Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          WbfpZQZTZqt4cSsY1APas63Gq7Nn0zWFhV5n11zZMlM=
Subject key identifier:   73:82:26:EC:B9:30:7D:24:17:AC:6C:22:77:62:23:09:1F:A2:63:08
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       019D3A1CBAC02C0BBDCD2FB51A329710967A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 15:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:54 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: tZhpXfiMUCkvvArBJf/+Z5VdclR4tIK+d/SA+CWTwb4=)
                          2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:ba:c0:2c:0b:bd:cd:2f:b5:1a:32:97:10:96:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Mar 29 15:00:54 2026 GMT
            Not After : Mar 30 15:00:54 2026 GMT
        Subject: CN=738226ecb9307d2417ac6c22776223091fa26308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fc:21:5b:c5:d3:2a:b0:b2:46:0e:7e:d5:fa:
                    a0:09:e6:14:ef:23:7e:44:78:d3:a6:78:bd:3c:7c:
                    fb:da:f2:60:68:3d:b4:a0:34:28:b3:2d:34:43:f2:
                    78:bb:8c:bd:01:fa:30:80:25:66:f9:27:ca:0d:f9:
                    c9:a6:8c:2b:78:9a:c0:85:ee:7d:df:47:4a:6b:87:
                    10:b9:61:c8:cc:4a:b3:0e:ef:00:5f:42:14:ef:1c:
                    5d:4d:f5:3f:35:48:d3:8f:ff:6e:35:2a:26:35:1a:
                    ce:c8:36:38:51:0e:64:1d:fe:17:d4:03:ea:a3:dc:
                    6c:14:eb:c1:c2:7d:76:c0:0f:f7:25:b7:df:c2:8e:
                    34:95:10:5f:82:52:9b:63:f3:c8:9e:3a:01:9a:1e:
                    1f:ff:03:df:0a:77:a0:a7:36:20:20:58:d9:d4:07:
                    2d:08:34:d3:f2:18:2e:9b:f5:68:02:52:6a:98:52:
                    06:70:02:e9:68:ae:db:26:f5:02:79:19:1e:85:27:
                    cf:77:b2:43:5b:f4:33:38:15:64:cf:e4:79:6b:68:
                    94:84:77:81:c2:f3:b4:8c:2a:ba:50:6e:94:68:38:
                    5e:84:5e:9d:00:4c:7b:89:11:35:c4:f4:d2:ec:f1:
                    57:57:34:0f:d5:1a:4a:5c:3c:fe:bc:13:2f:08:d5:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:82:26:EC:B9:30:7D:24:17:AC:6C:22:77:62:23:09:1F:A2:63:08
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:bf:1d:c5:66:dd:61:04:23:ef:e5:b4:6a:98:cc:51:60:
         b6:37:b4:c5:81:60:42:c6:8b:0b:9c:9a:23:25:8d:ab:a4:25:
         0f:09:66:44:bb:3d:5a:fc:33:99:56:b3:0a:df:7a:e1:10:86:
         6c:55:57:23:e5:d9:fd:38:c7:22:75:3f:da:c8:ce:b0:0d:83:
         67:b4:ca:b1:ef:6e:8a:93:06:30:dc:c8:74:83:2b:76:ac:a0:
         40:e2:76:f8:70:7d:80:31:90:2a:1e:4f:af:1c:53:8f:8a:6d:
         db:f6:00:f3:65:68:b4:df:2b:8a:c8:c1:bb:1b:cc:9c:7f:46:
         b1:14:b1:b4:fc:f9:51:20:fa:e9:fa:f7:00:f1:b4:aa:ba:13:
         5f:c0:00:71:98:f6:90:01:ec:0b:da:b4:f9:89:77:ef:b0:0c:
         67:67:96:55:d2:3f:52:17:53:5c:13:46:18:70:9d:5c:af:76:
         84:99:4e:36:15:86:ed:ed:23:67:d0:57:06:60:9f:e9:ee:63:
         5d:99:05:d9:fc:a3:88:b3:34:7c:5e:68:1f:f6:af:e1:a5:86:
         cb:07:73:ea:64:ab:c4:38:1c:97:92:e8:7c:75:97:f5:dc:f9:
         91:4b:05:17:10:f4:25:ae:0a:ea:b9:a6:e2:8b:0b:6b:64:19:
         78:22:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:52 2026 by rpki-client