Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File:                     QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier:          Y2zPssydVj42D+hjbRsex4ykmQ8qKZqH3K/pyTwfbss=
Subject key identifier:   32:34:7D:A1:22:D3:3C:9F:5F:CC:0E:16:5C:47:EC:68:00:22:D9:4B
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer:       /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial:       019D27A8E775BCF386AFE25FCB553B40AE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 01:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:13 +0000
Files and hashes:         1: 38IcWrFWJbqE37FYpFMigdsHVdo.roa (hash: jTZcDNir5nH2T9oJuhPtVnEcZ5OgfBAR2idpIej2Fr4=)
                          2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: UH69j67dK4X4GAHdMPwB6bMO2TQcQClW3/aM8xGu9EE=)
                          3: S9un40BglrRD8oUoRwpeEoCPKzQ.roa (hash: 63quj0FUggFB47Cme3ZNE0Mctu62nOnwW9NKWHljeOQ=)
                          4: nLIrARXN9dPSDCt_sdmjJM0dIgA.roa (hash: g+OtbxwAHIUNiByLd40WQVbq7MwXJk9aaDtEPJLR4Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:e7:75:bc:f3:86:af:e2:5f:cb:55:3b:40:ae:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
        Validity
            Not Before: Mar 26 01:01:13 2026 GMT
            Not After : Mar 27 01:01:13 2026 GMT
        Subject: CN=32347da122d33c9f5fcc0e165c47ec680022d94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:51:fc:87:4f:2f:55:f0:ad:80:97:a6:80:
                    11:96:65:cc:48:13:9b:8c:71:07:f4:39:a1:98:12:
                    8e:fa:26:c3:32:72:4a:40:46:e6:c0:af:fc:fe:4d:
                    03:b3:27:db:d7:5d:43:cc:7f:06:79:df:d4:52:a7:
                    ef:f6:6d:b8:cc:63:f0:8d:a4:61:56:42:c6:15:d2:
                    b3:af:85:9d:52:7e:42:a6:84:d8:06:af:3c:ac:bd:
                    78:fb:ae:3f:80:1d:fb:e5:86:54:0e:6d:1d:c0:bc:
                    0b:d3:8f:fa:19:a1:3e:bd:7e:d8:84:f6:2c:97:56:
                    d3:70:06:e6:c4:aa:10:31:e8:58:03:99:bd:f8:ff:
                    0a:ae:e1:79:0d:bd:a6:dd:b6:22:28:40:0b:4d:13:
                    c9:89:2c:14:b3:12:30:ba:1f:75:4e:d9:ba:b7:e9:
                    18:7b:03:21:1a:67:fe:84:81:5c:df:9d:ae:4c:f2:
                    25:c7:fc:ef:92:1b:2c:da:74:ff:bc:a2:7d:38:e0:
                    72:1e:7c:06:4b:1f:62:9a:f1:48:9b:09:5e:e7:3b:
                    34:82:27:69:39:0e:c1:9d:67:45:11:cf:f9:50:15:
                    bf:13:f5:02:a2:f6:69:82:54:84:a6:a4:b0:b3:42:
                    ed:bc:94:7a:87:18:c5:0b:5c:ed:78:5b:aa:ed:a6:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:34:7D:A1:22:D3:3C:9F:5F:CC:0E:16:5C:47:EC:68:00:22:D9:4B
            X509v3 Authority Key Identifier:
                keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:6d:c9:2d:e4:f9:ef:96:68:c1:44:5b:ac:a8:23:12:76:
         f6:97:5e:f1:02:3c:1c:e0:33:78:c4:db:18:ae:03:1d:65:dd:
         8d:59:c5:25:47:eb:43:b2:64:65:d0:af:03:15:04:0e:81:19:
         40:b6:95:7b:6f:3e:dd:13:77:cd:d7:46:b2:55:3f:7e:c3:95:
         d1:c6:01:73:12:c6:69:47:51:51:bf:fa:a0:6b:79:7b:ed:2b:
         b8:a5:cb:31:39:63:f1:16:19:f8:53:fe:f9:bd:af:e4:2f:4a:
         31:3b:34:aa:eb:6c:31:30:92:bd:f5:e7:41:17:e9:40:79:3d:
         75:4f:22:61:23:3e:f2:12:89:64:23:e0:e9:50:bd:8e:d4:d5:
         d9:bf:df:8b:98:6a:b7:7c:73:d4:bd:42:8d:19:bf:cd:d8:8f:
         af:65:fa:ed:8f:89:48:3f:62:3d:2c:4c:0e:9d:36:89:43:83:
         22:42:bc:11:39:9b:ea:0a:21:88:aa:07:e5:a9:c3:bf:3d:c9:
         e7:cc:e8:8c:38:0f:81:43:3c:88:b9:17:bf:74:d4:21:66:87:
         e6:ae:15:5f:c2:23:12:07:c0:fe:af:83:42:1a:1b:3e:c4:98:
         99:13:eb:bb:94:64:49:0e:a1:ab:87:e4:b0:b8:0d:aa:90:66:
         6c:d5:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:30 2026 by rpki-client