Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          /g0GQ50dE9LGR/4G3v4KI3yVRYV6aCgWBw2VgtMBPS8=
Subject key identifier:   71:54:D7:7D:2B:7D:A7:50:FE:95:CB:27:FE:12:36:78:1B:16:69:5D
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019CE1B4CFBCE720027432079968272A9B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          188E
Signing time:             Thu 12 Mar 2026 11:00:49 +0000
Manifest this update:     Thu 12 Mar 2026 11:00:49 +0000
Manifest next update:     Fri 13 Mar 2026 11:00:49 +0000
Files and hashes:         1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: gxds72493N22LwsM06mVuostk6ITrJ2gfmljkTzHKh8=)
                          3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
                          4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
                          5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:b4:cf:bc:e7:20:02:74:32:07:99:68:27:2a:9b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Mar 12 11:00:49 2026 GMT
            Not After : Mar 13 11:00:49 2026 GMT
        Subject: CN=7154d77d2b7da750fe95cb27fe1236781b16695d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:50:0e:81:2d:41:79:50:df:1e:31:85:ba:
                    eb:94:23:81:5b:84:4b:7e:02:7d:56:e5:a4:ac:c8:
                    2b:26:b8:4c:50:5d:73:0b:31:10:82:5e:36:2a:8e:
                    30:8a:8d:4a:a2:ec:86:29:5d:b2:ac:fd:ef:aa:94:
                    d4:8f:ab:74:db:1d:40:72:c3:c0:42:38:c4:ec:ec:
                    47:3d:07:2e:ab:3b:63:50:92:39:bf:49:72:ae:58:
                    4d:1f:d3:aa:85:3b:75:07:f4:aa:25:f9:c4:8e:02:
                    a8:75:05:97:b1:08:8e:2e:fa:bd:08:cb:64:d6:95:
                    21:52:d8:9d:52:f4:7b:39:e9:01:05:f2:ea:a6:fa:
                    64:f5:a9:6e:58:84:fb:88:b0:e4:11:d4:d2:9c:22:
                    6a:e8:5d:73:b1:bb:84:67:35:31:63:54:82:da:75:
                    b2:85:e0:cf:d4:26:1e:c8:c7:9b:f5:f6:57:41:35:
                    0a:7f:ab:69:25:84:f8:0c:c0:24:9a:44:4f:30:bf:
                    9c:95:bd:58:30:aa:85:d0:52:25:12:ac:87:08:29:
                    71:e3:5c:7b:e3:a3:2a:8b:00:69:ce:48:b3:ea:5f:
                    7f:1a:31:fe:95:8f:ad:c1:bd:c6:94:27:ae:5d:19:
                    0f:93:8a:48:99:1d:04:f7:8a:89:de:33:9c:e3:43:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:D7:7D:2B:7D:A7:50:FE:95:CB:27:FE:12:36:78:1B:16:69:5D
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:eb:7b:6f:f3:1e:6f:a5:03:bc:fa:8f:f8:8a:07:7b:2f:
         a3:77:6c:b8:d4:3e:33:6e:56:dc:99:af:22:35:77:89:5b:be:
         50:8f:ac:df:a1:46:4d:71:f1:a9:ed:59:fe:4f:49:67:79:d8:
         67:30:6e:8d:cf:30:5b:c7:ef:d6:1f:27:4c:37:c9:94:c3:2e:
         0c:f7:fb:8e:a9:59:b8:00:e4:39:34:92:82:24:01:20:6d:27:
         35:a5:b0:48:8e:50:66:6f:5d:ad:79:bc:a1:a9:f6:73:31:ff:
         b8:68:11:65:73:55:fd:4c:6c:f3:43:55:ba:7c:fa:c7:0a:6d:
         8a:f2:fd:cd:c8:41:15:2f:5f:25:15:a8:c2:75:1d:93:cc:cf:
         92:d6:6b:b4:6d:ad:fb:c2:55:0e:f8:b0:1d:e3:18:f0:c7:16:
         ef:4a:3a:c9:2a:83:b5:a5:46:63:39:8b:d0:8d:87:b2:9a:99:
         78:3c:21:e4:b3:74:be:5f:57:de:a7:23:e6:1a:21:33:b1:de:
         71:a1:d9:8b:60:35:1a:a6:a4:3d:e5:ef:55:ba:9c:78:e5:19:
         6d:a7:03:e0:d1:40:38:7b:8d:c2:e9:5f:1e:34:04:6f:bb:d9:
         5a:b0:5c:cc:80:e3:91:a1:10:b3:2c:20:03:7f:be:39:1d:87:
         e6:28:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:00:18 2026 by rpki-client