Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          xNwPgGrxkQ4waR/nC6w1KzIGRloPVcjtSP5z+pdwhu0=
Subject key identifier:   D5:63:4C:98:C1:2F:C8:8F:EF:5E:30:DC:2B:87:F9:39:55:1D:54:39
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       019D37C0410B73B99B03B259EA829537CD6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 04:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:39 +0000
Files and hashes:         1: cuuVCevCVUzGr-kAkN3m1WE9FDE.roa (hash: D4SsZHbQIEHtfRHXbg7otJ679eXTgRTgVgeBr6U9wDI=)
                          2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: UKCeECux2AWgnKOBTECF+KfXGtyRUG+XqexGfBBtXQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:41:0b:73:b9:9b:03:b2:59:ea:82:95:37:cd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: Mar 29 04:00:39 2026 GMT
            Not After : Mar 30 04:00:39 2026 GMT
        Subject: CN=d5634c98c12fc88fef5e30dc2b87f939551d5439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:6a:22:6a:ca:6e:65:82:b1:33:e6:b8:20:
                    c8:6d:98:05:78:c5:bc:c1:2d:e9:83:c6:28:1c:7d:
                    d3:02:d5:55:49:45:54:99:02:78:23:ad:f5:01:46:
                    03:33:fb:80:2a:6d:6c:85:9e:00:a9:41:1c:61:72:
                    b4:74:a4:7f:17:c4:96:30:e8:20:1b:c6:26:f1:02:
                    c9:08:1f:ec:df:99:37:13:38:41:f2:9a:4e:ea:ff:
                    f5:b7:e5:55:7d:cc:8a:ef:52:f3:10:f2:2b:22:b4:
                    dd:20:02:a9:8a:b6:96:3a:a3:f0:71:a7:57:58:cd:
                    4e:51:9c:9f:87:00:2e:f9:85:f3:25:b3:e3:27:6c:
                    f8:d8:c1:13:db:e0:e4:2f:c4:54:0f:4a:00:62:17:
                    0a:4b:ba:14:e3:3c:12:ff:e7:a3:cb:09:4c:1e:03:
                    0b:ca:46:52:60:63:a0:30:e9:2e:31:34:e5:1b:87:
                    bc:b2:3d:18:ee:d6:20:81:5d:bf:91:ba:e9:cb:8d:
                    0e:5e:f6:d1:46:00:4c:9e:bf:98:e7:c8:d0:b5:6d:
                    03:5d:b7:85:99:0a:2a:76:b3:da:07:b7:7a:6f:cf:
                    1b:fd:2f:5c:c5:28:62:1f:45:17:54:69:2d:46:80:
                    b1:a7:04:c7:8a:ff:ef:8c:6b:9e:9c:53:55:a0:49:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:4C:98:C1:2F:C8:8F:EF:5E:30:DC:2B:87:F9:39:55:1D:54:39
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:c1:f1:84:f3:dc:5f:2a:4f:6c:49:a1:4f:b8:c5:f8:ed:
         1d:e6:55:18:33:25:ed:0e:0b:fe:99:d7:6a:2c:d3:c0:b4:c7:
         4c:45:2d:f1:cf:5c:e4:78:c8:77:a9:8e:fe:8f:f8:ae:95:d6:
         df:04:70:f9:fc:ad:f9:8b:16:00:f3:6b:e5:e2:de:9f:58:2c:
         71:56:cf:48:8e:b7:a4:1d:b3:69:91:45:ad:7d:a7:a1:ba:a2:
         a6:dc:50:fe:97:91:d4:bd:8e:4f:1b:23:1c:90:ae:24:f3:81:
         91:73:b6:29:8b:b6:11:b2:78:c2:24:24:12:84:a5:d1:cd:bb:
         3b:ef:fc:10:fa:76:94:94:73:da:af:f8:b0:cc:12:29:38:ee:
         b0:32:68:08:e9:3d:de:3e:9d:85:2a:63:6c:f2:d1:06:2e:4f:
         db:a8:78:d5:97:15:4f:5e:a2:c9:47:f9:56:fc:9f:ef:b0:b0:
         cc:f7:c2:e1:3f:ff:d6:27:8f:e0:57:fd:20:13:da:78:9f:45:
         0c:5b:b2:c7:39:18:e7:f5:22:ee:f5:15:4d:60:d8:c8:28:35:
         ae:24:96:7b:69:16:0b:52:7e:d9:79:f2:af:83:c7:4c:91:c2:
         95:86:40:f0:35:51:81:32:c4:98:3c:59:60:ca:d2:18:b6:ad:
         78:7e:67:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEELc7mbA7JZ6oKVN81uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZDZlZjE3ZTZmOTUxODE4OTBlNTRkMDAwYTJhYzhmZjJk
MjQ5OWIwHhcNMjYwMzI5MDQwMDM5WhcNMjYwMzMwMDQwMDM5WjAzMTEwLwYDVQQD
EyhkNTYzNGM5OGMxMmZjODhmZWY1ZTMwZGMyYjg3ZjkzOTU1MWQ1NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZZqImrKbmWCsTPmuCDIbZgFeMW8
wS3pg8YoHH3TAtVVSUVUmQJ4I631AUYDM/uAKm1shZ4AqUEcYXK0dKR/F8SWMOgg
G8Ym8QLJCB/s35k3EzhB8ppO6v/1t+VVfcyK71LzEPIrIrTdIAKpiraWOqPwcadX
WM1OUZyfhwAu+YXzJbPjJ2z42MET2+DkL8RUD0oAYhcKS7oU4zwS/+ejywlMHgML
ykZSYGOgMOkuMTTlG4e8sj0Y7tYggV2/kbrpy40OXvbRRgBMnr+Y58jQtW0DXbeF
mQoqdrPaB7d6b88b/S9cxShiH0UXVGktRoCxpwTHiv/vjGuenFNVoEnJjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVjTJjBL8iP714w3CuH+TlVHVQ5MB8GA1UdIwQY
MBaAFK7W7xfm+VGBiQ5U0ACirI/y0kmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTct
MGFlMGYxYWNjZGE0LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTctMGFlMGYxYWNjZGE0
LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaojB8YTz
3F8qT2xJoU+4xfjtHeZVGDMl7Q4L/pnXaizTwLTHTEUt8c9c5HjId6mO/o/4rpXW
3wRw+fyt+YsWAPNr5eLen1gscVbPSI63pB2zaZFFrX2nobqiptxQ/peR1L2OTxsj
HJCuJPOBkXO2KYu2EbJ4wiQkEoSl0c27O+/8EPp2lJRz2q/4sMwSKTjusDJoCOk9
3j6dhSpjbPLRBi5P26h41ZcVT16iyUf5Vvyf77CwzPfC4T//1ieP4Ff9IBPaeJ9F
DFuyxzkY5/Ui7vUVTWDYyCg1riSWe2kWC1J+2Xnyr4PHTJHClYZA8DVRgTLEmDxZ
YMrSGLateH5niA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:31 2026 by rpki-client