Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File:                     vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier:          x326ANq+IM98dRzO+y/Husot5/JQmn6hWt5aBnKzbfY=
Subject key identifier:   DF:D5:1E:9F:10:87:C5:11:45:6E:8E:C3:17:C2:D4:C0:91:D9:D3:A9
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer:       /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial:       019D390A3F3B0450FEBECB380AEA3BC6C598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 10:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:06 +0000
Files and hashes:         1: DnP6GcDKWF77PKsQ6HasKB8i_K0.roa (hash: 5rS9bW+Cd7FZhz3igcUd9hkUorfrY7/8Znu4PQmJGxs=)
                          2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: bPie/PjRlTJesZICHfA98QTpN1k+azlNFK3iKxh9JLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:3f:3b:04:50:fe:be:cb:38:0a:ea:3b:c6:c5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
        Validity
            Not Before: Mar 29 10:01:06 2026 GMT
            Not After : Mar 30 10:01:06 2026 GMT
        Subject: CN=dfd51e9f1087c511456e8ec317c2d4c091d9d3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:95:23:50:bc:f3:8c:6d:49:fa:21:ff:8d:
                    ee:c1:1f:2b:56:34:c9:46:4f:ee:1e:58:36:be:42:
                    d3:40:55:5e:7b:ac:c8:e2:f0:fe:e9:9c:30:5f:06:
                    81:b2:11:aa:1a:3f:68:3b:26:d2:34:c6:2a:80:1c:
                    4c:86:b5:04:d8:d3:a5:77:01:b6:3f:42:c1:33:42:
                    7e:a9:32:4e:25:5a:16:b5:c6:73:7f:aa:92:84:3d:
                    fb:bd:55:40:8f:0e:ba:77:f0:27:23:31:0c:a7:6f:
                    cb:dd:20:d8:cc:e0:c3:ab:db:2b:fe:71:01:10:fd:
                    ab:8d:ed:ce:30:95:27:13:b4:28:7a:90:e6:d5:2e:
                    46:ff:d3:21:ab:2a:a5:04:c8:cb:f2:fe:2f:ea:aa:
                    35:76:c2:ca:64:ca:fc:d5:66:5f:c0:6b:36:9e:b2:
                    45:3d:b2:a4:57:99:04:a5:84:77:b9:91:0c:67:af:
                    ca:40:05:26:df:0f:53:bf:a9:ea:8b:c0:0e:67:5b:
                    9a:3a:8f:a3:c1:0d:04:9c:9b:a7:33:c8:3a:0d:b5:
                    26:b2:ae:78:75:f4:fa:f2:8c:c9:dd:33:e3:08:4f:
                    51:30:e3:3e:43:74:8b:ee:48:3f:3d:de:04:67:92:
                    e1:5b:fe:b9:87:2b:1c:f1:13:7d:b0:41:e3:25:24:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D5:1E:9F:10:87:C5:11:45:6E:8E:C3:17:C2:D4:C0:91:D9:D3:A9
            X509v3 Authority Key Identifier:
                keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6c:99:a3:15:12:17:73:82:af:0c:d0:73:5f:45:5d:bd:dc:
         d4:18:32:4c:13:ea:3f:32:77:1c:9a:09:c2:08:bd:58:cc:ba:
         fe:db:a6:02:e3:c5:d8:e4:0b:17:eb:8f:19:5c:16:bf:2e:8d:
         fa:9f:fa:43:0b:6a:de:30:af:82:2b:34:1d:92:4e:6c:5c:ac:
         b5:80:84:7e:4c:27:67:0b:82:88:f1:d2:73:ba:c0:72:cc:c7:
         83:dd:bf:78:29:54:a2:40:ef:34:92:ad:3f:6f:2e:c5:09:9a:
         29:f5:c7:dd:58:85:df:32:b0:82:93:f8:1c:d8:76:ff:b4:e0:
         50:5f:f6:98:e9:dc:6b:90:5b:51:b0:de:c7:4b:a5:5c:75:a4:
         bf:98:d3:a4:ad:66:b2:c0:11:a2:9f:43:e8:8b:3c:eb:78:0f:
         61:be:64:b9:ab:84:78:94:38:ca:58:5d:fd:78:39:74:01:f9:
         08:45:cd:a0:3e:d5:44:8d:46:76:95:a5:50:2b:c1:a6:8c:bf:
         12:12:61:7b:ae:9e:7b:f9:9c:ec:d1:70:d1:c0:b8:2e:10:28:
         2d:d6:f0:23:da:98:f2:5e:87:5f:d0:f3:b5:a1:1e:bd:52:54:
         3c:90:a5:99:6c:df:b0:cc:58:9f:1e:74:ac:df:05:81:75:27:
         79:c9:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:14 2026 by rpki-client