Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File:                     sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier:          KdDniM4cVn869pNuFUktofulKY3p848lI/jIaYkt3rA=
Subject key identifier:   D1:6C:6F:83:82:6D:A2:16:7E:BA:25:6A:84:F7:D5:31:91:45:3A:F1
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer:       /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial:       019D277221DE85B0B472DBB55832A31B9735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 00:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:24 +0000
Files and hashes:         1: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (hash: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY=)
                          2: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (hash: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw=)
                          3: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (hash: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M=)
                          4: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: 3VngBZNeoXuXmM6vn7xZbF7/r+utn5+oWhKDcU+L1BY=)
                          5: wjwk4znZSgE3afujO_o00KJ1wc4.roa (hash: /EHRjEt0mZL7bm2KcS0WqhNixMXZVUS3aHhSERVsdww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:21:de:85:b0:b4:72:db:b5:58:32:a3:1b:97:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
        Validity
            Not Before: Mar 26 00:01:24 2026 GMT
            Not After : Mar 27 00:01:24 2026 GMT
        Subject: CN=d16c6f83826da2167eba256a84f7d53191453af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:ab:40:0e:8f:32:fa:fb:61:35:bf:64:ac:
                    50:4d:85:0f:2b:23:88:fb:c9:1f:a9:a6:fc:a6:cc:
                    92:7a:a3:28:08:51:93:ff:18:55:71:84:19:eb:da:
                    4c:5e:cb:07:4c:12:24:79:44:a3:29:99:34:34:85:
                    dc:20:9d:90:2b:b4:5b:30:1b:d9:07:4d:fe:cd:c9:
                    b1:b0:c8:78:8b:01:45:62:85:97:fb:ea:46:db:8b:
                    6f:e5:29:58:1b:7d:07:98:01:3b:2d:36:08:86:8e:
                    69:e1:47:c7:8c:d6:e5:57:f5:3c:8d:96:78:09:9b:
                    d9:05:e8:8c:15:66:21:14:4f:02:29:56:c1:82:13:
                    c4:eb:4d:c7:78:53:cd:d0:16:64:61:78:b9:04:36:
                    70:1e:6b:28:41:82:7e:6d:d0:08:78:e6:14:bb:d7:
                    bb:cb:51:14:85:4e:23:74:df:4d:2e:81:0f:d6:27:
                    c2:7c:b7:97:b7:c5:4c:ae:2d:3d:02:8b:9a:14:39:
                    6a:74:d7:81:d5:fc:78:72:7d:37:bc:55:9f:11:b7:
                    d2:82:f3:64:d2:30:c3:5d:48:58:f4:28:33:3f:bc:
                    33:60:0d:ee:38:1a:4a:dc:c7:a1:9d:21:02:43:62:
                    b8:44:3b:3b:b5:19:2f:c2:2c:8a:e0:19:ec:21:29:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6C:6F:83:82:6D:A2:16:7E:BA:25:6A:84:F7:D5:31:91:45:3A:F1
            X509v3 Authority Key Identifier:
                keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:9d:81:74:32:af:54:a6:2d:07:9e:cf:a9:12:b6:33:66:
         36:a5:34:52:59:42:3e:37:e5:23:f8:ac:ca:e4:79:82:4f:8f:
         5f:57:6a:3e:f1:eb:93:2b:c4:0b:d1:89:4a:03:8b:2e:00:64:
         1b:08:13:ac:6a:5c:d6:26:f2:f2:14:c4:85:21:7c:c4:b9:bd:
         c7:ac:90:e5:fa:4f:4a:4c:3c:a0:a8:f5:6f:87:67:d2:be:41:
         0a:f1:ab:da:af:a2:c1:b4:0f:1d:39:17:3b:3d:04:ac:52:70:
         f6:5d:97:cd:5e:95:3a:73:1a:bf:66:2d:75:ba:0c:b5:d6:24:
         9a:3b:c0:7e:33:4d:d3:e1:8a:7f:1c:89:42:83:e0:4f:d0:2a:
         d7:67:d7:b5:97:b3:96:c4:70:43:25:8e:9d:36:3f:1c:a8:98:
         bf:c4:9a:29:a8:a7:46:2b:d4:3e:88:05:ab:a9:b1:bf:f3:f2:
         f5:e1:06:e9:6b:f4:a9:a1:f1:21:81:b1:9b:e5:44:5a:39:73:
         47:93:17:3e:77:48:05:28:50:21:ca:a1:44:95:3e:26:03:e2:
         0e:8f:c6:46:87:42:d1:5b:1e:b7:ff:00:33:98:7f:b0:97:11:
         9e:08:f0:8b:17:6f:c7:84:1e:b1:dc:bc:c0:b7:d9:02:af:84:
         c8:f8:5c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciHehbC0ctu1WDKjG5c1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz
NmYyZjQwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD
EyhkMTZjNmY4MzgyNmRhMjE2N2ViYTI1NmE4NGY3ZDUzMTkxNDUzYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rirQA6PMvr7YTW/ZKxQTYUPKyOI
+8kfqab8psySeqMoCFGT/xhVcYQZ69pMXssHTBIkeUSjKZk0NIXcIJ2QK7RbMBvZ
B03+zcmxsMh4iwFFYoWX++pG24tv5SlYG30HmAE7LTYIho5p4UfHjNblV/U8jZZ4
CZvZBeiMFWYhFE8CKVbBghPE603HeFPN0BZkYXi5BDZwHmsoQYJ+bdAIeOYUu9e7
y1EUhU4jdN9NLoEP1ifCfLeXt8VMri09AouaFDlqdNeB1fx4cn03vFWfEbfSgvNk
0jDDXUhY9CgzP7wzYA3uOBpK3MehnSECQ2K4RDs7tRkvwiyK4BnsISl/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFsb4OCbaIWfrolaoT31TGRRTrxMB8GA1UdIwQY
MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt
N2Y1Zjc4MzQ2ZDZmLzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm
LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas+dgXQy
r1SmLQeez6kStjNmNqU0UllCPjflI/isyuR5gk+PX1dqPvHrkyvEC9GJSgOLLgBk
GwgTrGpc1iby8hTEhSF8xLm9x6yQ5fpPSkw8oKj1b4dn0r5BCvGr2q+iwbQPHTkX
Oz0ErFJw9l2XzV6VOnMav2YtdboMtdYkmjvAfjNN0+GKfxyJQoPgT9Aq12fXtZez
lsRwQyWOnTY/HKiYv8SaKainRivUPogFq6mxv/Py9eEG6Wv0qaHxIYGxm+VEWjlz
R5MXPndIBShQIcqhRJU+JgPiDo/GRodC0Vset/8AM5h/sJcRngjwixdvx4Qesdy8
wLfZAq+EyPhcxg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:38 2026 by rpki-client