Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          WQhauySQfvpzJnyDgHDCWe6+Hn5iBgdBbd6MMPC8Cvk=
Subject key identifier:   AF:93:F1:8B:DF:04:68:11:79:3E:FC:3D:0A:B5:66:E7:33:1F:84:B5
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       019D390A44079F9ECA99350A52366FA87D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 10:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:07 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: pnoT0odGcG56QcFk7AqKM9pW6T3Al53yfpFHwpxdtz4=)
                          2: Tg_Dvwbj2a0giZ29M6thrWU6Se0.roa (hash: nS+lJMCTTSoBDgGB69Pa9qofzjkEPFjXW3VnnoLfVLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:44:07:9f:9e:ca:99:35:0a:52:36:6f:a8:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Mar 29 10:01:07 2026 GMT
            Not After : Mar 30 10:01:07 2026 GMT
        Subject: CN=af93f18bdf046811793efc3d0ab566e7331f84b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:13:19:4d:c3:58:49:b4:c5:92:f7:9f:fe:
                    65:73:e8:34:d1:3f:67:1e:2e:59:66:95:d5:45:a7:
                    38:47:38:6c:b7:78:ca:14:d0:27:cd:23:e9:c6:00:
                    e1:dc:b3:f9:5b:69:cd:24:99:05:aa:f5:b4:bc:b9:
                    99:14:60:9d:a0:c1:58:ee:c5:fd:ac:a2:65:52:77:
                    26:80:47:3b:7d:1a:7a:04:97:46:ef:2d:5d:22:93:
                    5d:88:51:19:cc:ee:60:69:fd:67:85:a9:94:83:20:
                    fe:7e:3b:17:c7:d4:28:ee:08:7c:09:0c:f2:08:06:
                    08:11:c2:39:0b:5d:73:a2:19:90:d7:12:37:84:18:
                    4a:2b:05:3a:92:5c:3e:15:46:d6:42:9a:0b:37:10:
                    1c:92:32:99:af:8d:55:c4:66:1e:ff:8e:81:9c:a7:
                    7d:d7:3e:c4:9b:9b:25:bc:35:41:15:5c:48:8d:6f:
                    fd:42:2c:8d:ae:ae:48:5d:6f:ba:0c:bb:38:2f:fb:
                    97:66:16:44:6e:4d:5a:51:26:f7:f0:78:66:ad:23:
                    03:b0:6c:fd:2d:5d:e8:2d:69:f2:c6:89:7e:c2:e9:
                    42:4c:8f:04:4a:f5:16:d5:60:b2:20:2b:83:63:af:
                    c8:0a:86:c8:af:ae:b9:01:ac:96:bf:b2:59:f3:d9:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:F1:8B:DF:04:68:11:79:3E:FC:3D:0A:B5:66:E7:33:1F:84:B5
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1e:b1:36:63:30:a3:eb:89:b1:18:e2:8f:00:95:cd:ad:d7:
         8e:3d:91:95:12:94:d4:78:2d:bd:47:22:de:af:fe:43:6d:80:
         ba:85:a8:a1:11:97:97:e6:b7:08:d1:d0:d9:50:72:98:56:b3:
         08:26:59:6a:03:39:8c:07:3a:2f:77:c7:97:fa:f5:aa:71:24:
         6a:9c:f2:f2:eb:ca:55:ac:91:4f:28:10:7e:fa:04:6e:d0:d2:
         d1:92:40:e0:a7:05:ce:7d:0d:14:be:5d:6d:81:52:03:0a:3b:
         08:77:d6:f4:28:25:50:26:17:e0:42:f2:79:41:bd:10:7b:d5:
         2f:5a:63:b2:19:90:c9:b8:bb:7f:41:45:ef:4c:fd:cc:71:44:
         d4:70:dc:e9:c9:e1:88:ca:09:0b:0c:4f:f2:2d:5c:b5:6f:0b:
         99:0b:64:c1:61:44:c6:76:a8:20:bd:05:6a:a8:3f:60:8c:45:
         91:96:b9:cd:72:77:f2:6f:fe:76:cf:65:c2:4e:ce:0f:02:8b:
         e1:22:78:80:89:fc:83:fe:02:af:0b:f3:16:53:a4:b3:6b:22:
         f5:19:30:bb:41:92:8b:da:69:de:61:e8:fa:b9:35:5d:f7:c1:
         e9:c6:0d:95:49:bc:57:f0:5e:6b:10:83:65:f5:38:91:e8:7d:
         7a:35:fc:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CkQHn57KmTUKUjZvqH1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZGFlM2VmZTBhMzY3OTdkYTQzY2JkNThmNmRmZjk5YzNi
YmRkOGQwHhcNMjYwMzI5MTAwMTA3WhcNMjYwMzMwMTAwMTA3WjAzMTEwLwYDVQQD
EyhhZjkzZjE4YmRmMDQ2ODExNzkzZWZjM2QwYWI1NjZlNzMzMWY4NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPoTGU3DWEm0xZL3n/5lc+g00T9n
Hi5ZZpXVRac4Rzhst3jKFNAnzSPpxgDh3LP5W2nNJJkFqvW0vLmZFGCdoMFY7sX9
rKJlUncmgEc7fRp6BJdG7y1dIpNdiFEZzO5gaf1nhamUgyD+fjsXx9Qo7gh8CQzy
CAYIEcI5C11zohmQ1xI3hBhKKwU6klw+FUbWQpoLNxAckjKZr41VxGYe/46BnKd9
1z7Em5slvDVBFVxIjW/9QiyNrq5IXW+6DLs4L/uXZhZEbk1aUSb38HhmrSMDsGz9
LV3oLWnyxol+wulCTI8ESvUW1WCyICuDY6/ICobIr665AayWv7JZ89m7WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+T8YvfBGgReT78PQq1ZuczH4S1MB8GA1UdIwQY
MBaAFOba4+/go2eX2kPL1Y9t/5nDu92NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt
NmMyZmZiNGI2MWU2LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2
LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOx6xNmMw
o+uJsRjijwCVza3Xjj2RlRKU1HgtvUci3q/+Q22AuoWooRGXl+a3CNHQ2VBymFaz
CCZZagM5jAc6L3fHl/r1qnEkapzy8uvKVayRTygQfvoEbtDS0ZJA4KcFzn0NFL5d
bYFSAwo7CHfW9CglUCYX4ELyeUG9EHvVL1pjshmQybi7f0FF70z9zHFE1HDc6cnh
iMoJCwxP8i1ctW8LmQtkwWFExnaoIL0Faqg/YIxFkZa5zXJ38m/+ds9lwk7ODwKL
4SJ4gIn8g/4CrwvzFlOks2si9Rkwu0GSi9pp3mHo+rk1XffB6cYNlUm8V/BeaxCD
ZfU4keh9ejX8+Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:09 2026 by rpki-client