Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
File:                     9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft (raw, json)
Hash identifier:          iW7q/8qhTBbLpLfFeO6tciFiqj5Gk/iHBxRejJg4WCE=
Subject key identifier:   35:51:04:AF:39:00:B7:CB:46:23:BC:0C:36:C5:61:6E:42:CF:6B:5A
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Certificate issuer:       /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial:       019D39E5F11D1B748ADCFDD56A79D6A474E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 14:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 14:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 14:01:03 +0000
Files and hashes:         1: 751KubgOS7HBCPWTQZK8_c0bJh8.roa (hash: pZSYTS5FX+8pRizhyqk288Z4lPS//MEroPNU3XHK8IQ=)
                          2: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl (hash: bWzOKMSw3roT4+RmY7mlsi/yLS+WF+8NqDTgGkA1YvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:f1:1d:1b:74:8a:dc:fd:d5:6a:79:d6:a4:74:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
        Validity
            Not Before: Mar 29 14:01:03 2026 GMT
            Not After : Mar 30 14:01:03 2026 GMT
        Subject: CN=355104af3900b7cb4623bc0c36c5616e42cf6b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:59:8b:70:60:f3:93:06:22:15:7a:12:ab:
                    e2:be:51:7b:62:94:df:8a:aa:6a:67:fd:ff:f7:28:
                    92:40:15:c8:e9:b3:cc:26:35:c0:14:79:46:da:3f:
                    d3:37:67:73:c6:e7:52:9d:fb:8a:4f:ba:f1:ac:a8:
                    c4:70:74:d2:96:cb:b2:8c:a7:f5:0b:b8:65:d0:0c:
                    4e:f4:43:18:67:04:97:58:a9:da:fd:bb:cf:6c:af:
                    05:5b:5b:df:34:e6:6e:15:6a:6e:78:9c:05:37:36:
                    23:55:d4:96:14:ed:aa:ea:44:58:07:d2:e0:4c:00:
                    f5:c7:8b:cd:10:82:3e:b6:2f:14:aa:f5:8e:1c:27:
                    d1:ac:fd:56:a5:b6:87:03:5c:a5:c0:df:f4:65:33:
                    5e:85:1e:d6:78:ba:ae:20:6e:91:14:11:1c:4d:57:
                    7c:1f:0f:67:a8:de:7e:8d:da:9d:a9:5c:1f:16:7a:
                    28:47:74:0a:fe:70:87:05:cf:4f:d0:d5:3d:b3:5a:
                    13:e7:af:3c:95:79:dc:5e:53:c1:84:2f:1a:cf:0f:
                    bf:75:fc:8c:80:b3:58:37:99:64:93:9c:40:ff:8b:
                    7d:9c:2b:c0:da:bb:b0:fa:50:41:f7:1b:66:be:ea:
                    ba:da:3a:59:c3:55:f4:60:24:d8:6d:76:50:80:fd:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:51:04:AF:39:00:B7:CB:46:23:BC:0C:36:C5:61:6E:42:CF:6B:5A
            X509v3 Authority Key Identifier:
                keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:98:17:fb:13:f8:8f:bf:41:e1:80:f5:39:ba:14:d0:8c:cc:
         4c:71:4a:e4:07:b8:9f:6d:21:09:69:26:88:1d:b1:f6:52:98:
         4a:7a:23:a4:6f:f7:54:27:b9:39:49:43:f9:0c:4b:97:e2:25:
         76:9b:15:d2:96:62:80:8e:a6:d8:ff:87:1e:97:22:b9:e5:92:
         76:e5:3b:19:f3:aa:dd:b7:c4:e0:59:be:46:4d:a6:68:6f:3a:
         13:ba:c1:d2:ff:88:8e:71:82:a9:8f:71:84:9e:09:f6:79:20:
         fd:f0:37:cc:6f:a4:fc:78:23:68:71:01:25:08:a2:41:43:4b:
         b5:76:6c:9d:6b:53:91:f5:a2:81:53:fb:60:01:c6:33:d5:79:
         cc:ee:f7:48:cf:4d:65:53:37:db:52:77:e9:45:b9:32:30:07:
         9d:3a:34:30:3b:b2:6d:5d:06:ca:45:5f:45:c0:d0:1d:c4:40:
         0a:18:01:48:89:0b:fa:6f:61:6f:7f:82:52:9e:c4:76:43:88:
         73:eb:7f:3a:df:08:a7:43:30:d9:0e:2b:60:bc:c8:c3:ae:b8:
         b5:f7:e7:78:9e:5b:0a:2d:6b:c7:d6:fa:cf:c4:55:d6:54:6c:
         ac:77:7f:d8:22:c8:06:a2:db:ae:bd:ae:54:8d:55:de:99:05:
         0c:1a:12:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055fEdG3SK3P3VannWpHThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGJmYjAxYjAzY2FhNmZjZTg4N2I0Mzg0MjUzZGIyMGU1
OWZhNzEwHhcNMjYwMzI5MTQwMTAzWhcNMjYwMzMwMTQwMTAzWjAzMTEwLwYDVQQD
EygzNTUxMDRhZjM5MDBiN2NiNDYyM2JjMGMzNmM1NjE2ZTQyY2Y2YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrlZi3Bg85MGIhV6EqvivlF7YpTf
iqpqZ/3/9yiSQBXI6bPMJjXAFHlG2j/TN2dzxudSnfuKT7rxrKjEcHTSlsuyjKf1
C7hl0AxO9EMYZwSXWKna/bvPbK8FW1vfNOZuFWpueJwFNzYjVdSWFO2q6kRYB9Lg
TAD1x4vNEII+ti8UqvWOHCfRrP1WpbaHA1ylwN/0ZTNehR7WeLquIG6RFBEcTVd8
Hw9nqN5+jdqdqVwfFnooR3QK/nCHBc9P0NU9s1oT5688lXncXlPBhC8azw+/dfyM
gLNYN5lkk5xA/4t9nCvA2ruw+lBB9xtmvuq62jpZw1X0YCTYbXZQgP1nGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVRBK85ALfLRiO8DDbFYW5Cz2taMB8GA1UdIwQY
MBaAFPVL+wGwPKpvzoh7Q4QlPbIOWfpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGIt
YWMwNTk4ZWMzNDJmLzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGItYWMwNTk4ZWMzNDJm
LzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5gX+xP4
j79B4YD1OboU0IzMTHFK5Ae4n20hCWkmiB2x9lKYSnojpG/3VCe5OUlD+QxLl+Il
dpsV0pZigI6m2P+HHpciueWSduU7GfOq3bfE4Fm+Rk2maG86E7rB0v+IjnGCqY9x
hJ4J9nkg/fA3zG+k/HgjaHEBJQiiQUNLtXZsnWtTkfWigVP7YAHGM9V5zO73SM9N
ZVM321J36UW5MjAHnTo0MDuybV0GykVfRcDQHcRAChgBSIkL+m9hb3+CUp7EdkOI
c+t/Ot8Ip0Mw2Q4rYLzIw664tffneJ5bCi1rx9b6z8RV1lRsrHd/2CLIBqLbrr2u
VI1V3pkFDBoSMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:01 2026 by rpki-client