Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File:                     V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier:          ECm9JgToKgatbw3uIV4pCvb966nGmQO6fSwv/S9SCgc=
Subject key identifier:   EE:DB:D3:16:1D:CB:57:58:A4:E7:D9:1D:7B:88:F9:19:EF:B9:7B:87
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer:       /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial:       019D28BBA500415F3086778E6E30A9987AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 06:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:19 +0000
Files and hashes:         1: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: nGCeLwLvywuMH8O85KutqDl2/5rKPamfiQkeqh1+yLo=)
                          2: hKVvr_-aCZpRix4ibxuUNSgCtto.roa (hash: rliNtwotXP1DxwetaWAK+AjUBqpkTMwr5I+2We2lWL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:a5:00:41:5f:30:86:77:8e:6e:30:a9:98:7a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
        Validity
            Not Before: Mar 26 06:01:19 2026 GMT
            Not After : Mar 27 06:01:19 2026 GMT
        Subject: CN=eedbd3161dcb5758a4e7d91d7b88f919efb97b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:5b:0a:9e:6a:95:74:1c:93:63:de:f9:c8:
                    88:26:d6:77:61:be:93:94:10:6b:74:1d:18:3f:40:
                    40:7a:b8:7d:08:cb:4b:db:af:ab:cf:ac:6e:e5:b6:
                    1c:38:fd:fd:90:70:c4:80:8f:89:75:a2:65:93:70:
                    b1:af:ee:ae:4a:85:f4:c9:f9:e9:1f:92:7b:3a:1c:
                    17:1d:33:59:51:63:49:3b:f2:d5:51:24:05:52:42:
                    28:d1:8d:bd:52:a2:dd:85:74:b4:68:cc:fa:81:3b:
                    f8:53:7e:be:9c:d0:57:32:0c:e6:67:ad:ac:7d:a8:
                    14:7b:e3:c1:9d:76:6a:81:ff:b9:2e:cb:a8:62:2d:
                    5f:15:ac:60:06:0a:63:30:17:d3:7c:fd:b2:27:8b:
                    ed:f7:d2:c0:8b:04:71:de:c5:9d:94:61:75:60:59:
                    35:32:8f:92:7f:47:db:93:fb:2f:a2:e7:e8:59:cc:
                    3a:cf:02:08:87:7b:d0:58:2b:15:b6:aa:5e:02:4a:
                    10:3a:23:4d:80:58:fb:3b:ec:ca:b0:22:e0:07:06:
                    63:c6:dc:da:05:70:b6:30:56:c9:93:fb:db:8e:b2:
                    09:30:46:11:24:b1:2d:40:9e:a2:52:3d:a9:29:d7:
                    cb:f3:9c:f7:71:8f:c7:0d:a6:39:97:59:01:74:41:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DB:D3:16:1D:CB:57:58:A4:E7:D9:1D:7B:88:F9:19:EF:B9:7B:87
            X509v3 Authority Key Identifier:
                keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:08:11:98:f7:f4:b7:d7:85:31:bb:d3:ba:08:48:34:cc:
         69:d2:c4:8a:ec:7a:38:53:15:f3:41:54:6b:1d:26:40:55:5c:
         6d:3d:a7:91:6b:e3:ca:78:86:42:c3:84:8a:a3:16:03:29:c9:
         91:8a:dd:3e:6e:11:4c:fd:9d:4e:46:50:ab:f3:16:bc:ea:50:
         5e:9b:7b:6b:90:80:83:88:87:7d:31:01:27:94:2d:93:2b:fc:
         5e:f6:f0:5e:ef:06:55:7e:e4:fc:31:94:72:a8:f4:39:85:8d:
         1a:4e:07:14:e6:bd:c2:62:08:c9:a4:e2:eb:66:a8:62:6d:37:
         26:6a:ea:7d:cf:c5:3f:54:97:5d:b0:66:9a:66:01:8e:b7:58:
         bb:b5:1b:cf:9e:dd:8f:24:e0:a9:e5:08:a8:d2:86:8a:68:7a:
         37:95:4e:47:4a:86:af:ae:fc:a0:13:b7:b5:1c:fe:0d:97:aa:
         ed:1e:b0:5a:0a:83:df:a3:1d:30:54:1c:8f:72:90:01:8c:1e:
         8e:ee:1a:e7:f9:ac:36:30:26:dc:1b:2d:2a:ac:37:a7:f6:b2:
         48:5b:1f:9a:a1:d7:4c:d5:46:9c:79:8f:fd:c9:98:9b:f8:64:
         7c:73:50:7f:57:f4:d2:05:65:90:8e:84:fc:6f:57:ee:4a:09:
         ea:46:d2:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6UAQV8whneObjCpmHq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmQ1OTQ5NGEwYTkyN2Y3YTY4ZjkwOWVjZWY1NzdjZDUw
M2RiMWMwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD
EyhlZWRiZDMxNjFkY2I1NzU4YTRlN2Q5MWQ3Yjg4ZjkxOWVmYjk3Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1apbCp5qlXQck2Pe+ciIJtZ3Yb6T
lBBrdB0YP0BAerh9CMtL26+rz6xu5bYcOP39kHDEgI+JdaJlk3Cxr+6uSoX0yfnp
H5J7OhwXHTNZUWNJO/LVUSQFUkIo0Y29UqLdhXS0aMz6gTv4U36+nNBXMgzmZ62s
fagUe+PBnXZqgf+5LsuoYi1fFaxgBgpjMBfTfP2yJ4vt99LAiwRx3sWdlGF1YFk1
Mo+Sf0fbk/svoufoWcw6zwIIh3vQWCsVtqpeAkoQOiNNgFj7O+zKsCLgBwZjxtza
BXC2MFbJk/vbjrIJMEYRJLEtQJ6iUj2pKdfL85z3cY/HDaY5l1kBdEHILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7b0xYdy1dYpOfZHXuI+RnvuXuHMB8GA1UdIwQY
MBaAFFdtWUlKCpJ/emj5CezvV3zVA9scMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQt
MWYxOWE4YmRhM2VkLzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQtMWYxOWE4YmRhM2Vk
LzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDoIEZj3
9LfXhTG707oISDTMadLEiux6OFMV80FUax0mQFVcbT2nkWvjyniGQsOEiqMWAynJ
kYrdPm4RTP2dTkZQq/MWvOpQXpt7a5CAg4iHfTEBJ5Qtkyv8XvbwXu8GVX7k/DGU
cqj0OYWNGk4HFOa9wmIIyaTi62aoYm03Jmrqfc/FP1SXXbBmmmYBjrdYu7Ubz57d
jyTgqeUIqNKGimh6N5VOR0qGr678oBO3tRz+DZeq7R6wWgqD36MdMFQcj3KQAYwe
ju4a5/msNjAm3BstKqw3p/aySFsfmqHXTNVGnHmP/cmYm/hkfHNQf1f00gVlkI6E
/G9X7koJ6kbSLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:51 2026 by rpki-client