d6:7f:2e:
         1e:9a:df:48:d5:f7:97:2d:b2:ba:c7:fb:c9:26:82:72:50:61:
         11:f0:31:6d:a1:7f:34:5c:73:1c:7f:67:79:da:ea:b6:99:7f:
         31:48:12:8e:3c:16:ad:f4:68:f2:87:78:96:c1:ee:a5:0f:7b:
         3e:28:53:94:1c:73:97:27:b1:06:5c:0e:3a:b6:77:2f:78:e0:
         08:9b:38:b3:25:a9:f7:b1:9a:83:f9:7b:8f:de:51:79:ce:44:
         d4:4b:80:d6:4e:63:7a:5d:a7:bb:9d:a7:9e:92:b2:db:27:e8:
         81:9e:7f:a8:26:94:d7:5b:7e:e9:b9:c1:b2:4d:0e:89:e7:8e:
         b4:00:19:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0S2HKHyyYx8ThPCgY4Szg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmM2ZTQ1MTgxZDgzOWZkMTBlNGE5MDI3NjJmMjZjOWE2
NDY3OTYwHhcNMjYwMzIyMDAwMTA4WhcNMjYwMzIzMDAwMTA4WjAzMTEwLwYDVQQD
EygzZTM1MWI2MmZmZDIxNTUwZDg3ZmU4NmI3ODMwNzQ4MTk5ZjEyNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgaYR68+834VM7Zc6g/gneFtrgzc
QnpeVF5QPeU/kJBMtDp2mWQdE/gwldpIzf74gcFEwhGYWcBPzJnNbrKZwuH2XckV
UOAc95UTNCjkWwPFelmnGcZ6BADLGY7okJYZ49TboJkvDyW/U489jp8x/oAuephp
AfI+43nXyTT3Ckl+HA54mtkd00QqJIF/T1BRuCOgBgOQ2B4V5ccjK5JQpeJvS7j8
y5/S1BP0yB1/COB9D0+1foK7jWF1FYWvQF9no8luP9NpSe2yI0H0mZVAnrexJz/r
u/86yB/hOk9tEj+b3Rrbl252ZxW7HfIsH+op3tMsIdnJk7qC1sK0bwS2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD41G2L/0hVQ2H/oa3gwdIGZ8SeNMB8GA1UdIwQY
MBaAFNj8bkUYHYOf0Q5KkCdi8myaZGeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjIt
N2ViMmViODViODRhLzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjItN2ViMmViODViODRh
LzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkQ1DmX4
m6dw8xkOpzDEoOCJ+GRhbnKVvsMjgcqnNZAbc7UurTF4sCxB2OMvWTh9cuB9jttq
z9Q/UdAjBiGIkQNkv2+SZcA3jDis75Yi7d8bVQBS4vC14UW7RSMLms3aeGzoD/tE
iNfmkco4AB5TvO9POa85aKY4hcjh1n8uHprfSNX3ly2yusf7ySaCclBhEfAxbaF/
NFxzHH9nedrqtpl/MUgSjjwWrfRo8od4lsHupQ97PihTlBxzlyexBlwOOrZ3L3jg
CJs4syWp97Gag/l7j95Rec5E1EuA1k5jel2nu52nnpKy2yfogZ5/qCaU11t+6bnB
sk0OieeOtAAZ/A==
-----END CERTIFICATE-----
Generated at Sun Mar 22 05:16:10 2026 by rpki-client