Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          57rFWRT7wWrE3YLbS4BTkropG5tHl4kser3S69D9jrM=
Subject key identifier:   51:63:08:9D:5C:F5:9B:13:F6:D2:91:35:68:0A:34:3C:94:56:83:BC
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       019D273A981288C6785F4536E1DE17352173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 23:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:44 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: bLGp7Q5gPNy5MkeqMUgezIzpTmzZ9/Go54VsTpLpWWY=)
                          2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
                          3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
                          4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:98:12:88:c6:78:5f:45:36:e1:de:17:35:21:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Mar 25 23:00:44 2026 GMT
            Not After : Mar 26 23:00:44 2026 GMT
        Subject: CN=5163089d5cf59b13f6d29135680a343c945683bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:4a:30:4d:42:87:85:33:98:52:39:4a:10:
                    f9:a8:0f:24:68:1a:5b:7c:17:65:98:97:08:9b:4f:
                    c5:0a:4f:42:f6:68:3c:34:7c:da:d8:dd:59:39:d7:
                    58:09:e7:3b:0d:99:0c:5d:0a:26:90:38:87:fc:e3:
                    b9:cc:ef:84:0a:65:2e:bd:04:26:40:e7:27:78:a4:
                    b4:c8:2c:3c:c0:bd:98:95:41:26:4f:11:3e:94:dd:
                    ad:5b:23:ec:64:f9:bd:5e:95:1d:99:3b:66:5c:5c:
                    42:d7:29:80:f0:13:97:05:da:9f:52:73:f9:f4:e7:
                    f9:32:a8:2c:f4:fc:0d:7a:bb:42:28:f8:4f:89:07:
                    d4:4d:cd:cb:f3:2c:42:16:91:f6:49:70:8f:5f:0b:
                    f6:fc:f8:7d:05:49:9c:11:33:41:1c:72:b1:5b:29:
                    34:9e:5d:59:0c:e7:a7:87:73:e9:7d:54:f2:e2:66:
                    e9:0e:b5:5e:80:b9:54:e4:d1:48:67:b8:95:19:8d:
                    da:f5:66:1f:fd:b1:18:03:c1:6f:39:0c:aa:2b:9d:
                    88:87:e0:2c:47:1e:f1:32:be:72:76:e3:dd:76:80:
                    51:cf:32:42:8a:80:ef:a4:b9:ee:65:6e:8c:c6:90:
                    5d:f3:49:a5:58:6e:b3:2c:b4:8c:6d:27:e0:56:4b:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:63:08:9D:5C:F5:9B:13:F6:D2:91:35:68:0A:34:3C:94:56:83:BC
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:28:21:13:d7:a4:2f:bc:d4:05:00:be:89:de:61:ef:78:
         b4:67:a0:80:74:fb:ae:ea:08:3c:dd:da:0a:a6:48:db:dc:43:
         af:83:dc:14:3e:a4:70:f8:18:b8:99:97:8a:da:d5:b0:ce:78:
         f0:ed:9a:b8:62:39:24:ed:68:c6:eb:41:94:83:cd:9b:de:3f:
         05:c9:9d:0b:73:ba:5f:fb:d9:b5:62:71:22:07:a7:2c:13:83:
         e4:b3:78:43:fc:b2:9a:eb:6c:26:ca:6f:57:32:93:86:cd:a7:
         25:36:f5:ab:a7:e1:e8:8e:c9:49:f2:5b:53:a2:a8:e6:02:7d:
         78:ad:cd:79:bf:ad:88:67:52:31:f5:c9:71:22:9f:d1:6f:fc:
         ea:fd:c6:e7:5d:45:23:7e:aa:15:6d:a6:81:55:99:34:7e:04:
         2d:be:6e:e4:da:f7:ff:57:fb:89:df:a9:1d:f2:d8:e9:8b:47:
         cd:3d:56:fb:a1:7b:ee:a3:af:ee:0c:a2:70:1e:38:da:9f:30:
         57:b1:fc:56:75:f3:2d:fb:b5:e4:bb:50:28:17:6b:11:e9:73:
         41:97:50:ed:aa:56:4a:33:0e:5b:57:24:f7:88:0b:e6:11:b1:
         ba:81:a9:0f:53:59:d6:94:dc:75:85:ae:54:cb:51:b2:7d:6e:
         45:40:2f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpgSiMZ4X0U24d4XNSFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm
NjUyMGQwHhcNMjYwMzI1MjMwMDQ0WhcNMjYwMzI2MjMwMDQ0WjAzMTEwLwYDVQQD
Eyg1MTYzMDg5ZDVjZjU5YjEzZjZkMjkxMzU2ODBhMzQzYzk0NTY4M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzhKME1Ch4UzmFI5ShD5qA8kaBpb
fBdlmJcIm0/FCk9C9mg8NHza2N1ZOddYCec7DZkMXQomkDiH/OO5zO+ECmUuvQQm
QOcneKS0yCw8wL2YlUEmTxE+lN2tWyPsZPm9XpUdmTtmXFxC1ymA8BOXBdqfUnP5
9Of5Mqgs9PwNertCKPhPiQfUTc3L8yxCFpH2SXCPXwv2/Ph9BUmcETNBHHKxWyk0
nl1ZDOenh3PpfVTy4mbpDrVegLlU5NFIZ7iVGY3a9WYf/bEYA8FvOQyqK52Ih+As
Rx7xMr5yduPddoBRzzJCioDvpLnuZW6MxpBd80mlWG6zLLSMbSfgVkvzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFjCJ1c9ZsT9tKRNWgKNDyUVoO8MB8GA1UdIwQY
MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt
NTE3NDgxZDBmODUwLzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw
LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeikoIRPX
pC+81AUAvoneYe94tGeggHT7ruoIPN3aCqZI29xDr4PcFD6kcPgYuJmXitrVsM54
8O2auGI5JO1oxutBlIPNm94/BcmdC3O6X/vZtWJxIgenLBOD5LN4Q/yymutsJspv
VzKThs2nJTb1q6fh6I7JSfJbU6Ko5gJ9eK3Neb+tiGdSMfXJcSKf0W/86v3G511F
I36qFW2mgVWZNH4ELb5u5Nr3/1f7id+pHfLY6YtHzT1W+6F77qOv7gyicB442p8w
V7H8VnXzLfu15LtQKBdrEelzQZdQ7apWSjMOW1ck94gL5hGxuoGpD1NZ1pTcdYWu
VMtRsn1uRUAv1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:38 2026 by rpki-client