Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File:                     Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier:          udwXldaeQ61Vjj2TJWmID7tPwN59raebWQJ5tbBUwao=
Subject key identifier:   FA:B0:73:2C:8E:E1:11:30:66:67:47:E2:1A:DC:CC:3E:9E:2A:FF:EB
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer:       /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial:       019D2BBC29917BC5F2E3690DFE752D86E8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 20:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 20:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 20:00:44 +0000
Files and hashes:         1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
                          2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: BY8v+FhaaJyg5CN4r2SUexvVWPBEKCRprBFLL66pJOw=)
                          3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
                          4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bc:29:91:7b:c5:f2:e3:69:0d:fe:75:2d:86:e8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
        Validity
            Not Before: Mar 26 20:00:44 2026 GMT
            Not After : Mar 27 20:00:44 2026 GMT
        Subject: CN=fab0732c8ee11130666747e21adccc3e9e2affeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:6b:fd:c2:b2:0c:30:8f:90:6c:7c:ea:bd:
                    98:46:3f:4e:79:d2:36:a7:68:d9:8a:f5:6f:5a:fd:
                    33:7d:95:a1:f3:fb:4b:e9:80:b1:8c:7f:33:39:1d:
                    ba:5b:ae:5a:f8:6c:a3:b5:73:ef:9f:c9:12:8e:97:
                    bd:a5:25:ba:75:d3:99:dc:01:05:75:69:53:9b:62:
                    58:73:63:55:fa:20:6b:f9:ae:c9:e6:f5:86:f6:37:
                    47:44:4d:6c:99:16:cf:fb:c9:c1:75:e5:1f:2a:bd:
                    d9:c6:27:c0:56:9e:cd:eb:8b:94:2c:64:d1:97:cc:
                    d6:dd:4d:df:bf:f1:cc:35:6f:1e:6c:03:ba:33:a2:
                    f0:bb:9f:47:33:87:3d:a0:5e:34:a1:e1:cf:4b:20:
                    b4:08:68:46:5a:00:4f:d8:0f:e7:20:53:b7:0b:e2:
                    b0:07:36:8e:e8:2a:46:42:4b:54:8b:80:fd:ff:f2:
                    41:70:68:84:c3:0d:fa:93:9b:13:d2:34:5f:fe:e9:
                    fc:0d:26:53:bb:86:38:c9:64:84:51:ea:bd:d8:9c:
                    52:2b:aa:00:46:37:ef:0b:42:be:42:36:f8:17:07:
                    42:06:5c:c8:5b:5d:92:9f:51:2b:cd:1e:2c:47:49:
                    9c:b4:26:b2:5f:bf:27:40:b9:16:15:3b:58:54:1c:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:73:2C:8E:E1:11:30:66:67:47:E2:1A:DC:CC:3E:9E:2A:FF:EB
            X509v3 Authority Key Identifier:
                keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:51:34:b9:d3:68:ee:04:6e:9f:26:ea:c9:90:12:75:3e:9e:
         49:bc:b0:e4:07:68:32:4d:81:85:b6:7a:c2:d6:25:85:05:66:
         99:22:0f:f2:23:49:67:50:b4:2c:a6:64:09:a4:f7:63:27:4c:
         37:62:4b:6b:ba:1e:aa:20:b2:c0:86:1c:31:89:91:3d:96:62:
         50:fc:94:fa:14:d7:d0:b8:45:19:dd:18:63:a2:6f:84:68:a4:
         ff:44:0c:64:12:f8:49:f0:07:e8:1f:dc:38:5c:21:c8:70:ec:
         c9:6f:e8:2c:4a:21:a0:2c:13:1c:96:7b:c4:e3:8a:d4:a0:86:
         73:c8:99:44:65:35:88:64:ec:6b:7a:d7:2a:fc:47:a9:12:68:
         dd:20:69:bd:8c:34:89:c3:6e:a1:78:0a:9c:7d:d8:03:d2:c4:
         24:95:9f:a0:ba:05:3b:34:e9:32:28:07:67:cc:92:e9:22:6c:
         4d:81:ea:96:63:26:67:52:7b:95:5f:f7:04:03:aa:f2:21:17:
         4a:2e:08:ff:c8:11:02:aa:e7:dc:5b:7e:50:04:2f:c6:38:dd:
         68:c3:75:0d:9b:af:8b:b6:f7:b8:0a:95:4a:36:88:b6:4d:fe:
         4d:36:86:48:8f:ff:db:a1:1d:3c:11:a4:8d:d2:05:bd:40:6e:
         67:33:30:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rvCmRe8Xy42kN/nUthuj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm
NmI2NzUwHhcNMjYwMzI2MjAwMDQ0WhcNMjYwMzI3MjAwMDQ0WjAzMTEwLwYDVQQD
EyhmYWIwNzMyYzhlZTExMTMwNjY2NzQ3ZTIxYWRjY2MzZTllMmFmZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbNr/cKyDDCPkGx86r2YRj9OedI2
p2jZivVvWv0zfZWh8/tL6YCxjH8zOR26W65a+GyjtXPvn8kSjpe9pSW6ddOZ3AEF
dWlTm2JYc2NV+iBr+a7J5vWG9jdHRE1smRbP+8nBdeUfKr3ZxifAVp7N64uULGTR
l8zW3U3fv/HMNW8ebAO6M6Lwu59HM4c9oF40oeHPSyC0CGhGWgBP2A/nIFO3C+Kw
BzaO6CpGQktUi4D9//JBcGiEww36k5sT0jRf/un8DSZTu4Y4yWSEUeq92JxSK6oA
RjfvC0K+Qjb4FwdCBlzIW12Sn1ErzR4sR0mctCayX78nQLkWFTtYVBz2nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqwcyyO4REwZmdH4hrczD6eKv/rMB8GA1UdIwQY
MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt
YWM5NmY2YWFiNDk0LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0
LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlE0udNo
7gRunybqyZASdT6eSbyw5AdoMk2BhbZ6wtYlhQVmmSIP8iNJZ1C0LKZkCaT3YydM
N2JLa7oeqiCywIYcMYmRPZZiUPyU+hTX0LhFGd0YY6JvhGik/0QMZBL4SfAH6B/c
OFwhyHDsyW/oLEohoCwTHJZ7xOOK1KCGc8iZRGU1iGTsa3rXKvxHqRJo3SBpvYw0
icNuoXgKnH3YA9LEJJWfoLoFOzTpMigHZ8yS6SJsTYHqlmMmZ1J7lV/3BAOq8iEX
Si4I/8gRAqrn3Ft+UAQvxjjdaMN1DZuvi7b3uAqVSjaItk3+TTaGSI//26EdPBGk
jdIFvUBuZzMwEQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:41:24 2026 by rpki-client