Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File:                     d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier:          KAgJgj7vVgTMXyfMzYSZ9Q1cx8FiTib7EpmCERy6gko=
Subject key identifier:   87:D9:56:C0:B4:34:80:1F:A5:6A:1E:62:0B:D1:DC:D8:06:44:2C:F3
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer:       /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial:       019D2A723AD8D9180B88530B87ECE4180EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 14:00:22 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:22 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:22 +0000
Files and hashes:         1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: tG1oThiVBZWFDR67KZfmBDOqXwInZlMJBdPUEZmZ9w4=)
                          2: iU6hqxAQY7_aR8pSYH7dfZ4of_w.roa (hash: /BCTySyoy/2YrKj9N1WqdMwnqTnHMCBKNLE8+BsWToo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:3a:d8:d9:18:0b:88:53:0b:87:ec:e4:18:0e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
        Validity
            Not Before: Mar 26 14:00:22 2026 GMT
            Not After : Mar 27 14:00:22 2026 GMT
        Subject: CN=87d956c0b434801fa56a1e620bd1dcd806442cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:79:9c:d9:36:35:13:7e:c4:01:1a:9f:95:
                    7e:8c:62:75:34:5b:12:fb:32:65:07:7c:00:d5:0b:
                    b7:6e:e4:73:b9:a9:ad:1b:17:12:71:05:cc:d7:ed:
                    bc:b5:5d:a5:26:76:e6:14:38:c4:53:8f:1b:3d:f2:
                    a7:75:89:cd:4e:9e:fe:f8:16:96:a1:c7:af:0c:a3:
                    95:34:66:2d:a9:5c:7e:61:c2:56:82:ad:5c:a4:f3:
                    d2:6f:6b:71:ae:e0:55:1e:5a:74:c8:6f:c1:61:0d:
                    99:1d:74:3b:88:62:e9:9c:23:fd:ec:d0:9f:59:d0:
                    d9:6d:1b:6c:79:b6:0b:67:da:ce:12:e4:21:f9:db:
                    57:90:9c:02:7d:94:2a:06:f4:b6:1a:3e:88:cf:81:
                    70:78:57:69:8b:ce:0d:88:a4:d1:a9:69:1d:99:f3:
                    de:76:e9:2d:22:e6:8b:eb:1f:d7:12:45:46:f0:fe:
                    3a:48:c5:53:76:f8:0c:54:a5:bb:10:c9:9d:f5:36:
                    d0:92:fd:d7:6e:86:79:ce:bf:0a:ab:34:e7:c2:1e:
                    f1:57:cc:80:09:f2:8c:cf:b5:1e:74:2e:2c:6a:18:
                    5c:cb:07:6e:9e:6a:21:a7:f6:19:36:58:53:af:82:
                    91:50:64:06:54:be:a5:06:ea:a7:55:14:b8:5e:40:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D9:56:C0:B4:34:80:1F:A5:6A:1E:62:0B:D1:DC:D8:06:44:2C:F3
            X509v3 Authority Key Identifier:
                keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:31:bd:5c:64:59:1e:f3:06:b0:89:62:73:81:b5:54:7a:
         d2:b9:44:94:7f:2e:ef:e9:42:35:ef:23:2a:20:f9:83:3c:7e:
         a0:2c:0e:3d:1e:93:26:1d:a9:44:d2:e7:a0:08:d6:e7:ac:b1:
         5a:3f:d5:f9:d8:6c:49:81:88:45:20:3f:a4:49:27:7d:5c:9f:
         b7:f6:15:cd:4e:c4:75:53:84:9b:38:de:f7:0b:cb:dc:00:ea:
         2e:5f:de:9b:9e:8d:28:10:a6:3f:93:f2:fa:cc:d0:05:db:e0:
         e1:f5:96:a0:b6:b3:4b:03:ee:16:05:70:e5:a2:bc:e6:6a:6b:
         4b:01:c2:5f:06:86:57:50:c0:07:7c:97:22:eb:d3:7f:ee:7e:
         b9:69:a4:06:43:ea:4d:e6:e9:9d:68:6a:14:f3:68:24:40:2a:
         77:d2:d4:be:17:02:dc:aa:df:e8:29:34:77:ca:3c:86:1a:26:
         55:a6:23:e0:41:75:ca:c9:b5:0d:59:5a:96:f8:3d:29:2e:9b:
         47:15:0d:72:bb:8d:ad:48:81:c8:de:7e:26:5e:9d:69:4a:86:
         10:a2:69:c4:1b:ae:a8:a8:3f:d3:7b:21:da:60:4b:b4:83:1e:
         af:1f:bf:f9:2c:97:02:eb:50:72:b5:29:f0:6a:d5:2f:84:d4:
         f2:96:46:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcjrY2RgLiFMLh+zkGA7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx
OGViM2YwHhcNMjYwMzI2MTQwMDIyWhcNMjYwMzI3MTQwMDIyWjAzMTEwLwYDVQQD
Eyg4N2Q5NTZjMGI0MzQ4MDFmYTU2YTFlNjIwYmQxZGNkODA2NDQyY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSR5nNk2NRN+xAEan5V+jGJ1NFsS
+zJlB3wA1Qu3buRzuamtGxcScQXM1+28tV2lJnbmFDjEU48bPfKndYnNTp7++BaW
ocevDKOVNGYtqVx+YcJWgq1cpPPSb2txruBVHlp0yG/BYQ2ZHXQ7iGLpnCP97NCf
WdDZbRtsebYLZ9rOEuQh+dtXkJwCfZQqBvS2Gj6Iz4FweFdpi84NiKTRqWkdmfPe
duktIuaL6x/XEkVG8P46SMVTdvgMVKW7EMmd9TbQkv3XboZ5zr8KqzTnwh7xV8yA
CfKMz7UedC4sahhcywdunmohp/YZNlhTr4KRUGQGVL6lBuqnVRS4XkBzAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfZVsC0NIAfpWoeYgvR3NgGRCzzMB8GA1UdIwQY
MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt
NTRiNDFlNGZjNjNiLzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi
LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBsxvVxk
WR7zBrCJYnOBtVR60rlElH8u7+lCNe8jKiD5gzx+oCwOPR6TJh2pRNLnoAjW56yx
Wj/V+dhsSYGIRSA/pEknfVyft/YVzU7EdVOEmzje9wvL3ADqLl/em56NKBCmP5Py
+szQBdvg4fWWoLazSwPuFgVw5aK85mprSwHCXwaGV1DAB3yXIuvTf+5+uWmkBkPq
TebpnWhqFPNoJEAqd9LUvhcC3Krf6Ck0d8o8hhomVaYj4EF1ysm1DVlalvg9KS6b
RxUNcruNrUiByN5+Jl6daUqGEKJpxBuuqKg/03sh2mBLtIMerx+/+SyXAutQcrUp
8GrVL4TU8pZGxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:41 2026 by rpki-client