Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          YIhnAN4cCSkbmHrdHNFruM86YfICjaVdTC4m+60g1a0=
Subject key identifier:   F5:CC:57:E8:C7:21:70:E4:6E:A6:B1:71:E3:E4:65:CE:61:86:AD:2D
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       019D273B13606CE9458893FF19F5DE0316A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          188F
Signing time:             Wed 25 Mar 2026 23:01:16 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:16 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:16 +0000
Files and hashes:         1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
                          2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
                          3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
                          4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: /bpxF20x/IVxtCAqHIqUjr/++dbMCEGdOe3m/FYRIRc=)
                          6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:13:60:6c:e9:45:88:93:ff:19:f5:de:03:16:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Mar 25 23:01:16 2026 GMT
            Not After : Mar 26 23:01:16 2026 GMT
        Subject: CN=f5cc57e8c72170e46ea6b171e3e465ce6186ad2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:59:6d:b5:75:46:d4:35:2c:7d:5b:99:a5:20:
                    78:1d:8b:9b:7b:be:73:46:0b:de:6a:93:c8:9e:26:
                    39:d4:a7:3b:ef:94:9b:60:d6:31:5b:89:ff:0e:95:
                    7a:8b:c6:93:87:53:9c:b9:fa:ca:83:35:48:6c:a6:
                    2d:23:0c:dc:fc:4a:52:df:34:02:d3:84:1f:fc:28:
                    30:16:70:93:06:ab:e3:8a:ea:c4:60:1b:93:e1:5c:
                    90:08:a6:78:1f:79:35:f4:44:1d:5e:6d:18:0b:06:
                    92:68:9d:af:ff:09:2d:c1:a6:6f:c8:2e:07:1b:1c:
                    3b:0c:ab:d1:44:77:94:a4:97:11:04:de:61:95:31:
                    30:2e:17:30:e6:8b:93:c0:2d:c9:6e:e5:0d:fe:42:
                    04:2d:94:f1:04:a2:f1:12:dd:04:11:41:a0:e6:bf:
                    65:bd:f1:0c:83:c6:0a:57:9e:ed:3f:46:71:f5:22:
                    91:de:2d:37:2f:f2:c5:76:53:d0:30:0b:1a:1b:0b:
                    56:0d:ec:dc:34:a8:6b:0d:0d:b6:f4:71:c3:10:39:
                    fd:c9:52:6f:fd:4c:3a:6b:c3:47:45:dc:a7:bc:d6:
                    b0:f5:59:3d:0e:12:53:4a:d0:b4:23:3c:a4:26:6f:
                    98:0f:34:e5:8a:14:2d:30:ba:bd:8a:f1:0d:c5:23:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CC:57:E8:C7:21:70:E4:6E:A6:B1:71:E3:E4:65:CE:61:86:AD:2D
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:9a:b3:37:c0:d6:bd:1b:69:05:4a:ac:2a:ff:2e:0f:83:
         10:5a:f9:6e:95:b0:3a:2b:c2:d8:72:cf:77:d1:19:b9:14:67:
         08:26:70:b9:32:bf:8f:43:30:9c:fa:95:4f:e2:5e:77:ee:db:
         f1:39:72:e9:44:6e:83:74:a3:85:42:c3:48:0e:c9:b8:92:5c:
         20:2a:29:4e:b0:9f:99:1a:df:c4:13:7b:34:a0:d0:3c:7a:99:
         0d:89:9b:48:8a:05:e1:2d:94:80:69:52:2e:87:83:fb:c7:e6:
         45:92:00:0c:7c:af:d8:45:9c:11:64:05:06:48:81:21:67:f6:
         52:98:22:f6:9a:f0:e4:0a:aa:e9:43:13:1e:32:b1:3c:8b:d7:
         b7:f1:aa:1c:7d:a9:a0:83:c8:8c:f1:68:fa:10:a3:ea:d5:99:
         a8:cb:e0:8e:c3:17:91:f6:ff:c0:79:94:d2:91:8c:9e:c4:9b:
         a1:8f:69:08:1d:4e:eb:35:c1:ce:08:8a:99:7c:88:2d:17:35:
         3a:f1:58:a6:43:6b:f3:42:1d:3f:be:63:a5:10:1e:c6:96:d0:
         1b:5f:99:65:e4:2c:12:bc:2e:35:fb:46:c0:85:d7:07:f7:d4:
         a0:37:ee:28:21:ba:1a:8c:fe:81:fd:fa:8c:4c:24:be:c2:b0:
         e7:27:ae:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:13 2026 by rpki-client