Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          wU0CjIHmxHYwBOLUDsUiKgl6YzfBDVKXMqfEFnpuRnU=
Subject key identifier:   82:73:C8:78:D4:36:C1:4C:34:3B:77:87:CA:A5:7B:86:2C:E0:30:5A
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       019D39E56ADB23F6A9FB4260AF0E51E92DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 14:00:29 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:29 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:29 +0000
Files and hashes:         1: OwPnXef8wjjPeRu0JL3nBkCM2bI.roa (hash: aVplhHufSEGNMhwKZj/hpZrwjk8V5+AyOwyihQOJg38=)
                          2: fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa (hash: OXn/GJfiGWG/hkB4epjpbpxfqCnDFVPW115sflUVJ1Y=)
                          3: gDn8yWnPB47froobLzWoZSwRoP8.roa (hash: KD1OPiqAq19vYiaSOt3v4Kj3NGUkJ6hVO149U1CJOgI=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: qfUhbnRweTpM6/yZS0M9KIyUV52Xv9XIHofxqzYTLEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:6a:db:23:f6:a9:fb:42:60:af:0e:51:e9:2d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Mar 29 14:00:29 2026 GMT
            Not After : Mar 30 14:00:29 2026 GMT
        Subject: CN=8273c878d436c14c343b7787caa57b862ce0305a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f2:24:5e:82:1a:e3:3f:6e:fd:c4:8c:fd:0d:
                    0a:87:17:65:86:69:6b:5d:ce:01:3a:6d:90:39:99:
                    f4:ca:b4:d4:60:43:90:37:cf:b2:a7:a7:5f:26:0b:
                    84:82:d7:7d:05:40:60:9d:37:b9:7b:11:fe:80:37:
                    b5:bf:76:63:62:1c:40:49:a1:18:85:27:04:0b:33:
                    48:d0:c6:f6:ca:12:1b:6a:7f:e2:f6:02:48:2a:05:
                    1a:6e:9d:a1:38:40:f8:4f:6b:c0:dd:b2:21:95:31:
                    e7:74:42:a0:6f:f1:cc:f2:2b:1e:31:45:dc:c1:76:
                    01:64:7b:9b:02:c5:1b:fa:44:0c:49:d2:11:ef:6b:
                    eb:6f:f4:63:c9:3a:3d:9f:7c:ed:95:0d:92:52:e3:
                    69:01:0b:9a:e5:ab:94:1b:95:30:e6:e2:b8:30:10:
                    7f:ca:d3:63:0d:e2:87:31:cd:78:f4:4c:5a:25:72:
                    7d:ea:5a:b2:f0:19:9b:4c:ca:3a:a6:17:c1:ca:e1:
                    e9:46:2c:e6:c7:01:9e:28:83:ed:1e:81:7b:37:1d:
                    a0:b0:b4:a9:01:77:41:1e:8b:c2:48:eb:47:00:56:
                    c6:15:57:f6:a5:c1:ec:7b:18:df:73:4b:cd:c5:32:
                    57:64:0b:ea:61:52:5a:b8:a6:df:fb:b4:cb:1e:1b:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:73:C8:78:D4:36:C1:4C:34:3B:77:87:CA:A5:7B:86:2C:E0:30:5A
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8a:99:de:3d:34:58:c1:52:b7:cb:2e:34:f7:39:0c:33:a7:
         29:c8:bb:3a:f3:b5:f9:01:78:90:00:eb:63:29:ed:d2:a9:8a:
         aa:0e:fd:4b:ff:e3:b3:57:47:3f:94:db:0d:72:76:f9:86:72:
         38:f8:01:36:84:f5:ac:47:33:b5:22:ab:84:18:f0:db:44:17:
         0a:00:54:1f:5d:d0:04:4b:2e:9a:e0:e9:e7:c1:29:81:95:64:
         68:98:cb:78:78:2a:65:8c:51:00:23:ca:d7:6d:a2:b2:0f:1c:
         cb:4f:50:a0:cc:ef:05:c7:13:27:98:0c:a3:83:ed:05:d5:c0:
         cc:28:7b:be:b1:00:54:eb:de:de:20:27:38:f4:e4:19:46:61:
         5a:09:5e:2e:f2:86:c6:29:dc:d0:f0:8f:65:7b:1f:e2:b6:96:
         f4:00:66:2a:9a:2b:cc:ac:3b:cd:e8:81:ec:f5:c2:e9:e3:f8:
         76:d0:98:95:36:a0:1b:d8:1a:36:29:e2:68:b5:72:11:1d:a2:
         10:2e:e0:1f:a0:47:17:30:ae:21:1c:3f:fa:0d:ff:2d:85:5f:
         9f:57:9e:ef:79:dd:1b:44:7a:d7:20:49:50:47:fe:ff:c4:3e:
         66:35:9b:62:8d:05:7d:45:ba:73:5b:62:95:9a:11:80:2e:35:
         59:fb:ff:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:52 2026 by rpki-client