Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File:                     j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier:          pHbuZqsuJiQ+b1I3a6eVGarXv/7m7CaHdi+/Mfd/Ccs=
Subject key identifier:   CE:E0:88:6D:1D:B1:6B:B8:8C:0A:A3:F7:94:B7:D6:74:CA:25:4A:07
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer:       /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial:       019D37C05827CA141F0155ACA74686717261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 04:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:45 +0000
Files and hashes:         1: 6hjRC5CVze9zc5X-ahmmHNfkYUE.roa (hash: MyI+C5KzfoPCsm1Iwk5YmiKlS7nD2ofoSW1+cSi8FPo=)
                          2: 7K9m9Kycpc1qpPWI_C3HXeWSciA.asa (hash: mkrh2h8wld/NXnmNI/HnVxSUQPGYzzYW0qlsCvuzWyk=)
                          3: gzObw2J4J3BeeVX0bL5o0YuIhUc.asa (hash: D5KeTzlvp8nEOE8QlkcJQrt0bgljUWnLu1dF7FqKvu8=)
                          4: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: Cv/2Nlvj8jwre48EatnX7lDMTXDUbNYrLZz/rCii7eY=)
                          5: tXAbUuk7SL2rOH5gbCm1KKsZ2vI.roa (hash: /jEXCHymtq+ciP4tXZBHOUmRqWEl2SIJoHoomzd+470=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:58:27:ca:14:1f:01:55:ac:a7:46:86:71:72:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
        Validity
            Not Before: Mar 29 04:00:45 2026 GMT
            Not After : Mar 30 04:00:45 2026 GMT
        Subject: CN=cee0886d1db16bb88c0aa3f794b7d674ca254a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:f0:bc:22:d3:40:af:fe:bd:50:37:0e:0c:
                    3d:0f:32:9d:da:cf:20:4f:00:c2:81:64:93:09:d8:
                    c3:4a:d6:10:e0:59:ec:ce:ce:7e:f1:90:38:84:e9:
                    e8:99:84:a7:c5:27:0e:32:0a:4e:05:dc:ea:06:d1:
                    0b:3d:64:01:23:45:8d:21:a0:64:4e:ec:77:45:4f:
                    37:36:81:4d:80:03:59:9c:71:a7:e4:d7:4c:4f:bc:
                    21:0c:09:9c:fd:49:8f:ee:e3:7f:ef:04:df:d9:d6:
                    f6:a5:fa:74:e2:36:d4:3e:8a:e4:4b:d9:01:8a:37:
                    59:01:26:c9:34:a3:63:1c:b2:5f:f6:17:72:8a:5d:
                    c5:ad:13:c7:33:8a:70:2f:f3:18:9d:d3:e6:70:f3:
                    b9:d1:56:56:b9:67:9f:20:f8:ed:c1:45:fb:42:05:
                    39:85:bc:1c:25:a5:6a:38:d1:84:5d:a6:ad:3b:7c:
                    d0:06:03:0d:78:f1:1f:5a:bc:65:1c:3e:b8:fd:9e:
                    e9:3e:22:aa:7c:5b:9f:1e:dd:bf:60:86:1e:60:aa:
                    ff:9b:12:4a:20:09:64:59:2b:5b:4e:7e:b1:06:a2:
                    61:fa:55:8c:fa:c0:44:b9:1f:c9:20:0a:e9:2e:f8:
                    09:05:02:f2:99:b9:db:38:11:0a:01:7b:28:d0:06:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:88:6D:1D:B1:6B:B8:8C:0A:A3:F7:94:B7:D6:74:CA:25:4A:07
            X509v3 Authority Key Identifier:
                keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:58:cc:3d:57:78:90:84:2a:74:e9:44:bf:73:b5:af:64:50:
         3e:08:58:70:58:fa:51:b0:48:54:c3:98:5d:6b:e1:43:ac:d1:
         a3:26:51:23:98:6b:36:22:55:aa:30:9c:8f:db:2c:3c:5a:bf:
         b7:fd:f6:a3:38:f2:7a:91:b4:25:17:dc:50:e1:dd:b8:02:d4:
         ef:9e:86:62:ff:50:23:b6:c5:e4:b3:44:6b:7c:3c:50:b1:92:
         47:66:35:04:c5:9b:da:39:d2:ff:5e:a5:76:c4:65:58:3a:3b:
         d2:3d:f5:24:f9:3e:7d:5c:99:17:39:4c:e3:0f:03:64:53:e4:
         22:2a:61:ad:89:f0:a9:4d:9d:69:2e:1f:ec:9e:54:29:ad:d9:
         30:98:d0:d6:8e:91:a0:d4:be:c4:08:41:58:74:66:6d:09:43:
         15:8e:89:8d:24:b0:e9:e8:56:99:31:0e:80:4a:c0:7b:a8:6a:
         98:07:85:d1:96:b8:f1:09:ba:79:24:44:d7:e7:33:d2:63:b8:
         d5:8a:ef:5a:58:f0:89:51:42:66:e0:26:f8:6b:8e:39:03:7e:
         3a:74:f2:5f:62:c4:be:b0:db:de:ae:fc:7e:4b:dc:83:38:9d:
         68:db:78:77:a4:66:4c:b6:b6:6f:44:fe:a4:66:37:6a:33:65:
         cf:c0:6c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFgnyhQfAVWsp0aGcXJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0
MGVkMmQwHhcNMjYwMzI5MDQwMDQ1WhcNMjYwMzMwMDQwMDQ1WjAzMTEwLwYDVQQD
EyhjZWUwODg2ZDFkYjE2YmI4OGMwYWEzZjc5NGI3ZDY3NGNhMjU0YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzrwvCLTQK/+vVA3Dgw9DzKd2s8g
TwDCgWSTCdjDStYQ4Fnszs5+8ZA4hOnomYSnxScOMgpOBdzqBtELPWQBI0WNIaBk
Tux3RU83NoFNgANZnHGn5NdMT7whDAmc/UmP7uN/7wTf2db2pfp04jbUPorkS9kB
ijdZASbJNKNjHLJf9hdyil3FrRPHM4pwL/MYndPmcPO50VZWuWefIPjtwUX7QgU5
hbwcJaVqONGEXaatO3zQBgMNePEfWrxlHD64/Z7pPiKqfFufHt2/YIYeYKr/mxJK
IAlkWStbTn6xBqJh+lWM+sBEuR/JIArpLvgJBQLymbnbOBEKAXso0AYnuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7giG0dsWu4jAqj95S31nTKJUoHMB8GA1UdIwQY
MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt
NjdjZmUzMDY3YjJhLzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh
LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKljMPVd4
kIQqdOlEv3O1r2RQPghYcFj6UbBIVMOYXWvhQ6zRoyZRI5hrNiJVqjCcj9ssPFq/
t/32ozjyepG0JRfcUOHduALU756GYv9QI7bF5LNEa3w8ULGSR2Y1BMWb2jnS/16l
dsRlWDo70j31JPk+fVyZFzlM4w8DZFPkIiphrYnwqU2daS4f7J5UKa3ZMJjQ1o6R
oNS+xAhBWHRmbQlDFY6JjSSw6ehWmTEOgErAe6hqmAeF0Za48Qm6eSRE1+cz0mO4
1YrvWljwiVFCZuAm+GuOOQN+OnTyX2LEvrDb3q78fkvcgzidaNt4d6RmTLa2b0T+
pGY3ajNlz8Bsrw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client