Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          GqKucYrz5YrVIO+im6C9BGuLk+A6auw9y3tNg349Gt8=
Subject key identifier:   A6:1F:A9:E4:28:34:2B:D2:53:53:9A:09:FF:2F:50:3E:F9:FF:F0:AB
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       019D29CE79D768D5E265F9B375C9CC10B87E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 11:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:30 +0000
Files and hashes:         1: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: JepWTJilS4hBT2dBTecisWdUDgoIwf4nBdl7A/lSvD0=)
                          2: qEVUH4qtPIdY31l07wJYpUogkpY.roa (hash: 1CkNjM5HwfDl6NM7jfzoD/R4QOj8Vqv8jxVT070r3q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:79:d7:68:d5:e2:65:f9:b3:75:c9:cc:10:b8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Mar 26 11:01:30 2026 GMT
            Not After : Mar 27 11:01:30 2026 GMT
        Subject: CN=a61fa9e428342bd253539a09ff2f503ef9fff0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:14:c5:d9:92:44:4c:76:53:f7:b8:b9:70:
                    de:62:06:df:e5:c4:1e:b1:98:68:6d:15:76:13:08:
                    bb:fc:1c:6c:fa:20:37:76:a8:e5:77:fc:c4:ff:e0:
                    13:c3:98:8f:7d:b0:be:d5:1d:bc:a5:9e:c1:68:0a:
                    83:89:8d:da:40:e7:fb:36:2e:f3:70:e5:9f:be:cc:
                    d3:4e:bc:46:06:9e:f1:1a:df:fe:0e:b0:06:a2:00:
                    21:9e:f9:a1:df:f1:20:84:d3:28:1d:f3:84:85:ec:
                    e6:9d:9a:67:5a:7c:8a:e9:fe:ef:a6:c3:45:7a:dc:
                    b4:81:d1:d5:39:f4:fe:e8:89:c7:46:a0:05:ef:83:
                    00:4b:d1:73:b8:3d:2f:30:df:c3:81:fc:5c:0c:fb:
                    0f:1b:74:f5:71:58:08:d2:6b:0f:85:72:19:de:fb:
                    a2:1f:f5:f3:ef:81:28:86:07:e0:fd:3f:c1:e3:f7:
                    9c:2a:3b:44:32:9b:fc:6f:77:f2:4b:93:79:3b:cc:
                    64:cc:e8:43:65:33:f5:d0:e8:24:aa:ec:2c:a9:69:
                    38:a8:3f:bb:d4:34:85:43:38:ba:f6:83:11:58:18:
                    eb:3d:d8:a0:81:26:d5:31:81:07:5b:60:3e:3b:9d:
                    77:7b:5b:76:0b:2c:2c:d5:75:98:43:41:99:74:b4:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1F:A9:E4:28:34:2B:D2:53:53:9A:09:FF:2F:50:3E:F9:FF:F0:AB
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:25:67:73:3a:1a:7f:23:d5:0b:5c:ac:fa:3a:14:9a:00:cd:
         c5:c5:ba:b5:7c:18:b4:d7:cf:82:2a:58:ca:2a:5b:c4:ee:b9:
         be:33:2c:0f:3c:19:9a:31:42:17:60:cc:85:9a:19:1a:70:83:
         23:95:2a:e8:b6:63:1e:5c:ab:99:78:65:bf:0b:34:22:9e:b3:
         06:9d:bc:08:29:d1:9c:96:53:57:00:23:89:bd:5b:88:97:ef:
         5e:75:d7:8e:f0:dd:c2:9f:95:d7:04:e5:0b:dd:7b:a0:9f:d0:
         07:53:03:a8:b1:b3:43:80:ef:d4:99:30:84:5b:7c:d5:c0:0d:
         22:42:9d:2c:a0:32:24:a9:ad:9a:06:f5:a4:f8:40:65:c0:03:
         40:f4:2a:4a:fb:19:ea:7c:81:22:96:2a:d3:f3:83:f8:0d:26:
         8a:e1:09:89:9e:91:ed:ca:43:0e:aa:25:9d:2c:36:c6:90:b0:
         80:9d:05:38:38:c1:87:a8:4e:38:c4:a0:28:f6:74:eb:99:33:
         80:6b:38:15:16:88:8c:58:e2:72:fd:b8:c9:eb:ec:e3:10:40:
         26:5a:e4:0c:fd:14:a0:34:89:f9:1a:82:57:8c:aa:b3:cb:30:
         d4:09:0f:fe:f7:e2:09:2f:35:d6:8e:a1:36:e9:01:7f:b1:16:
         f7:1d:54:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pznnXaNXiZfmzdcnMELh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZGRhZjIxMzI1N2QxNzZkZjUwYWE2ZTc3NjQ4YTBjYzcy
YTVmYTEwHhcNMjYwMzI2MTEwMTMwWhcNMjYwMzI3MTEwMTMwWjAzMTEwLwYDVQQD
EyhhNjFmYTllNDI4MzQyYmQyNTM1MzlhMDlmZjJmNTAzZWY5ZmZmMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUcUxdmSREx2U/e4uXDeYgbf5cQe
sZhobRV2Ewi7/Bxs+iA3dqjld/zE/+ATw5iPfbC+1R28pZ7BaAqDiY3aQOf7Ni7z
cOWfvszTTrxGBp7xGt/+DrAGogAhnvmh3/EghNMoHfOEhezmnZpnWnyK6f7vpsNF
ety0gdHVOfT+6InHRqAF74MAS9FzuD0vMN/DgfxcDPsPG3T1cVgI0msPhXIZ3vui
H/Xz74Eohgfg/T/B4/ecKjtEMpv8b3fyS5N5O8xkzOhDZTP10OgkquwsqWk4qD+7
1DSFQzi69oMRWBjrPdiggSbVMYEHW2A+O513e1t2Cyws1XWYQ0GZdLTiGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYfqeQoNCvSU1OaCf8vUD75//CrMB8GA1UdIwQY
MBaAFJ/dryEyV9F231CqbndkigzHKl+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAt
MzBiNzY0ZWI0OTAwLzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAtMzBiNzY0ZWI0OTAw
LzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSVnczoa
fyPVC1ys+joUmgDNxcW6tXwYtNfPgipYyipbxO65vjMsDzwZmjFCF2DMhZoZGnCD
I5Uq6LZjHlyrmXhlvws0Ip6zBp28CCnRnJZTVwAjib1biJfvXnXXjvDdwp+V1wTl
C917oJ/QB1MDqLGzQ4Dv1JkwhFt81cANIkKdLKAyJKmtmgb1pPhAZcADQPQqSvsZ
6nyBIpYq0/OD+A0miuEJiZ6R7cpDDqolnSw2xpCwgJ0FODjBh6hOOMSgKPZ065kz
gGs4FRaIjFjicv24yevs4xBAJlrkDP0UoDSJ+RqCV4yqs8sw1AkP/vfiCS811o6h
NukBf7EW9x1UUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:51 2026 by rpki-client