Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File:                     EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier:          CbV1Y/WiIwBm8cWJmu5wiyi1sGL6G3TO+Mf8RhRwF2k=
Subject key identifier:   0D:A9:E1:CE:C9:DE:C3:F3:36:6A:78:27:26:2A:DA:38:2C:F2:35:04
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer:       /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial:       019D3941AA93B97879ABA507D9DE3346E3E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 11:01:37 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:37 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:37 +0000
Files and hashes:         1: 5O82bj0RVPYC9fHeytygnYo76U8.roa (hash: P+7qJZ65HnaqEFW0awG0yJ2/55GEb9yw1uv5c7sRaVA=)
                          2: 8ZMhpHWpSjesuQ3JK0HQjCVMxBg.roa (hash: M4Nr0Wi/SzNVzQvcJX08oqzRs/vvxC+K5A74A/Zcd8o=)
                          3: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: uBpo0E8nuLljWS7aQwjJBC83sr7FHr6IaqnG5pb7fNc=)
                          4: JMBywUmb80eS8GOrITuaVx8nCRg.roa (hash: /324/IAHNCGdBytZWzsoLGKPRqjPYfQZAIUmmm6zgwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:aa:93:b9:78:79:ab:a5:07:d9:de:33:46:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
        Validity
            Not Before: Mar 29 11:01:37 2026 GMT
            Not After : Mar 30 11:01:37 2026 GMT
        Subject: CN=0da9e1cec9dec3f3366a7827262ada382cf23504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:4e:06:91:ab:bd:fe:fd:e3:b1:b6:29:a9:
                    08:d4:a4:0e:74:8e:2a:79:6f:00:67:c9:bb:be:63:
                    c9:71:0c:d3:66:30:a0:7a:ee:e9:36:be:01:52:89:
                    5a:ee:69:1a:56:9e:77:00:88:cd:47:2c:4c:e2:f9:
                    50:7c:28:e7:28:97:ee:42:07:e8:7c:5a:c2:21:20:
                    16:d9:0a:c5:c2:99:53:8b:e2:9e:da:ed:6f:d4:7d:
                    75:05:5a:d1:e5:4a:db:5d:27:a8:56:cc:2e:ff:45:
                    33:f1:43:1e:36:cd:92:05:9f:40:22:f4:aa:09:3c:
                    1a:8b:77:39:81:bf:de:22:09:40:0f:d3:ac:68:2d:
                    77:28:6c:f7:ab:f3:02:d3:15:10:ea:96:6d:fe:73:
                    dd:61:7f:c9:f9:c3:62:df:b3:67:f6:3d:90:7d:a4:
                    69:98:e8:3f:b7:25:15:fe:9f:52:68:cc:16:01:90:
                    54:1e:c6:c8:26:3e:e0:ed:99:04:06:f6:49:52:2e:
                    9b:1a:e6:bd:f0:98:00:23:be:21:35:f2:7e:ca:35:
                    66:e7:4e:f0:56:c6:e1:a2:28:bd:f9:c8:57:2a:85:
                    82:a5:c5:6c:aa:ee:df:3b:54:5a:47:c6:3c:9a:05:
                    49:0a:92:e0:c8:fa:8e:eb:e9:2c:3c:8f:6f:3d:1e:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:E1:CE:C9:DE:C3:F3:36:6A:78:27:26:2A:DA:38:2C:F2:35:04
            X509v3 Authority Key Identifier:
                keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b1:da:14:63:cf:e0:f6:95:99:1a:82:13:47:a6:e2:d1:4c:
         c8:86:56:56:18:3f:46:ff:2d:0f:04:9e:d2:4f:70:10:30:b8:
         89:c7:5a:82:1a:b5:c8:bf:e1:6a:e1:8c:de:e7:b4:b7:27:d2:
         c8:8e:75:0e:48:10:63:47:61:fc:d4:09:f5:8c:2d:a2:40:77:
         f5:72:fe:5f:21:8c:08:fb:fb:3e:74:8e:43:66:0b:fc:ca:35:
         c7:f5:72:33:41:32:ea:58:9d:d3:27:84:b4:48:8f:32:ff:d1:
         4b:7d:51:4c:ae:7f:04:4c:86:f5:1f:24:a0:b5:e3:bb:cf:79:
         51:20:4b:45:c2:46:e1:07:ae:5b:69:44:a6:a3:5f:4f:da:9e:
         b2:e0:ac:51:10:bb:af:2e:18:55:c4:78:d9:f1:d7:fc:3e:37:
         c7:6a:d0:13:a4:bc:da:c0:49:f9:29:4d:58:94:f3:ac:c1:11:
         27:a5:eb:53:92:ce:95:7b:9b:ca:e5:bc:7a:bc:6d:2d:c8:2a:
         1a:95:9b:13:34:a6:74:32:78:f9:c5:ad:1c:df:42:3c:fb:e8:
         c0:a9:00:05:19:15:c3:cf:7e:56:07:70:6d:b2:d3:44:dd:4b:
         b1:29:5f:f6:3f:a3:bd:73:a2:bb:54:9e:23:01:de:01:d3:59:
         07:67:fb:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QaqTuXh5q6UH2d4zRuPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx
OGEwYzkwHhcNMjYwMzI5MTEwMTM3WhcNMjYwMzMwMTEwMTM3WjAzMTEwLwYDVQQD
EygwZGE5ZTFjZWM5ZGVjM2YzMzY2YTc4MjcyNjJhZGEzODJjZjIzNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZROBpGrvf7947G2KakI1KQOdI4q
eW8AZ8m7vmPJcQzTZjCgeu7pNr4BUola7mkaVp53AIjNRyxM4vlQfCjnKJfuQgfo
fFrCISAW2QrFwplTi+Ke2u1v1H11BVrR5UrbXSeoVswu/0Uz8UMeNs2SBZ9AIvSq
CTwai3c5gb/eIglAD9OsaC13KGz3q/MC0xUQ6pZt/nPdYX/J+cNi37Nn9j2QfaRp
mOg/tyUV/p9SaMwWAZBUHsbIJj7g7ZkEBvZJUi6bGua98JgAI74hNfJ+yjVm507w
Vsbhoii9+chXKoWCpcVsqu7fO1RaR8Y8mgVJCpLgyPqO6+ksPI9vPR6m0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2p4c7J3sPzNmp4JyYq2jgs8jUEMB8GA1UdIwQY
MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt
NWRlMzJiNjZkYjBhLzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh
LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLHaFGPP
4PaVmRqCE0em4tFMyIZWVhg/Rv8tDwSe0k9wEDC4icdaghq1yL/hauGM3ue0tyfS
yI51DkgQY0dh/NQJ9YwtokB39XL+XyGMCPv7PnSOQ2YL/Mo1x/VyM0Ey6lid0yeE
tEiPMv/RS31RTK5/BEyG9R8koLXju895USBLRcJG4QeuW2lEpqNfT9qesuCsURC7
ry4YVcR42fHX/D43x2rQE6S82sBJ+SlNWJTzrMERJ6XrU5LOlXubyuW8erxtLcgq
GpWbEzSmdDJ4+cWtHN9CPPvowKkABRkVw89+VgdwbbLTRN1LsSlf9j+jvXOiu1Se
IwHeAdNZB2f7cA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:28 2026 by rpki-client