Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File:                     eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier:          haq+OPn8XmkYu/LbSqI+Ftt/IAgcHBX/iM2Z3pMi47w=
Subject key identifier:   F3:AB:0F:0D:09:FB:77:29:1F:36:75:31:F3:C9:AB:87:FB:94:5B:53
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer:       /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial:       019D38D3B841425C5298B9C92E57DF81ED20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 09:01:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:32 +0000
Files and hashes:         1: SVRG13qKLtkzZ7xaiN4uxzkXNhs.roa (hash: VPDmIAQy3HDkJPWlWJozVLwRBhg5jx5dxfsVwJCTd0I=)
                          2: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: +P4HOj4R8w4yNp8LUn8vYNj1GMCQK/azbJXinHsl9J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:b8:41:42:5c:52:98:b9:c9:2e:57:df:81:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
        Validity
            Not Before: Mar 29 09:01:32 2026 GMT
            Not After : Mar 30 09:01:32 2026 GMT
        Subject: CN=f3ab0f0d09fb77291f367531f3c9ab87fb945b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:40:bd:f8:a9:6b:57:6c:5f:29:90:3a:75:
                    96:eb:69:fc:27:68:05:aa:2e:d4:90:06:87:0e:02:
                    bb:cd:32:9c:b3:e3:f2:47:92:6c:c1:22:37:02:4d:
                    b5:5e:eb:a1:b4:3d:43:a0:d5:6a:3d:64:8e:6a:1a:
                    e0:5b:a3:4d:4a:5a:d9:59:ca:ad:62:32:bf:31:5b:
                    7f:c2:72:a9:a7:22:1f:93:50:c1:a9:13:7e:b0:8f:
                    7d:63:f1:b4:77:9d:2c:4f:6e:0f:80:f8:14:77:11:
                    bb:de:7f:5a:4d:c3:8d:00:8b:ed:f0:81:14:65:2f:
                    8a:af:e8:e7:f6:76:c8:29:98:30:72:3e:78:d4:a6:
                    42:7d:12:2e:3b:3f:67:fb:1f:57:f7:28:f2:b6:6b:
                    a5:82:e1:0c:2a:5e:c7:0b:11:9f:b2:a8:1a:79:3e:
                    a7:32:c7:a3:e4:8a:b5:8e:53:65:0c:22:58:b2:ca:
                    4c:33:0e:c7:b3:a4:bd:16:52:89:f4:f1:dc:ef:20:
                    88:d6:10:35:73:bd:44:4e:6a:c8:98:81:2d:0b:11:
                    7c:9b:f8:1c:87:62:1d:df:1c:ea:c9:64:53:16:06:
                    e0:0e:b4:ee:7b:cc:5f:d2:52:81:c1:79:21:fc:b9:
                    10:a8:d0:37:12:5a:bd:71:7a:67:05:79:3c:a3:2d:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:0F:0D:09:FB:77:29:1F:36:75:31:F3:C9:AB:87:FB:94:5B:53
            X509v3 Authority Key Identifier:
                keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:19:5e:d6:ad:e6:ef:0a:cd:12:26:41:ce:4e:42:0b:f4:33:
         58:50:27:e6:55:1e:fe:29:2e:26:be:3f:41:b7:1d:d7:1c:f7:
         df:f3:46:2f:fc:53:f8:2b:f3:8b:10:42:fd:03:f1:00:5d:dd:
         dd:fa:70:43:af:c1:ed:d9:0e:33:84:4b:78:40:13:a2:38:10:
         32:ec:8c:c7:ff:2f:33:6d:78:91:56:f8:7f:5c:50:17:4d:91:
         57:a4:cf:c7:ba:bb:0b:58:1a:13:9a:62:0d:25:11:e7:31:c1:
         7a:0a:d4:e8:f8:40:bd:18:90:53:ae:5e:43:7d:27:d0:50:87:
         7c:78:5b:88:d7:d0:39:2f:e6:0b:d4:3f:a0:43:3f:00:9f:8e:
         5c:48:19:47:41:3e:84:24:b2:2b:c4:ba:15:88:02:d4:4c:46:
         2f:63:a4:ae:a0:f0:32:b6:18:f9:7f:b6:c2:ab:ab:39:f1:b4:
         b5:ee:26:c7:e5:3a:48:a3:06:72:0b:14:06:2b:35:60:6b:d6:
         59:c1:4f:d2:24:c1:67:64:08:66:ae:11:46:8b:84:63:f9:90:
         bf:77:d8:1a:d7:53:2b:78:6d:c1:62:1b:1e:e5:a2:0e:1c:57:
         7b:56:a0:76:bc:63:19:af:b0:0e:56:7a:1a:18:4e:b6:31:64:
         3e:f7:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:01 2026 by rpki-client