Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File:                     p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier:          +PMt8Dgo0hcICwjP472YeAjhMT4zsJpw9H171G2iyq4=
Subject key identifier:   76:0E:24:47:27:35:AD:DD:CE:7F:18:0E:FA:7E:C3:05:D0:D5:0A:B6
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer:       /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial:       019D37C05388AC449E274FE74E4699337B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 04:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:44 +0000
Files and hashes:         1: hMyApwMrzeADs4JM-qIwJsPE4j4.roa (hash: N+rY5dKbfdkSmOrM2ag355sQkPNPr9/XUkupxhQWn1w=)
                          2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: jNnUUpo2YWUwknJDe9gktrvbK8ieYuG8JcOp/RJoguY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:53:88:ac:44:9e:27:4f:e7:4e:46:99:33:7b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
        Validity
            Not Before: Mar 29 04:00:44 2026 GMT
            Not After : Mar 30 04:00:44 2026 GMT
        Subject: CN=760e24472735adddce7f180efa7ec305d0d50ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:9c:e4:17:62:1d:63:92:5c:d2:00:75:60:
                    a6:fa:42:57:a0:84:aa:fc:42:c3:ac:5b:24:ee:98:
                    da:43:b5:f1:1d:d2:a5:da:fb:ef:6f:f4:d0:0a:d4:
                    c2:f9:e5:55:d6:d0:7a:38:d3:25:80:ba:90:14:b6:
                    c0:c7:4f:b3:29:6f:25:4d:d7:1c:0c:ea:fb:f1:09:
                    5e:f4:61:7a:d1:f2:57:e6:a3:52:cd:ac:fa:68:51:
                    3d:92:44:7d:db:1f:09:e9:2f:fe:64:f7:0c:af:62:
                    88:89:95:15:3e:90:67:e9:af:59:b6:ad:e4:41:1d:
                    9f:f0:5a:59:c5:88:22:15:8a:94:56:31:d8:11:20:
                    04:63:2a:d1:0b:60:14:35:3e:62:c0:dd:10:c7:fc:
                    3d:60:55:45:ab:dc:0c:2a:70:27:6e:c4:a7:d4:a1:
                    78:c3:13:cf:0f:00:9d:31:91:ad:b0:f9:a1:e5:eb:
                    5f:6a:9b:ff:c7:dd:58:8a:14:bc:c4:6c:e2:33:e2:
                    ee:15:83:05:20:89:5f:c9:ed:52:bb:0e:4d:b3:b2:
                    a2:c3:b2:8d:9d:4f:f0:05:91:d5:d6:4f:74:6d:c8:
                    b6:b7:6f:7f:26:33:e3:1b:c9:61:08:df:d9:a3:e1:
                    c1:82:60:1a:86:96:f0:fc:45:63:83:79:cd:bf:cf:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0E:24:47:27:35:AD:DD:CE:7F:18:0E:FA:7E:C3:05:D0:D5:0A:B6
            X509v3 Authority Key Identifier:
                keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7f:90:67:dc:54:bf:4b:43:44:63:39:3d:94:72:05:c9:f3:
         7f:86:05:90:3f:48:bb:3e:e3:85:91:39:da:b7:4c:62:0c:52:
         bc:93:fa:28:ea:b4:ab:f1:2c:f9:c3:c7:be:24:c7:fe:d7:95:
         a7:2c:5d:e2:49:72:77:1a:3b:3c:f7:32:a9:f8:64:a2:ec:5a:
         fa:3f:bd:ab:00:19:65:d4:d6:51:ef:a4:04:dc:14:3c:5f:bf:
         80:9a:0a:dc:02:d6:36:f7:3f:ca:dd:f3:a7:a1:f0:65:f2:9c:
         45:10:f5:4f:bb:4b:1a:81:3e:96:ae:08:21:17:45:ba:9a:b3:
         8b:06:31:8e:e9:97:08:56:bf:6f:38:d0:89:28:b6:99:c8:25:
         32:ae:73:ea:61:7f:68:db:f4:81:3f:fa:72:ef:3f:0f:7f:1c:
         a9:bf:ab:a5:7e:6f:0d:01:35:61:43:bc:d2:da:48:61:b1:a2:
         52:dc:8a:0a:8f:92:a0:f1:77:ad:9f:4e:f1:3f:9f:9c:58:81:
         01:47:4e:02:c3:2a:ec:37:c0:cc:fc:78:f1:d1:c6:52:96:34:
         d4:f5:2f:59:3b:3f:da:73:a8:63:94:2e:eb:42:88:94:70:69:
         39:08:4b:b7:2d:e9:f7:02:2f:b8:14:6c:94:ae:5a:7f:ce:52:
         3b:0e:97:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFOIrESeJ0/nTkaZM3sdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWRhMmE1YmQ4Nzc4ZGI2MjIxZDdiZjY2MTJkYjBlMGZl
ZjE3NjQwHhcNMjYwMzI5MDQwMDQ0WhcNMjYwMzMwMDQwMDQ0WjAzMTEwLwYDVQQD
Eyg3NjBlMjQ0NzI3MzVhZGRkY2U3ZjE4MGVmYTdlYzMwNWQwZDUwYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEmc5BdiHWOSXNIAdWCm+kJXoISq
/ELDrFsk7pjaQ7XxHdKl2vvvb/TQCtTC+eVV1tB6ONMlgLqQFLbAx0+zKW8lTdcc
DOr78Qle9GF60fJX5qNSzaz6aFE9kkR92x8J6S/+ZPcMr2KIiZUVPpBn6a9Ztq3k
QR2f8FpZxYgiFYqUVjHYESAEYyrRC2AUNT5iwN0Qx/w9YFVFq9wMKnAnbsSn1KF4
wxPPDwCdMZGtsPmh5etfapv/x91YihS8xGziM+LuFYMFIIlfye1Suw5Ns7Kiw7KN
nU/wBZHV1k90bci2t29/JjPjG8lhCN/Zo+HBgmAahpbw/EVjg3nNv8+tuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYOJEcnNa3dzn8YDvp+wwXQ1Qq2MB8GA1UdIwQY
MBaAFKedoqW9h3jbYiHXv2YS2w4P7xdkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYt
ZTZiYmVmNWQ1ZTNlLzEvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYtZTZiYmVmNWQ1ZTNl
LzEvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX+QZ9xU
v0tDRGM5PZRyBcnzf4YFkD9Iuz7jhZE52rdMYgxSvJP6KOq0q/Es+cPHviTH/teV
pyxd4klydxo7PPcyqfhkouxa+j+9qwAZZdTWUe+kBNwUPF+/gJoK3ALWNvc/yt3z
p6HwZfKcRRD1T7tLGoE+lq4IIRdFupqziwYxjumXCFa/bzjQiSi2mcglMq5z6mF/
aNv0gT/6cu8/D38cqb+rpX5vDQE1YUO80tpIYbGiUtyKCo+SoPF3rZ9O8T+fnFiB
AUdOAsMq7DfAzPx48dHGUpY01PUvWTs/2nOoY5Qu60KIlHBpOQhLty3p9wIvuBRs
lK5af85SOw6XGg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:54 2026 by rpki-client