Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          vsQpFMfLzVPMR+GrBnVzL4q/IFgiY4yDv3C7NwKcyU0=
Subject key identifier:   DD:BC:3B:50:9F:55:C6:B6:32:B5:73:65:7E:EA:2B:D2:BD:DE:38:58
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       019D04E5551AD136171AF1BE2997D83C7E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          187B
Signing time:             Thu 19 Mar 2026 07:00:31 +0000
Manifest this update:     Thu 19 Mar 2026 07:00:31 +0000
Manifest next update:     Fri 20 Mar 2026 07:00:31 +0000
Files and hashes:         1: 3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa (hash: +nC3QJ9RCWlqRE3Uosm7QmqFU0HBkZbw83GEtUPhBdQ=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: CegPWl4NsEmP5Yn2c7Y/uypT9xASxJTzsWFM+uQkKWY=)
                          3: _7qWKS1csoWUqUsFNNOiL6451ys.roa (hash: /iDif7LQhjMSe8pOojFBssleDtOr1vNWkexVpZHh8kU=)
                          4: nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa (hash: ygakFRiKlCc1AsCZ9QHkHBLmK3WGXgznTKZOHRqQphU=)
                          5: uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa (hash: pfVCme09A/8wk/MnxkHB5VKNGtvo4YKdgY3uHx7H4D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:04:e5:55:1a:d1:36:17:1a:f1:be:29:97:d8:3c:7e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: Mar 19 07:00:31 2026 GMT
            Not After : Mar 20 07:00:31 2026 GMT
        Subject: CN=ddbc3b509f55c6b632b573657eea2bd2bdde3858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:1b:71:3a:27:84:19:1b:df:cb:5c:72:ed:
                    d6:78:1e:e5:44:df:be:c0:15:2b:6e:31:c0:74:a4:
                    84:d1:b3:32:b2:8f:6f:19:bc:40:fc:46:a8:db:46:
                    ff:1d:54:30:c5:4a:3c:e9:76:5e:d3:10:1f:f8:ff:
                    ad:93:e5:cf:89:ba:d3:d5:b7:2a:9b:d6:ab:34:0f:
                    76:1b:bb:e7:6e:ea:ef:59:e5:6e:14:13:4d:e9:0d:
                    d7:8b:97:ce:5a:76:f6:29:96:20:c2:fc:f9:a6:01:
                    22:1c:29:c7:51:87:dc:14:8a:27:d9:e9:21:9f:6c:
                    4c:3c:70:7f:a7:d2:2a:4c:02:78:3b:33:ed:ab:b6:
                    ef:6a:0f:1f:95:b5:33:ab:1b:95:fe:d6:67:bb:16:
                    a5:2f:27:cf:b2:23:25:5e:83:63:3b:a2:e3:ab:07:
                    98:2a:6a:15:4a:be:c1:16:6a:4b:05:f5:68:f4:f8:
                    ad:9b:a0:b5:b9:f2:4b:10:52:ea:40:dc:19:65:86:
                    d7:c9:ce:90:b3:2a:06:02:77:77:2a:61:47:0a:8d:
                    02:2f:fd:14:e6:ad:07:a6:93:a0:84:d8:58:96:b1:
                    ee:06:d1:c3:45:8f:ab:dc:f2:8b:5a:1f:27:cb:99:
                    90:81:f5:7f:ca:4a:88:6f:25:e6:3f:06:59:6f:f3:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BC:3B:50:9F:55:C6:B6:32:B5:73:65:7E:EA:2B:D2:BD:DE:38:58
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:f1:61:69:03:dd:45:e9:f5:76:18:7b:38:50:7c:4f:eb:
         2e:57:ff:d5:bf:71:4f:49:4f:32:0a:08:40:bd:b5:26:bc:c9:
         db:ca:e9:57:ab:da:6f:20:43:92:d6:71:ae:83:ac:7a:f1:81:
         38:4f:91:7b:15:69:96:98:07:f4:02:2c:42:3f:b5:65:b8:67:
         2d:39:54:4c:16:6f:14:aa:64:b0:b3:c4:1e:83:16:1d:94:b7:
         3a:fe:a4:93:1f:39:02:30:d9:0b:52:eb:4d:29:6c:5e:71:f3:
         8a:c9:bb:8a:36:11:1b:50:3f:40:e4:53:be:ab:ad:fb:35:39:
         58:6b:eb:61:e5:d6:c1:19:d0:55:91:06:1f:71:51:fd:82:41:
         30:1d:c0:ee:80:02:9a:23:a8:4a:20:60:10:b0:40:56:10:0f:
         89:da:f0:b9:f3:eb:91:f1:17:57:79:60:da:32:f1:36:15:1c:
         29:ab:1f:2b:e2:06:74:ed:35:19:52:38:82:73:8f:93:72:9c:
         5d:2b:53:e6:bb:07:ca:7f:b1:d7:75:33:d5:55:58:99:ef:45:
         5b:19:d5:e2:b8:bd:6c:64:8c:e0:49:db:a4:b7:8b:5d:ed:d7:
         f5:b1:87:c8:df:6a:84:bb:78:a4:2a:7d:e4:68:b6:4c:38:6a:
         c5:55:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:22 2026 by rpki-client