Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File:                     FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier:          7TDiSVHrvXsI1810X2b+KfO9w/eYULZzNjYr76rkD3E=
Subject key identifier:   85:7C:7E:6E:55:DC:8E:51:5B:10:33:03:76:E8:DC:72:75:88:C5:25
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer:       /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial:       019D3451DDC1B349569DAAA1CE02965FED45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number:          188E
Signing time:             Sat 28 Mar 2026 12:01:13 +0000
Manifest this update:     Sat 28 Mar 2026 12:01:13 +0000
Manifest next update:     Sun 29 Mar 2026 12:01:13 +0000
Files and hashes:         1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: +T97gaRLgobBpNj9lcjyLPWMOz6lhK9g0Avf8loOkHM=)
                          2: ivXhF8HUZHKEYR2EUtQx0A5y1L0.roa (hash: XQATR8bU8IBZH5tjUzM6YW6W1aJgryoOIOyHkr8fKR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:51:dd:c1:b3:49:56:9d:aa:a1:ce:02:96:5f:ed:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
        Validity
            Not Before: Mar 28 12:01:13 2026 GMT
            Not After : Mar 29 12:01:13 2026 GMT
        Subject: CN=857c7e6e55dc8e515b10330376e8dc727588c525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:82:a8:5f:6e:72:08:42:3c:83:36:30:b4:d8:
                    82:c5:5e:76:a3:5b:7c:8a:99:2b:ba:d0:7f:06:db:
                    52:4a:d3:f7:9e:2b:93:a6:1d:25:13:90:3f:04:37:
                    d8:dc:9e:2f:34:af:72:62:34:31:6b:0e:be:54:2c:
                    88:dc:5c:e0:2b:9f:a5:29:62:8d:7d:d3:28:29:57:
                    2f:ed:89:f9:ff:fd:28:15:34:8d:ed:c4:f4:50:b1:
                    97:19:7e:03:ab:ed:77:f1:13:58:b0:86:70:72:f4:
                    5d:09:26:1f:0f:b4:92:2f:f5:86:8b:31:9b:11:a2:
                    85:e8:7d:25:8f:1a:63:af:f3:9b:01:3d:bb:98:28:
                    33:93:92:af:79:8a:13:fc:8f:bf:29:84:ca:c2:28:
                    a4:71:b4:d6:5d:25:db:af:8f:fb:0f:d4:a5:59:a2:
                    08:ab:ca:57:ff:7e:93:04:96:b7:4b:ba:86:90:69:
                    73:43:58:b4:09:77:59:c8:e6:e2:51:fc:f3:d2:98:
                    32:31:dd:64:05:de:15:be:d6:2c:89:a1:e0:c5:31:
                    ab:9c:de:af:cd:64:07:63:69:e4:06:32:e7:37:75:
                    bc:e9:34:d1:19:08:2f:62:6f:41:c6:ac:1f:64:a1:
                    cc:38:7c:db:1f:b1:a3:18:cd:19:83:34:38:ac:e1:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:7E:6E:55:DC:8E:51:5B:10:33:03:76:E8:DC:72:75:88:C5:25
            X509v3 Authority Key Identifier:
                keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:29:0c:17:ee:12:e0:ae:21:01:c9:22:10:84:fc:3e:a4:
         11:a4:86:b9:b3:28:09:5a:8e:27:0b:a6:d2:9c:32:49:bb:8e:
         17:b2:8e:37:79:8e:45:ea:7b:bc:1a:bb:01:39:19:70:da:3b:
         0b:d2:50:bf:63:c4:cb:3b:e1:d7:74:57:51:cf:4b:39:40:ea:
         2b:0d:20:c8:13:75:f6:e9:34:f0:74:03:84:80:56:bb:ed:67:
         73:01:9a:8f:ba:1f:c2:2f:dc:07:18:5d:ea:1c:5e:28:c7:01:
         19:23:22:39:9c:6f:17:4a:76:e6:ba:1b:1d:95:8b:6c:b6:f7:
         d8:7a:29:65:df:33:82:b8:64:eb:7e:7e:81:66:3f:2f:e8:28:
         b2:13:4b:e4:e1:f2:52:c2:d2:ea:a8:65:1a:7a:59:14:55:65:
         b4:03:78:92:ec:8b:67:8c:e4:a7:e1:a6:b3:f6:67:18:1a:e6:
         50:63:7b:b6:6c:2e:02:de:b1:de:cd:d8:25:f3:33:b5:87:32:
         c7:61:44:25:6a:7e:cd:46:fc:e5:80:6c:c2:d4:8d:65:2d:39:
         22:c4:17:5d:12:d1:fd:4e:9d:c6:0f:f3:f3:06:7f:37:33:5f:
         aa:b5:11:6c:e0:a4:bc:c3:a8:04:68:d9:09:9b:78:73:df:34:
         46:79:e6:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00Ud3Bs0lWnaqhzgKWX+1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzc4MmJlYTQ2ZmQyNzE3NjhmZjQ2ZDliNDVjMDU3YTlk
ZjU0ODEwHhcNMjYwMzI4MTIwMTEzWhcNMjYwMzI5MTIwMTEzWjAzMTEwLwYDVQQD
Eyg4NTdjN2U2ZTU1ZGM4ZTUxNWIxMDMzMDM3NmU4ZGM3Mjc1ODhjNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YKoX25yCEI8gzYwtNiCxV52o1t8
ipkrutB/BttSStP3niuTph0lE5A/BDfY3J4vNK9yYjQxaw6+VCyI3FzgK5+lKWKN
fdMoKVcv7Yn5//0oFTSN7cT0ULGXGX4Dq+138RNYsIZwcvRdCSYfD7SSL/WGizGb
EaKF6H0ljxpjr/ObAT27mCgzk5KveYoT/I+/KYTKwiikcbTWXSXbr4/7D9SlWaII
q8pX/36TBJa3S7qGkGlzQ1i0CXdZyObiUfzz0pgyMd1kBd4VvtYsiaHgxTGrnN6v
zWQHY2nkBjLnN3W86TTRGQgvYm9BxqwfZKHMOHzbH7GjGM0ZgzQ4rOHpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV8fm5V3I5RWxAzA3bo3HJ1iMUlMB8GA1UdIwQY
MBaAFBZ3gr6kb9Jxdo/0bZtFwFep31SBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEt
OWEzNTgzNjI4MjljLzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEtOWEzNTgzNjI4Mjlj
LzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAah0pDBfu
EuCuIQHJIhCE/D6kEaSGubMoCVqOJwum0pwySbuOF7KON3mORep7vBq7ATkZcNo7
C9JQv2PEyzvh13RXUc9LOUDqKw0gyBN19uk08HQDhIBWu+1ncwGaj7ofwi/cBxhd
6hxeKMcBGSMiOZxvF0p25robHZWLbLb32HopZd8zgrhk635+gWY/L+goshNL5OHy
UsLS6qhlGnpZFFVltAN4kuyLZ4zkp+Gms/ZnGBrmUGN7tmwuAt6x3s3YJfMztYcy
x2FEJWp+zUb85YBswtSNZS05IsQXXRLR/U6dxg/z8wZ/NzNfqrURbOCkvMOoBGjZ
CZt4c980RnnmCw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 16:47:48 2026 by rpki-client