Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          uAmqmEZTtmwXWugSFmvH0kVHxug9l+a+FdadvNX3hlo=
Subject key identifier:   30:CD:34:75:16:8D:63:AF:9B:04:B6:7B:37:EA:F8:00:60:13:94:5F
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       019D37F6F128F51F7C43E39E7582D75E3A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 05:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:23 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: 0iMaTvDxXdztk0F6daZdw49ocFmizHGFbBt9Sdb8a9I=)
                          2: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (hash: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:f1:28:f5:1f:7c:43:e3:9e:75:82:d7:5e:3a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: Mar 29 05:00:23 2026 GMT
            Not After : Mar 30 05:00:23 2026 GMT
        Subject: CN=30cd3475168d63af9b04b67b37eaf8006013945f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:21:00:27:1c:3a:7e:66:60:23:4f:53:67:73:
                    7a:60:31:a5:c6:e0:a8:a8:eb:7b:76:7a:f1:f1:28:
                    e9:8b:2c:62:e5:11:fb:f1:7b:0f:04:6b:94:81:d4:
                    3b:44:f9:59:8b:db:c5:c7:d0:b1:44:47:d1:ef:03:
                    e7:e4:07:17:37:50:78:34:52:8a:9d:c8:b4:45:76:
                    4c:7a:af:84:32:fe:5c:66:7a:f3:3a:09:a7:78:5e:
                    70:b4:c5:5b:dc:36:69:77:56:7d:99:ca:3d:c0:46:
                    7a:6e:98:d7:ec:34:33:6d:3f:a8:ce:f0:87:23:44:
                    c0:ab:1d:b8:69:55:81:af:40:01:dd:97:6b:87:c8:
                    40:0a:96:d7:ee:aa:8a:eb:d3:da:ba:cb:86:43:65:
                    be:15:3e:42:39:d4:02:25:8b:95:4a:56:77:06:17:
                    6f:6f:e8:55:0a:1b:58:1b:d2:17:6c:39:61:db:9f:
                    a9:27:d3:dd:d6:e9:c8:f8:c3:91:1f:69:15:a5:47:
                    57:24:ec:d7:54:8d:d8:90:f3:74:35:17:d1:82:3d:
                    3d:64:ed:9d:bf:e1:f9:2b:27:9a:c3:71:e1:72:a1:
                    f3:70:d9:3c:f3:74:0b:0a:3f:3d:55:5d:3f:10:89:
                    48:10:1e:85:26:fd:3a:37:bd:60:b0:e3:a0:f4:c4:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:34:75:16:8D:63:AF:9B:04:B6:7B:37:EA:F8:00:60:13:94:5F
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:d9:da:ee:a9:79:ae:e5:d5:07:10:2d:4d:bb:cc:a6:c5:
         11:00:af:33:2a:84:c5:24:d4:03:56:8f:b5:a2:07:be:01:5a:
         09:9c:c9:a2:13:80:8d:51:47:0f:88:e0:89:43:c5:cc:b5:f0:
         fb:25:94:b4:b8:05:c8:99:cf:5a:58:ef:dc:6d:6c:49:6a:9d:
         3c:3d:2f:3d:0e:d8:ee:7b:64:7f:d9:8f:dd:d9:69:3e:d0:e8:
         ad:50:e8:39:e4:d6:37:0b:14:ed:0c:d2:ea:25:e6:1d:1b:4f:
         1a:5e:6f:34:36:36:8d:0a:e6:9a:14:74:68:ba:e3:71:87:f4:
         41:f6:b8:f7:e2:5d:f9:cc:d3:8c:fa:86:4d:93:1c:78:23:c9:
         78:3a:7a:4e:0c:b9:6a:eb:27:64:0a:2f:03:c8:55:4c:e0:1a:
         89:d1:e4:91:4e:56:e4:29:6c:4d:fd:c4:4c:1b:d2:c1:36:1d:
         9d:31:cb:43:ce:ff:70:66:0a:d1:93:19:6c:2f:c1:a5:74:c0:
         63:09:9d:15:91:df:71:cf:4d:88:8d:ad:ad:48:55:63:98:09:
         bc:17:05:a2:86:a4:9b:a6:77:be:2d:d0:39:89:62:88:e4:dd:
         e8:e0:d0:b6:91:76:d6:bb:1e:96:27:3d:91:b7:0f:a6:e7:76:
         ed:ae:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:51 2026 by rpki-client