Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File:                     fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier:          Ed1OQxCHww4x0FX9Tc9oIFqTusSHtIuABpeEbMKTn+M=
Subject key identifier:   38:14:0B:97:C7:73:2E:C9:0D:79:F9:C4:A0:DE:C3:E6:ED:CA:2D:88
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer:       /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial:       019D3977B990A4F325183DF6533077EAD13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 12:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:40 +0000
Files and hashes:         1: 77KGr-jWWnEf5X0Fk60T9XqPSLg.roa (hash: +M5bEYeEO2YC5D8B5GtUZyIzSZI3N7hUGF3x/KpZoMQ=)
                          2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: Os9Wfl/HkhrpiQomzYbFdRRRXG8JQSlar7u7lULbAw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:b9:90:a4:f3:25:18:3d:f6:53:30:77:ea:d1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
        Validity
            Not Before: Mar 29 12:00:40 2026 GMT
            Not After : Mar 30 12:00:40 2026 GMT
        Subject: CN=38140b97c7732ec90d79f9c4a0dec3e6edca2d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:8e:dc:ec:ef:c0:21:8d:6e:b9:ec:76:73:f6:
                    c1:f0:56:4b:25:de:00:1b:1d:bb:f4:83:6e:ab:af:
                    8f:32:b3:9f:de:36:d2:e8:73:65:75:a7:71:2a:b3:
                    ec:5b:31:6f:a9:c0:64:e4:c8:2d:40:8b:79:85:3c:
                    1b:3b:44:41:d2:5e:d9:7b:e6:fc:ee:49:a7:28:fb:
                    1b:12:c9:92:63:49:6d:c3:a5:69:80:f9:69:6c:19:
                    ab:ef:00:2d:dd:43:5a:73:d9:8d:f7:f5:4e:89:1b:
                    ee:37:1c:b6:62:b7:65:39:55:e5:6e:74:75:64:32:
                    93:2e:01:45:9f:3e:6f:8b:eb:d8:34:af:26:2b:d8:
                    40:73:93:bc:e0:b2:b8:f8:1c:89:a4:4e:af:6f:64:
                    e7:0d:8c:a1:ff:a1:5e:9a:58:bb:dd:ed:c7:9e:c6:
                    07:d1:6e:07:12:49:7b:9c:79:72:f0:98:ed:0f:4a:
                    f1:eb:19:68:57:bc:e0:b0:70:22:d4:b1:3c:91:8f:
                    c2:6f:29:89:3b:91:04:5a:4a:dd:e2:5a:ed:29:44:
                    ab:36:2e:6c:9e:36:0d:51:24:a3:a2:e4:48:0c:43:
                    99:c7:23:27:7a:ab:3e:3f:2b:5f:a3:28:8b:a8:46:
                    fe:1d:7f:95:41:93:4f:83:e5:94:40:f4:c5:e4:52:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:14:0B:97:C7:73:2E:C9:0D:79:F9:C4:A0:DE:C3:E6:ED:CA:2D:88
            X509v3 Authority Key Identifier:
                keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cd:fb:87:33:13:1c:ab:8a:b4:52:5a:0b:f5:68:f1:08:ac:
         58:46:db:11:76:d7:7a:d0:fc:d9:fa:dd:a4:f7:77:8b:ea:af:
         db:10:42:86:e3:38:ac:d9:d4:06:1f:a4:aa:8a:0e:19:35:09:
         00:9b:a8:a1:c4:be:03:ab:3c:26:9c:b9:33:14:74:cf:c8:22:
         04:f5:5e:39:6c:53:a3:42:64:7a:a8:d9:cb:fb:20:bd:7d:d6:
         77:57:1c:9b:ac:4c:5c:c8:b8:40:85:42:d4:26:cf:34:63:91:
         0b:01:56:bb:04:e2:5a:d2:f5:89:d3:b4:e8:4f:81:26:19:05:
         16:da:cc:94:1f:85:cb:61:b8:d1:aa:0d:36:d3:70:70:e9:72:
         67:cf:89:00:27:57:3a:ef:a9:b2:e5:f7:8f:e2:d5:0d:c2:7c:
         0c:f3:ab:38:7c:de:cf:a1:50:f1:82:80:dc:a9:06:b9:1c:34:
         33:16:2d:18:2f:da:12:f4:01:4e:36:0e:36:02:66:40:da:e2:
         5e:15:7e:95:47:07:d9:72:c4:4c:45:a0:cd:e0:3e:c8:7e:cd:
         ce:4f:3c:b9:26:ef:d0:43:15:f4:b3:6b:bd:69:a4:9a:69:42:
         74:26:ec:7f:a9:25:a3:b6:d9:d8:2b:7c:63:ad:23:d8:9e:8a:
         ce:d2:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:15 2026 by rpki-client