Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File:                     xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier:          id0ccYCEv+QkosnbXMbdmCLzKHkycNHBFAX2R+GqxZ8=
Subject key identifier:   F6:FD:A6:7D:4D:FA:7C:0A:B6:08:D2:5F:18:EC:E3:87:1E:48:AE:15
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer:       /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial:       019D38D3BB83D7F36CC15C87522657A12DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 09:01:33 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:33 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:33 +0000
Files and hashes:         1: nItQAnIAzb9o-_NFZpkYT1kwfQ4.roa (hash: Yl7knjFB/hvlbYhFm7QXcfKUixHSHJRe7GQrQlY6cTA=)
                          2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: O/SMaiowbr/4mvUD8wySLszi4rKOEq6jr+Mz0kOgXh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:bb:83:d7:f3:6c:c1:5c:87:52:26:57:a1:2d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
        Validity
            Not Before: Mar 29 09:01:33 2026 GMT
            Not After : Mar 30 09:01:33 2026 GMT
        Subject: CN=f6fda67d4dfa7c0ab608d25f18ece3871e48ae15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:04:c0:47:e1:fd:fd:49:0d:d9:f1:e2:53:
                    fb:be:a2:74:39:90:e0:e4:f6:76:e8:54:0a:19:de:
                    f9:fa:69:23:95:f3:e2:e8:90:bb:4e:19:bd:ac:88:
                    55:18:57:1d:9a:2a:7d:b3:bd:af:b5:6b:53:ab:dd:
                    bc:54:b2:37:2e:92:d5:41:a6:ab:7d:46:28:5f:2e:
                    fe:ff:e7:b3:0b:c1:eb:16:21:72:b4:eb:85:87:2b:
                    e5:32:45:65:6c:f4:d7:9c:c7:fd:ba:26:7f:5f:ee:
                    22:d7:2f:47:e7:bf:f4:b7:95:c1:b9:53:b8:c3:91:
                    f9:f1:ae:75:fb:d7:68:b8:1d:8a:a8:ea:0b:f2:27:
                    41:e5:5d:cb:99:97:9c:a0:40:61:8b:77:31:e3:ac:
                    d7:4f:46:b9:f3:b8:d3:5d:e9:fc:cb:fb:e2:26:bc:
                    1e:b7:48:25:ad:a9:f9:02:ac:50:92:c7:e5:63:d5:
                    92:72:b5:88:62:13:55:1c:8d:4a:2b:6f:04:f3:4f:
                    bc:90:63:f4:c6:7e:ba:ad:d0:c7:6c:af:97:f2:59:
                    b2:df:7c:42:72:10:62:af:21:a9:7f:61:49:31:bc:
                    df:38:be:42:c3:2a:12:b7:7e:c9:fd:2a:48:c3:d0:
                    1b:91:ec:b1:a4:ae:c0:ed:6e:88:ee:d0:fa:37:28:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:A6:7D:4D:FA:7C:0A:B6:08:D2:5F:18:EC:E3:87:1E:48:AE:15
            X509v3 Authority Key Identifier:
                keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:af:51:d5:99:f6:58:ae:bb:79:a3:4e:d4:4f:76:6a:31:ed:
         32:40:a9:54:2d:46:96:58:72:b5:3d:8f:96:45:2c:c6:a6:bc:
         41:e7:a1:4e:c0:a5:a3:79:67:76:1b:1d:c0:38:d2:c8:89:a0:
         36:79:0f:34:f7:23:a7:d8:a2:3a:69:ef:50:be:36:08:53:58:
         80:d6:bb:6b:9c:18:a0:0f:10:ea:12:af:84:dc:bf:63:f7:60:
         63:75:6c:67:fa:23:b1:eb:59:17:36:f5:f9:98:76:af:25:43:
         13:6c:df:e2:1c:7e:03:6b:5e:b6:0c:f9:37:9b:cf:67:0b:e6:
         df:82:9d:6d:ef:f6:82:18:6e:ef:5e:7d:0b:89:7a:09:b2:ec:
         2c:26:84:91:67:34:e4:8a:87:89:a4:2f:25:c9:d6:61:a5:65:
         18:23:25:ef:68:b6:49:94:8a:d3:b3:c5:1f:b3:aa:2c:f0:b8:
         42:19:79:b3:9d:3a:c8:e1:68:53:7f:6e:d7:1e:b3:d6:d2:45:
         c1:3b:a6:a7:02:d4:f1:da:5c:55:3d:12:08:14:df:4d:9e:5d:
         68:29:b6:c8:98:90:4b:d4:05:67:20:80:3a:19:ee:eb:07:ee:
         13:96:72:9b:7d:d6:04:0b:f6:6a:bb:34:1c:fc:70:21:ed:ae:
         e6:c8:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:50 2026 by rpki-client