Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File:                     qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier:          HD8iyfTThRkRmpOIqreCBaeV+1GZBPdsv6VT/dcDQZ4=
Subject key identifier:   5D:A4:7B:B3:6B:96:E8:54:7E:6F:32:0C:36:F9:3F:36:ED:07:8D:48
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer:       /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial:       019D273AC7083847D74BA2E93DD78D9404F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 23:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:56 +0000
Files and hashes:         1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
                          2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
                          3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: mLvb955IJI9mcYOASg9XFsVt3ZLfYn79E5Chry0BK3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:c7:08:38:47:d7:4b:a2:e9:3d:d7:8d:94:04:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
        Validity
            Not Before: Mar 25 23:00:56 2026 GMT
            Not After : Mar 26 23:00:56 2026 GMT
        Subject: CN=5da47bb36b96e8547e6f320c36f93f36ed078d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8c:39:8a:0f:53:f5:7e:7c:34:f4:12:86:cd:
                    8b:a6:5f:d4:43:0d:3c:d5:a4:95:e9:d8:74:d8:58:
                    72:ac:8d:a2:c9:43:02:3d:ef:9a:5f:f7:c7:10:18:
                    60:66:dc:d6:19:3d:f7:5a:15:14:97:32:e7:fb:6b:
                    ab:37:53:1f:3e:77:83:06:9e:2c:cb:34:1d:34:ac:
                    a2:42:9f:e9:b3:5f:98:91:29:ea:a2:73:52:18:bd:
                    1c:ff:c3:64:82:d8:dc:56:c8:4f:38:44:48:07:46:
                    14:16:da:32:d6:45:f5:3f:14:78:0b:46:2e:ea:f9:
                    e5:61:9e:92:1c:9b:58:76:4d:2d:d8:61:e6:cf:7c:
                    fe:0d:61:04:ae:ae:43:fc:33:4a:3f:3f:f6:ca:86:
                    5a:f6:6a:5e:07:a4:0e:aa:10:f1:26:f2:b2:bc:7b:
                    c3:d2:67:a3:8b:45:6c:41:6f:ab:6a:de:4e:17:ac:
                    dd:38:8e:42:08:bf:bb:f6:5d:17:36:92:e3:34:58:
                    a9:48:70:82:65:32:6b:96:a5:6d:62:fa:ec:82:4a:
                    2e:7f:89:d9:e2:0c:6d:ea:99:3e:85:5c:94:46:b9:
                    fc:37:20:d2:ec:ad:d6:3b:d7:c9:34:d0:1e:b4:de:
                    90:60:c1:46:1c:d9:98:82:0c:cf:f7:a8:c3:44:c5:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A4:7B:B3:6B:96:E8:54:7E:6F:32:0C:36:F9:3F:36:ED:07:8D:48
            X509v3 Authority Key Identifier:
                keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:01:d5:38:99:f9:6f:2a:e8:35:4f:ed:2c:b3:22:93:79:2e:
         db:5d:73:89:b4:a7:1e:2a:53:4e:2d:32:ce:98:0c:3f:5d:60:
         f0:1d:e8:56:59:8f:9d:af:9b:44:6f:ea:60:04:fe:97:c1:70:
         01:bb:14:2c:2b:fa:ca:5b:df:fc:4a:2d:00:07:9d:0c:44:ef:
         3a:e0:4f:bb:40:74:ab:51:04:70:dd:fd:8b:ba:7f:c5:57:f7:
         dc:56:69:d4:0f:d9:f7:e0:ea:3b:ba:75:77:1c:ce:27:e7:25:
         04:98:6c:63:d6:4f:4e:a9:4c:cd:8e:5c:7b:84:56:fd:0f:21:
         95:2d:51:0a:c0:e7:93:d6:dc:ab:b7:90:f0:fd:a6:dc:38:e8:
         fe:8f:b7:63:4e:45:40:a3:8f:bd:29:5b:50:d3:22:e4:41:fc:
         2c:f5:e2:b4:2c:27:b4:8e:79:25:69:6a:9a:9b:86:4f:52:09:
         cd:f0:d4:53:db:4a:ed:62:7b:73:c2:2b:8e:f2:2a:07:fe:a3:
         bf:2e:d1:ec:73:e3:40:82:ea:f6:b1:62:a9:25:a4:b3:74:ec:
         2a:32:80:45:28:de:39:4b:25:a6:e2:71:54:39:16:30:29:e9:
         29:24:b5:8a:11:3f:9a:4e:23:c2:cb:b3:6c:74:ee:7f:0e:cb:
         7c:fa:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:39 2026 by rpki-client