Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
File:                     mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json)
Hash identifier:          QAVQisVxG3zvIahwt8gscLIilv+fkZ2U+Pmxg9BZkRI=
Subject key identifier:   51:E1:01:30:05:44:C6:4F:C9:63:85:15:53:64:B8:56:EE:16:5F:FC
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Certificate issuer:       /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial:       019D39414FF01B6F5D249F03CF08105FEDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 11:01:14 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:14 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:14 +0000
Files and hashes:         1: 5mevMZ6zfxkx-6wdz4bsftQO_GU.roa (hash: P9cZpqJMiI+LCnBsIg75xPvytqlb9VxBjd2D4dIOJhM=)
                          2: 6hi5SBPtuCCc_Ra34G-rijGpoCE.roa (hash: /JJ4SHMG/BtsEG8R3qP/R1q0vHL7SIp89pxXLWjsFg8=)
                          3: _N4R_5nFKyrUydAv5kfyq_YCjA0.roa (hash: yEWgrCGd25JxNB4GGLGD4iJWhDTz2tIiDjFlu5zF5t0=)
                          4: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: ObN/cIol+P/iAU14OQlqR1efwI7DerGKx+14m5TSPyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:4f:f0:1b:6f:5d:24:9f:03:cf:08:10:5f:ed:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
        Validity
            Not Before: Mar 29 11:01:14 2026 GMT
            Not After : Mar 30 11:01:14 2026 GMT
        Subject: CN=51e101300544c64fc96385155364b856ee165ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:cc:53:28:70:18:29:42:1b:0d:89:8e:4d:
                    f2:ed:d8:35:3f:88:79:04:2d:0c:f3:6b:07:0e:78:
                    0b:9f:2f:b5:33:c9:4e:77:b5:c4:5f:54:36:2a:37:
                    62:39:b0:81:ca:bf:ea:e0:9a:09:e5:35:63:a7:4b:
                    8f:86:6e:75:9a:e8:33:68:f5:97:22:fb:df:60:d4:
                    53:3d:9a:d3:26:bb:42:64:bc:ec:44:61:ee:44:6d:
                    42:3f:3a:ec:a4:84:45:14:b5:dd:01:d6:17:99:af:
                    61:53:f0:6d:1c:93:18:40:f8:b8:d2:d9:85:38:23:
                    5a:73:9a:c3:b7:cb:f3:73:32:b0:f0:f9:46:cb:94:
                    6b:c6:e1:ff:e0:8a:39:7c:be:9b:fd:e2:49:01:38:
                    75:90:fc:98:a0:fb:50:a1:83:3e:a9:56:a8:b8:d2:
                    bb:8e:98:3a:cb:93:56:e5:cf:e9:3b:58:91:c0:e2:
                    47:e0:19:e2:3f:8d:3e:a9:5f:c6:0a:9f:f2:e3:84:
                    40:28:28:4f:90:a1:11:49:4d:e2:d0:6a:12:64:33:
                    64:96:4f:cc:e4:d0:de:21:60:71:f4:55:5a:16:8b:
                    96:18:2e:a3:35:1d:ab:96:96:b4:7f:c9:92:46:8b:
                    53:5f:85:16:a8:4a:6b:78:b1:59:d5:a9:6f:26:01:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:01:30:05:44:C6:4F:C9:63:85:15:53:64:B8:56:EE:16:5F:FC
            X509v3 Authority Key Identifier:
                keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:b4:c6:d9:14:09:4e:9f:63:64:79:5b:32:80:21:ce:88:
         0d:46:74:7f:71:b6:bc:be:9d:d4:08:56:ed:7f:82:cc:ef:3b:
         ca:a5:54:26:32:0c:7e:ef:07:7c:96:a9:8b:e1:b7:a3:a7:13:
         d9:d9:c0:9a:15:aa:e8:0e:e4:68:2e:40:2a:fb:70:38:9b:86:
         1a:44:4f:df:91:e1:8b:c7:66:50:96:34:3d:1b:e5:93:61:9c:
         c1:01:b8:d4:ca:d4:1e:db:ba:93:e6:ea:38:10:d7:64:e5:ec:
         46:80:0e:54:3d:dc:20:76:c9:17:ab:ec:05:e4:10:b4:4f:3b:
         1c:ad:c9:a4:d3:5a:6b:ba:a0:cd:f9:19:a4:81:c9:81:0e:a9:
         cc:7a:86:98:cb:1a:6b:93:a4:f5:22:b7:53:67:61:0c:22:da:
         f5:60:57:f4:00:7c:98:3e:22:47:cd:03:88:16:61:40:2b:ff:
         a4:0f:22:42:3c:3f:ef:42:0d:98:5e:90:3d:56:8f:31:82:e9:
         0d:d0:6a:14:15:21:00:53:69:04:e8:eb:86:00:4c:77:ed:6f:
         2f:35:75:83:d9:02:38:37:52:63:60:71:d2:6d:17:7b:d7:4a:
         e4:2a:b5:dd:d6:f6:47:14:e6:7d:2e:07:b6:59:69:1c:72:d6:
         e5:b7:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:36 2026 by rpki-client