Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
File:                     95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json)
Hash identifier:          keE7H4e645gB7QjUpyAGedUO9p8dQhmAzSBdS8OMyqc=
Subject key identifier:   92:3E:D3:11:3F:35:B2:5A:C8:BD:F4:E9:13:F8:31:DF:59:40:5C:32
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Certificate issuer:       /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial:       019D378994690328009DE17BA89ECEE8B31C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 03:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:56 +0000
Files and hashes:         1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: RaO1nUIEZBRwJ9PxIL1GzQ6ql3sRTiU8r2r5BxGCtec=)
                          2: wcTBVnf35_NIZbe8iI9wOnq94MM.roa (hash: cNxB2jzcwkyyFD+d0tJNZcO3QM57Dig2ypBOPVIdUQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:94:69:03:28:00:9d:e1:7b:a8:9e:ce:e8:b3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
        Validity
            Not Before: Mar 29 03:00:56 2026 GMT
            Not After : Mar 30 03:00:56 2026 GMT
        Subject: CN=923ed3113f35b25ac8bdf4e913f831df59405c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:16:7f:21:5b:b0:b5:1b:77:54:e2:7f:16:
                    5b:14:69:29:27:09:72:a4:aa:9f:cb:e7:8f:7e:5b:
                    1a:a0:ae:b4:5c:aa:83:31:f4:fe:f6:3d:bc:4b:15:
                    fc:bd:51:9f:3f:3b:f4:d1:31:43:45:c7:9a:a0:5b:
                    5b:64:57:7d:d7:33:8e:be:0b:1e:5c:b2:6b:d7:76:
                    c8:e8:ad:83:d2:ae:05:ad:74:fd:58:e0:9c:e9:1b:
                    0c:02:8a:b1:84:3c:d3:3f:7f:9a:0a:a0:56:32:f7:
                    ba:2a:4f:95:af:77:9d:7b:09:a7:7e:55:97:70:c1:
                    a5:d7:3b:cd:5b:1a:1f:20:e0:cc:e9:11:95:31:bc:
                    3c:90:37:d4:37:1a:04:4e:71:0a:77:f9:fb:e8:64:
                    66:79:08:e2:6a:91:b5:4c:e5:19:6b:b6:fc:dd:d8:
                    0d:da:bb:ac:48:d9:50:60:27:c0:72:61:26:c1:61:
                    6d:53:2d:1b:ed:5f:2f:9c:6c:3b:33:ff:a2:9e:57:
                    40:e8:f1:ce:8b:21:23:24:8d:ae:a9:93:c6:a0:47:
                    2b:12:a7:97:0f:f3:ee:1d:92:8f:f8:29:64:35:d2:
                    52:05:8e:47:ce:81:4c:cf:7e:4e:37:90:25:66:6b:
                    f7:dc:b8:2b:49:e4:1c:e6:f8:69:34:0d:89:60:a1:
                    f3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:D3:11:3F:35:B2:5A:C8:BD:F4:E9:13:F8:31:DF:59:40:5C:32
            X509v3 Authority Key Identifier:
                keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:e4:29:c1:4e:ae:66:e7:8f:e6:12:00:1c:da:c5:90:f1:
         87:25:2b:fc:84:4c:8c:fa:b5:79:82:1c:b9:70:50:4e:fe:c0:
         81:19:f6:5b:25:f2:1c:cb:60:1d:7c:7b:dc:ac:5b:a9:01:33:
         0e:ed:25:3f:55:b3:36:7c:05:8f:43:68:f3:93:28:6d:1a:78:
         39:68:1d:f8:3d:63:7b:cf:49:ab:33:fb:ff:0d:78:52:64:79:
         32:f0:1d:71:54:e9:2e:fa:80:2b:fd:15:d7:a6:94:fe:d6:66:
         37:6e:fa:9e:7a:de:dc:08:c2:36:ce:89:15:12:68:2d:76:a5:
         0f:dc:4b:8d:1c:fb:ca:ec:16:ac:91:3b:09:03:b1:10:1b:d7:
         4a:7e:67:1e:68:b0:fa:2c:ce:f0:67:06:94:33:f9:0d:66:6b:
         f7:5c:67:70:37:fd:0e:d8:bc:56:f0:f1:ac:2d:41:96:f7:fa:
         79:54:97:81:7a:0b:57:b8:0a:b9:c3:90:93:90:03:8d:2a:4f:
         57:6e:98:96:b6:fb:b2:9b:4d:37:cb:b1:37:94:13:d5:3b:56:
         a1:17:a3:15:be:83:29:6c:59:f3:81:c6:ed:2b:03:49:e2:02:
         f9:2e:17:61:41:13:63:fc:b9:da:41:6a:88:10:c9:62:5a:ea:
         93:47:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:40 2026 by rpki-client