Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          OK8fEBD6g6WAxgeBvAIEIb+uM80tjvSdo78rqZUz1m0=
Subject key identifier:   5E:3F:2E:86:5B:38:B0:F7:7D:C7:28:6D:78:E4:6D:52:57:8C:4F:89
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       019D2470B4F2DFFF251669DD79EA0CB79925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 10:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 10:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 10:00:58 +0000
Files and hashes:         1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
                          2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
                          3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
                          4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: qKPQZ23nphFpWgsybQiRmbMx+VlfFn5bjjXwk9Mgn38=)
                          5: uqJ-WoJ0LMUzPyz6AyCWPdAMqaA.roa (hash: lX10IX/8pnEVBdXCqvOlS3MwC2z4PooE1DCcSVaJLYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:70:b4:f2:df:ff:25:16:69:dd:79:ea:0c:b7:99:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Mar 25 10:00:58 2026 GMT
            Not After : Mar 26 10:00:58 2026 GMT
        Subject: CN=5e3f2e865b38b0f77dc7286d78e46d52578c4f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:e7:d1:e3:c2:e6:88:a7:da:6d:1d:23:07:
                    81:7a:1c:b1:53:d3:32:6e:a0:7f:42:81:cc:05:1e:
                    eb:d1:dd:68:38:2c:72:57:75:2a:18:4a:eb:46:4b:
                    99:39:05:3f:df:66:ab:54:7e:29:c0:3f:bb:42:3f:
                    f2:88:6d:f1:a7:ff:c4:35:43:9f:31:98:84:7a:32:
                    a9:63:b6:57:91:7c:88:f1:18:cd:91:51:0d:61:11:
                    ff:22:a3:77:76:b4:9f:2e:26:6d:89:4a:1d:e5:f1:
                    9c:09:35:a9:f1:4a:9d:50:01:7d:04:a4:00:cd:73:
                    04:ee:5f:ca:68:3a:2e:44:04:8e:55:49:d3:9a:67:
                    a1:03:f4:e8:8a:25:b2:16:c2:0a:67:02:6c:31:ec:
                    4d:96:ef:ef:77:bd:a0:36:d4:f6:72:15:a4:f4:01:
                    4d:4c:c3:b5:94:47:23:a8:68:0d:a5:39:4e:3c:81:
                    df:3a:83:7a:40:c2:2a:50:67:74:68:e5:2c:ce:b4:
                    ca:69:23:c3:cc:70:89:f3:40:63:0d:98:8c:2c:93:
                    38:5f:4e:aa:44:05:e7:34:94:47:f0:00:8d:b6:bd:
                    22:53:a9:68:48:af:75:b9:c2:cb:7a:2c:26:a3:ec:
                    fa:fe:e1:e5:d1:68:f4:97:3e:27:78:1f:43:60:20:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3F:2E:86:5B:38:B0:F7:7D:C7:28:6D:78:E4:6D:52:57:8C:4F:89
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ba:d6:8e:fb:85:19:3a:c2:91:60:7c:bb:ff:b3:aa:34:9d:
         91:cf:b5:53:e7:49:5a:e9:2b:c2:71:32:3d:86:ab:ee:ff:5d:
         c4:39:12:f5:67:62:30:62:05:13:47:18:f9:21:c9:24:73:3c:
         3e:da:14:bb:ba:3e:99:11:17:fa:aa:b5:84:cd:e2:da:67:ee:
         e9:99:16:3d:b4:b8:6d:2d:da:f1:d3:42:1a:f3:9d:81:be:67:
         ea:e1:63:36:f5:ac:9a:02:10:8f:66:0b:98:cd:02:a9:9f:6b:
         ce:69:da:69:49:35:51:b7:71:b7:6a:a5:23:82:fb:21:c7:1d:
         4d:cf:82:0b:c2:ce:cb:39:4c:c0:4e:fe:5d:9c:70:c3:a5:e4:
         07:45:a0:3e:e3:6f:3a:7f:c1:e2:80:00:f4:8a:c9:d5:cb:2d:
         53:2e:72:c7:91:69:76:f3:69:07:d2:9c:13:af:4c:ed:52:2d:
         47:eb:7e:56:1b:8e:24:ed:05:87:f7:4e:ed:7d:89:75:0d:6c:
         39:e0:da:6b:36:86:fc:ee:ed:eb:9a:db:c6:ca:6b:2b:be:ff:
         bb:97:69:5a:45:3f:38:d5:d9:c3:af:9e:46:99:76:12:47:59:
         3a:37:b3:65:d6:69:d9:6f:5f:d0:ec:5a:75:0b:15:be:38:65:
         c9:2b:50:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kcLTy3/8lFmndeeoMt5klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjYwMzI1MTAwMDU4WhcNMjYwMzI2MTAwMDU4WjAzMTEwLwYDVQQD
Eyg1ZTNmMmU4NjViMzhiMGY3N2RjNzI4NmQ3OGU0NmQ1MjU3OGM0Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTn0ePC5oin2m0dIweBehyxU9My
bqB/QoHMBR7r0d1oOCxyV3UqGErrRkuZOQU/32arVH4pwD+7Qj/yiG3xp//ENUOf
MZiEejKpY7ZXkXyI8RjNkVENYRH/IqN3drSfLiZtiUod5fGcCTWp8UqdUAF9BKQA
zXME7l/KaDouRASOVUnTmmehA/ToiiWyFsIKZwJsMexNlu/vd72gNtT2chWk9AFN
TMO1lEcjqGgNpTlOPIHfOoN6QMIqUGd0aOUszrTKaSPDzHCJ80BjDZiMLJM4X06q
RAXnNJRH8ACNtr0iU6loSK91ucLLeiwmo+z6/uHl0Wj0lz4neB9DYCBe/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4/LoZbOLD3fccobXjkbVJXjE+JMB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrrWjvuF
GTrCkWB8u/+zqjSdkc+1U+dJWukrwnEyPYar7v9dxDkS9WdiMGIFE0cY+SHJJHM8
PtoUu7o+mREX+qq1hM3i2mfu6ZkWPbS4bS3a8dNCGvOdgb5n6uFjNvWsmgIQj2YL
mM0CqZ9rzmnaaUk1Ubdxt2qlI4L7IccdTc+CC8LOyzlMwE7+XZxww6XkB0WgPuNv
On/B4oAA9IrJ1cstUy5yx5FpdvNpB9KcE69M7VItR+t+VhuOJO0Fh/dO7X2JdQ1s
OeDaazaG/O7t65rbxsprK77/u5dpWkU/ONXZw6+eRpl2EkdZOjezZdZp2W9f0Oxa
dQsVvjhlyStQTw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:32:17 2026 by rpki-client