Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File:                     sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier:          2yos0ayKYyEwepalBS+E0SRX+Nm+VQ530pagncPyEog=
Subject key identifier:   C4:1B:AA:4A:C6:25:A5:CC:55:23:7F:B7:BA:9D:A2:37:BF:AB:22:FD
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer:       /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial:       019D28848A15042DFD672A5C7C5FF1B29366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 05:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:07 +0000
Files and hashes:         1: 8InJm95Mi61k0QTHHB2HlAmtVMg.roa (hash: 2odNj3E7Z3QzMXWZ7rRREN25MF9JDV8cWqw57luNOH0=)
                          2: EfZsQaoIf8J8bD_DTWAkF4-4WvY.roa (hash: ZJAEhbG64a9keH57hooL+GRwWBCFlIxTwwhv09FZ6zU=)
                          3: PEbeUkZb1apX7_y2826D9boddVg.roa (hash: HYxz0iV6fbIzFyu4KMUmllBnnOxRGfy9DSevgJ2/mV0=)
                          4: SeDJ1hAulV7F8UvJZdo94_98zCY.roa (hash: 2+EBqbTY3BogbTiuWVXf6LiOVDqJoUQjJrYdOmKpJQU=)
                          5: q1jBfLjL1kb_PCa_qTBjMZyucu0.roa (hash: /UBBiN7oTDbe2+3aCUtdKp43MVDaJatnqNvvyJu2c6k=)
                          6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: H2ALaQeW3ZUYcIQ+l1opUvOEuvLOZgfnhKO294qv7tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:8a:15:04:2d:fd:67:2a:5c:7c:5f:f1:b2:93:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
        Validity
            Not Before: Mar 26 05:01:07 2026 GMT
            Not After : Mar 27 05:01:07 2026 GMT
        Subject: CN=c41baa4ac625a5cc55237fb7ba9da237bfab22fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:d3:41:58:ce:c5:65:d0:f0:58:ee:f3:65:
                    b2:5a:75:27:60:42:31:b3:66:c0:5b:a5:68:4d:04:
                    65:19:1b:ed:9b:40:53:ad:78:75:86:a4:76:8c:b4:
                    5c:37:cb:23:b0:d5:a2:76:a6:aa:c9:76:39:c4:af:
                    f4:0e:11:75:c5:9f:4d:d9:ee:9a:8b:80:08:c3:15:
                    17:02:b1:db:3d:83:d4:1d:3d:f9:c4:07:a0:05:65:
                    c7:f1:55:2d:b1:2e:9d:6a:1c:c4:38:92:d5:3e:08:
                    8f:89:7c:9b:ac:68:a8:46:10:fc:b8:7a:0e:9a:7e:
                    f7:e3:53:5d:9b:b4:c4:ee:d2:dd:d6:04:f5:fe:1c:
                    81:9e:4c:38:fe:f0:14:ac:44:b1:07:e7:c3:a0:d1:
                    64:d5:87:ef:c0:b6:72:d9:9a:87:b9:6a:46:dd:61:
                    03:25:32:96:f0:66:48:ea:e6:b0:5f:91:e0:88:4e:
                    f9:78:81:66:7d:37:43:9e:55:6d:00:4f:c9:f5:e1:
                    1c:1f:94:bd:20:03:a6:0c:64:e4:86:3f:7d:81:3c:
                    13:27:6a:09:0f:2a:d8:35:0c:ce:7a:00:ed:9f:4b:
                    63:0f:1c:9b:45:2e:02:18:2d:f2:10:ec:17:44:2f:
                    bc:99:88:11:80:4a:df:3a:81:5e:f9:42:0c:8a:2b:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1B:AA:4A:C6:25:A5:CC:55:23:7F:B7:BA:9D:A2:37:BF:AB:22:FD
            X509v3 Authority Key Identifier:
                keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ac:56:35:dc:1b:38:93:98:fc:cd:df:71:1c:4f:8c:8e:82:
         65:c3:db:31:1d:9b:0b:e8:6d:61:75:49:57:6d:b1:c6:9a:ff:
         f9:59:94:fb:79:03:c4:41:78:82:b9:ae:b6:ac:ba:f0:3e:e0:
         dc:c6:7c:a8:4f:b7:8f:d0:5d:24:75:2d:5c:6f:69:e8:71:27:
         f4:9b:68:36:d6:d6:51:cc:99:e6:41:db:9a:10:b6:0e:7d:5c:
         65:a1:6b:55:78:8a:ab:0c:6f:ab:78:c5:8f:ba:69:21:f5:d5:
         20:75:bb:33:97:86:d9:1a:92:c9:ba:06:19:a0:9b:14:f5:7e:
         40:be:9c:fb:95:db:6e:ce:a0:4e:58:d8:c9:46:c4:ce:80:ad:
         3c:98:eb:8c:c9:bb:71:77:2f:c1:92:98:a8:39:f8:29:01:5a:
         c2:93:d6:9d:16:6c:fa:d4:97:0e:99:9b:4b:6b:0f:5c:a0:b2:
         6b:ff:e8:90:7b:a1:54:af:6b:2b:6e:0e:15:fe:61:07:c7:6b:
         15:d3:b1:4a:76:75:69:6a:3d:56:40:60:27:85:37:70:8a:9d:
         5f:27:d2:b8:03:7e:02:9a:aa:b2:b0:69:ff:e7:55:65:e9:ba:
         f0:ae:2f:b7:da:eb:ea:8f:71:ac:f7:e4:06:01:89:c8:e5:ce:
         51:12:5b:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohIoVBC39ZypcfF/xspNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2
ZDcwOTAwHhcNMjYwMzI2MDUwMTA3WhcNMjYwMzI3MDUwMTA3WjAzMTEwLwYDVQQD
EyhjNDFiYWE0YWM2MjVhNWNjNTUyMzdmYjdiYTlkYTIzN2JmYWIyMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq33TQVjOxWXQ8Fju82WyWnUnYEIx
s2bAW6VoTQRlGRvtm0BTrXh1hqR2jLRcN8sjsNWidqaqyXY5xK/0DhF1xZ9N2e6a
i4AIwxUXArHbPYPUHT35xAegBWXH8VUtsS6dahzEOJLVPgiPiXybrGioRhD8uHoO
mn7341Ndm7TE7tLd1gT1/hyBnkw4/vAUrESxB+fDoNFk1YfvwLZy2ZqHuWpG3WED
JTKW8GZI6uawX5HgiE75eIFmfTdDnlVtAE/J9eEcH5S9IAOmDGTkhj99gTwTJ2oJ
DyrYNQzOegDtn0tjDxybRS4CGC3yEOwXRC+8mYgRgErfOoFe+UIMiivIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQbqkrGJaXMVSN/t7qdoje/qyL9MB8GA1UdIwQY
MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt
MDc4N2E1MDNjYTY5LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5
LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaxWNdwb
OJOY/M3fcRxPjI6CZcPbMR2bC+htYXVJV22xxpr/+VmU+3kDxEF4grmutqy68D7g
3MZ8qE+3j9BdJHUtXG9p6HEn9JtoNtbWUcyZ5kHbmhC2Dn1cZaFrVXiKqwxvq3jF
j7ppIfXVIHW7M5eG2RqSyboGGaCbFPV+QL6c+5Xbbs6gTljYyUbEzoCtPJjrjMm7
cXcvwZKYqDn4KQFawpPWnRZs+tSXDpmbS2sPXKCya//okHuhVK9rK24OFf5hB8dr
FdOxSnZ1aWo9VkBgJ4U3cIqdXyfSuAN+ApqqsrBp/+dVZem68K4vt9rr6o9xrPfk
BgGJyOXOURJbFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:00 2026 by rpki-client