Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File:                     N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier:          b6OhJw07L06y5zxNRgAE1b3Obkg81NomiM5SHuWIBCY=
Subject key identifier:   E3:B8:54:7F:8E:0E:52:2C:5C:97:A1:F7:41:AE:E5:7A:19:75:8C:D8
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       019D2A72E0246CBD9C0C04961DF3FAD56F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 14:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 14:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:04 +0000
Files and hashes:         1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
                          2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: AZmJDpkPCPNmS/xK+htYAymvkzpDgap2ZsVn4TbZcMQ=)
                          3: UfNHSpJylWqCGj1xnLyUYs3XscQ.roa (hash: HqwmuScnIwcfsRW+0IJvtbF4YsRX/kFXsJcVfa0Phs8=)
                          4: aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa (hash: CsGiY18ccHhD7M1a8C7IWEu0NTkbcJT9x/p8uOlc+a0=)
                          5: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
                          6: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
                          7: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
                          8: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:e0:24:6c:bd:9c:0c:04:96:1d:f3:fa:d5:6f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Mar 26 14:01:04 2026 GMT
            Not After : Mar 27 14:01:04 2026 GMT
        Subject: CN=e3b8547f8e0e522c5c97a1f741aee57a19758cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:86:36:3a:2e:56:e6:46:55:de:91:10:5f:
                    3c:4d:4c:f3:d9:93:5e:51:28:69:d9:75:36:61:d6:
                    a0:4c:4a:9b:1f:09:3a:75:62:38:b6:d0:9c:73:ad:
                    6b:fd:35:c2:08:a4:ef:75:68:8e:fc:65:c6:50:49:
                    9a:2b:ce:c2:50:5d:18:65:33:92:15:49:9d:94:a6:
                    3a:46:fb:56:17:8e:1f:f9:28:e3:1d:36:96:3b:97:
                    0a:72:61:35:1b:47:b5:72:2f:9d:e2:0d:1c:36:48:
                    c4:f4:e5:e7:79:12:89:c0:4f:f5:fe:28:53:09:56:
                    51:28:28:90:4e:69:d2:61:59:05:dc:e3:a1:02:31:
                    71:a7:1f:1f:da:5e:98:cb:dc:45:85:bb:e0:8a:57:
                    8b:cb:9f:c9:58:56:c2:8a:eb:de:b8:98:db:b0:3d:
                    16:e0:12:3a:bf:bc:46:cd:20:f2:1a:d5:ff:53:6b:
                    49:84:40:52:40:fb:6b:d5:11:1d:0b:b0:76:af:43:
                    7e:e4:18:a4:c2:7f:68:3b:46:ee:eb:e0:18:b0:69:
                    9d:53:46:81:79:34:38:44:da:cc:33:bb:51:64:ad:
                    f4:29:e9:a3:66:ff:57:26:2c:07:78:8e:62:2a:d9:
                    b0:7d:a9:cf:f0:6e:d1:70:c5:19:e0:ce:cf:70:31:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:54:7F:8E:0E:52:2C:5C:97:A1:F7:41:AE:E5:7A:19:75:8C:D8
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:93:f3:92:25:f2:c3:01:77:e7:a0:46:63:28:e8:3e:e2:
         f2:ed:4e:6d:b5:f3:3d:7f:df:aa:38:dd:03:8c:f3:3c:ee:06:
         b1:18:4a:64:da:6b:79:fe:39:09:f6:c2:c5:cc:84:ac:1c:c7:
         02:97:41:bd:f2:da:bf:69:b8:ca:ad:9b:d9:02:e0:e6:63:5f:
         a1:77:57:63:77:49:96:8b:37:a9:54:b0:93:f1:0d:d7:e6:3e:
         ae:ae:ac:34:56:df:c6:37:5b:6c:b2:fb:fc:6d:fc:7f:a1:05:
         df:a9:78:14:9d:7c:3e:96:be:77:3d:52:41:49:2f:85:e9:3f:
         c9:f5:5a:f2:a4:13:83:30:cc:cf:14:14:51:25:c5:df:9d:a9:
         01:14:52:ee:0e:7b:80:05:5d:5f:41:2a:8c:18:02:58:db:ae:
         aa:9a:ca:23:f3:98:a0:fa:42:1a:f0:36:2e:53:3c:74:e0:46:
         b3:dd:50:fe:01:dc:58:66:9c:0e:ad:72:d6:c1:a0:ca:db:04:
         10:e8:48:51:41:4f:05:43:e9:32:81:da:c8:52:78:d0:58:da:
         45:3c:77:2b:fd:49:a6:3a:08:9d:18:c8:86:32:df:7f:23:b7:
         a0:ae:01:75:43:f7:1b:4b:db:d6:d8:42:aa:b7:f4:ca:41:36:
         fd:f0:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:27 2026 by rpki-client