Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          JYt9q1DRadhou4ebkpMGnwMojQzAl3S0gIQ+P2vt694=
Subject key identifier:   E3:0E:89:85:AB:21:C5:77:E7:AD:1E:C2:50:A2:67:BA:0B:9E:18:15
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019D2772C5442D3EA80E39E2FDE7A85DCF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 00:02:05 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:05 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:05 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: kOOEcaczYtAl6mVpFXN7RRUKww3YBULeOyyvNQh5g2M=)
                          2: 7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa (hash: N75hWXU4tOfgUVgJErnnaShCfMougCipyHaXnV/7ZoQ=)
                          3: ojQoLkOKYxW9nl-zMiY8owgWzH8.roa (hash: pBaal272/3ElS+FK2cqrYkE2HZTuwNTmpIvmWFEPo9E=)
                          4: wW5JJp_Tw5DERjslA8f06nsNm_4.roa (hash: soIoaQ26jxMV+jXruEWHSU8upxFyddMWkhBFffhBkYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:c5:44:2d:3e:a8:0e:39:e2:fd:e7:a8:5d:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Mar 26 00:02:05 2026 GMT
            Not After : Mar 27 00:02:05 2026 GMT
        Subject: CN=e30e8985ab21c577e7ad1ec250a267ba0b9e1815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:94:7e:56:08:d4:71:e6:11:99:3d:87:71:
                    16:7d:74:5b:8d:4e:42:61:25:67:2c:fd:70:43:c5:
                    cc:86:eb:12:4b:17:58:71:f7:3d:bb:9f:a4:af:05:
                    d8:d5:f6:6b:3a:97:3d:3f:4a:f8:60:61:c4:a9:30:
                    a3:83:1c:73:b9:db:a0:f4:10:a6:78:53:69:3b:c2:
                    25:e2:4f:d0:a7:0b:5c:f9:77:c3:2c:16:1a:b2:29:
                    70:5d:9e:3d:d8:21:4b:62:28:e2:aa:1d:5f:16:44:
                    c2:7e:c0:be:ba:13:69:d1:d9:ba:f1:f1:d2:09:f9:
                    00:03:96:e6:1d:c5:1b:fa:65:8e:ef:93:e3:be:5d:
                    02:04:1d:c8:69:14:6e:6f:c3:59:e6:73:bd:08:3a:
                    8a:4a:cf:d5:66:1b:e8:9b:64:ef:d0:27:da:7a:0f:
                    67:75:cf:60:ab:aa:cb:9a:4c:da:1d:1f:f1:9c:9d:
                    11:41:73:1a:83:27:37:4a:f0:46:8c:e5:97:21:bc:
                    81:35:57:f2:46:44:4a:36:03:ba:d6:ac:a7:b8:ff:
                    bf:81:99:77:3b:24:85:1b:c5:b1:c2:b8:9d:4c:97:
                    f4:20:16:e4:76:86:7c:7b:7a:12:75:0a:3f:ad:20:
                    89:13:35:6d:d9:46:20:61:17:cc:c5:54:44:f6:b0:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0E:89:85:AB:21:C5:77:E7:AD:1E:C2:50:A2:67:BA:0B:9E:18:15
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:25:37:60:11:90:41:5a:72:f2:1e:46:7b:ec:b3:47:84:5e:
         84:81:60:fc:54:9e:14:87:ed:43:ff:b1:c1:b5:98:16:dd:ba:
         fe:c7:5b:b9:4a:84:97:b8:e5:7a:49:7d:7a:6c:53:cd:d2:05:
         74:44:e3:8b:3b:19:13:d5:d2:c7:0b:c5:41:56:58:b1:62:46:
         75:1a:4b:85:fa:30:23:86:25:d6:9e:a0:be:9a:db:3b:7c:d3:
         94:d9:b5:68:70:50:21:12:87:ef:e5:30:f4:87:29:5e:59:1c:
         40:e0:ad:88:b7:f0:20:12:a2:c6:6f:ec:e3:7b:51:a4:11:70:
         c4:37:ac:55:25:61:6d:6e:a5:43:da:33:54:c5:0f:0f:9c:12:
         56:c9:7e:76:b7:b6:a0:89:ac:e5:5d:34:7b:44:49:2c:7e:c9:
         ba:a1:35:d3:45:bb:f9:20:19:6d:c4:01:c9:60:57:8e:1b:92:
         c7:fe:d8:4f:09:66:1b:e5:8f:38:f4:82:d8:6f:1c:f8:de:be:
         e1:b0:43:ea:f2:3c:93:2b:ea:e5:09:3c:8c:a0:cf:03:f5:08:
         d4:c0:08:97:75:a3:b5:68:86:5b:f7:0d:fe:65:20:2f:fc:96:
         67:63:43:b5:f3:7c:fe:a4:9f:91:b2:22:e1:94:b3:0f:21:cc:
         c3:ef:b4:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsVELT6oDjni/eeoXc8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1
NTIxODcwHhcNMjYwMzI2MDAwMjA1WhcNMjYwMzI3MDAwMjA1WjAzMTEwLwYDVQQD
EyhlMzBlODk4NWFiMjFjNTc3ZTdhZDFlYzI1MGEyNjdiYTBiOWUxODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH2UflYI1HHmEZk9h3EWfXRbjU5C
YSVnLP1wQ8XMhusSSxdYcfc9u5+krwXY1fZrOpc9P0r4YGHEqTCjgxxzudug9BCm
eFNpO8Il4k/Qpwtc+XfDLBYasilwXZ492CFLYijiqh1fFkTCfsC+uhNp0dm68fHS
CfkAA5bmHcUb+mWO75Pjvl0CBB3IaRRub8NZ5nO9CDqKSs/VZhvom2Tv0Cfaeg9n
dc9gq6rLmkzaHR/xnJ0RQXMagyc3SvBGjOWXIbyBNVfyRkRKNgO61qynuP+/gZl3
OySFG8WxwridTJf0IBbkdoZ8e3oSdQo/rSCJEzVt2UYgYRfMxVRE9rBu8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMOiYWrIcV3560ewlCiZ7oLnhgVMB8GA1UdIwQY
MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt
NjY5YmQxMTNhMTc4LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4
LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyU3YBGQ
QVpy8h5Ge+yzR4RehIFg/FSeFIftQ/+xwbWYFt26/sdbuUqEl7jlekl9emxTzdIF
dETjizsZE9XSxwvFQVZYsWJGdRpLhfowI4Yl1p6gvprbO3zTlNm1aHBQIRKH7+Uw
9IcpXlkcQOCtiLfwIBKixm/s43tRpBFwxDesVSVhbW6lQ9ozVMUPD5wSVsl+dre2
oIms5V00e0RJLH7JuqE100W7+SAZbcQByWBXjhuSx/7YTwlmG+WPOPSC2G8c+N6+
4bBD6vI8kyvq5Qk8jKDPA/UI1MAIl3WjtWiGW/cN/mUgL/yWZ2NDtfN8/qSfkbIi
4ZSzDyHMw++0YA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:07 2026 by rpki-client