Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File:                     sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier:          uqk64i/F/nEkILAZN9FVWvxrdg/jgLzQFQFU37GRW/o=
Subject key identifier:   EA:E4:3B:8A:7E:83:9B:0E:28:CD:CF:58:B1:79:78:73:91:50:B4:0B
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer:       /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial:       019D2C6164C3EAD4FAAE6E9CC8E6028E2D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 23:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 23:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 23:01:13 +0000
Files and hashes:         1: NhJ6vdwMryrhpGOR8KKqWfDyEKE.roa (hash: 4pFWV2mpeu3iq5Hwo5/8aDs6PTomZFrJ08QxozJPsuY=)
                          2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: NDJcqMbdNfmnUYDmB/8K+qwea4HifxRDmddw69GcpJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:61:64:c3:ea:d4:fa:ae:6e:9c:c8:e6:02:8e:2d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
        Validity
            Not Before: Mar 26 23:01:13 2026 GMT
            Not After : Mar 27 23:01:13 2026 GMT
        Subject: CN=eae43b8a7e839b0e28cdcf58b17978739150b40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:cd:3a:f7:7a:66:88:b7:79:27:e3:2e:27:
                    45:9c:27:01:ea:85:19:f6:2b:13:0a:0d:69:13:15:
                    b9:5c:f8:5d:f4:90:b4:f6:fc:69:98:8d:49:f9:32:
                    f2:d3:61:1b:de:a2:74:78:83:ca:7b:91:4c:90:7b:
                    3a:76:02:79:94:56:72:e3:8c:a5:1d:d3:cb:53:c4:
                    b8:fb:59:4c:2d:32:7b:f2:bc:9b:2b:02:7d:52:e5:
                    fc:94:b0:7f:d5:81:ce:99:9a:49:21:ee:3d:aa:79:
                    f4:31:50:91:76:9c:1e:f8:84:be:d9:15:e4:3e:66:
                    14:52:5f:4d:15:a0:e4:e3:bb:43:aa:b2:e1:66:89:
                    e0:c6:41:9a:13:71:ff:c8:89:95:cb:78:a5:26:8c:
                    e5:4a:67:7a:f8:01:0c:39:d2:ee:05:16:d6:e8:d3:
                    15:29:04:83:15:1d:04:e1:50:59:f6:cc:18:bd:31:
                    11:5c:ec:dd:6e:c7:fc:e1:c7:f5:c2:d9:27:e5:d0:
                    56:35:e0:d9:27:be:da:97:60:d4:5a:45:fa:24:04:
                    b4:43:d6:64:10:08:5e:5f:02:8e:9d:8a:7b:36:21:
                    6e:58:98:a4:4d:62:07:2a:6e:44:6a:d9:9a:7d:15:
                    35:70:80:4c:0b:be:ec:ca:56:63:4d:04:49:e1:68:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E4:3B:8A:7E:83:9B:0E:28:CD:CF:58:B1:79:78:73:91:50:B4:0B
            X509v3 Authority Key Identifier:
                keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:42:f7:6e:a6:2d:71:80:8f:b2:fe:7c:50:9a:02:98:e7:
         1f:06:b8:19:d7:21:17:5b:ba:ce:1d:42:db:6b:86:4a:f5:64:
         ae:44:a1:88:c5:b6:60:3f:ba:1c:ae:e0:24:f9:60:15:71:16:
         e0:57:ab:5b:3f:f0:42:bf:19:34:15:19:de:b1:90:4a:a7:e6:
         8b:fd:78:de:17:cc:ef:5c:1b:b3:3a:55:00:a1:2e:8a:70:e9:
         f4:6c:7e:c4:ed:14:b0:6d:24:53:fc:07:ed:a7:d8:ba:8a:85:
         89:1f:f7:d5:d9:28:25:df:0a:d3:69:ad:1c:a5:e2:64:81:71:
         60:9c:ac:f1:40:ec:29:a7:38:d3:b7:57:7f:73:da:c9:55:78:
         2c:25:08:24:1c:7f:25:a9:8b:79:7b:b4:b4:f1:27:43:e6:25:
         02:a8:e7:a3:99:d7:93:93:62:bd:e5:18:5f:50:3b:0d:ba:88:
         2a:40:84:db:30:f7:d3:aa:5a:73:3f:43:74:38:7f:27:cf:83:
         be:a0:45:83:d7:41:15:d5:43:4e:e0:90:22:68:2c:af:3e:fe:
         d9:46:6e:0e:9c:66:d0:7e:87:98:96:1d:3c:77:9f:d6:34:96:
         78:1e:fa:2b:70:b8:0a:e6:d8:01:9b:c5:5d:50:f1:48:46:b6:
         77:28:96:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYWTD6tT6rm6cyOYCji1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTcyNTJhYTY0M2QwZGJjNDJkYTQxMGU5YzIwZjU3MDMz
NjhjZDgwHhcNMjYwMzI2MjMwMTEzWhcNMjYwMzI3MjMwMTEzWjAzMTEwLwYDVQQD
EyhlYWU0M2I4YTdlODM5YjBlMjhjZGNmNThiMTc5Nzg3MzkxNTBiNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUfNOvd6Zoi3eSfjLidFnCcB6oUZ
9isTCg1pExW5XPhd9JC09vxpmI1J+TLy02Eb3qJ0eIPKe5FMkHs6dgJ5lFZy44yl
HdPLU8S4+1lMLTJ78rybKwJ9UuX8lLB/1YHOmZpJIe49qnn0MVCRdpwe+IS+2RXk
PmYUUl9NFaDk47tDqrLhZongxkGaE3H/yImVy3ilJozlSmd6+AEMOdLuBRbW6NMV
KQSDFR0E4VBZ9swYvTERXOzdbsf84cf1wtkn5dBWNeDZJ77al2DUWkX6JAS0Q9Zk
EAheXwKOnYp7NiFuWJikTWIHKm5EatmafRU1cIBMC77sylZjTQRJ4WhXewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrkO4p+g5sOKM3PWLF5eHORULQLMB8GA1UdIwQY
MBaAFLCnJSqmQ9DbxC2kEOnCD1cDNozYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgt
MDI4YTJiMGE1M2Q1LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgtMDI4YTJiMGE1M2Q1
LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJ1C926m
LXGAj7L+fFCaApjnHwa4GdchF1u6zh1C22uGSvVkrkShiMW2YD+6HK7gJPlgFXEW
4FerWz/wQr8ZNBUZ3rGQSqfmi/143hfM71wbszpVAKEuinDp9Gx+xO0UsG0kU/wH
7afYuoqFiR/31dkoJd8K02mtHKXiZIFxYJys8UDsKac407dXf3PayVV4LCUIJBx/
JamLeXu0tPEnQ+YlAqjno5nXk5NiveUYX1A7DbqIKkCE2zD306pacz9DdDh/J8+D
vqBFg9dBFdVDTuCQImgsrz7+2UZuDpxm0H6HmJYdPHef1jSWeB76K3C4CubYAZvF
XVDxSEa2dyiWYA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:38 2026 by rpki-client