Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          SgaBQO96WLcHaE/fEVKQDyNK0v1OhfxCzOYd0dt9rho=
Subject key identifier:   FC:D7:88:74:2B:32:2A:43:2B:58:17:0D:05:C0:EA:0D:B8:D5:21:DD
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       019D26282D95E64D4E06AF228978F7C35C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 18:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:00 +0000
Files and hashes:         1: 5dpJwurmjcNweBL1k9CqEM749HA.roa (hash: TM/ss4Bk5R6W5257quO9m83xy+4qnqaZUXN12oiEFzU=)
                          2: 7hzhMaHYuL-7BSKPyCuK9LYB9ts.roa (hash: Uix2TsomGcH7KlSyaSm6ItgQxCc3dO2ePCxbE9zpBHQ=)
                          3: GREeqZaODQe_pjDOkl9K06yc2fM.roa (hash: 9+xjCnaLjGsg7N2WRsPTLMdY0ESrGSWfOEeNfY4jOkE=)
                          4: Sw71YjaNP_rQ4woPVfkpIKYk-vY.roa (hash: V8sucqvBo1htAnsnFCbVGLqUSg9yHEvrbxQkCxUkXZc=)
                          5: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: 38zPQ16/osOz+r5optakigf1/jageQBduNQ/DeoO52w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:2d:95:e6:4d:4e:06:af:22:89:78:f7:c3:5c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Mar 25 18:01:00 2026 GMT
            Not After : Mar 26 18:01:00 2026 GMT
        Subject: CN=fcd788742b322a432b58170d05c0ea0db8d521dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:ea:85:4d:b5:4c:6d:b3:4f:70:b3:c6:49:
                    fa:12:85:b4:6f:5f:29:97:94:6d:f0:99:ed:de:85:
                    77:97:26:b0:69:a9:cd:51:47:a5:e1:96:ef:1d:0b:
                    41:41:1f:11:c7:a9:94:0f:45:86:3b:96:a3:2c:96:
                    8d:22:0b:9c:ff:4c:d1:7d:58:a5:99:01:9a:23:4e:
                    1a:07:f7:e3:5f:72:79:8f:40:b9:a8:81:a8:40:d3:
                    f1:c4:e7:61:d4:90:f8:d1:69:62:6b:74:fb:0d:8e:
                    94:80:7c:ca:d5:86:f9:8e:10:e1:55:d3:f2:4f:58:
                    f2:ce:14:fc:a3:e6:47:96:52:da:26:2b:8e:26:99:
                    f5:6c:df:64:d0:75:7d:8f:8e:01:32:6e:f8:b2:6e:
                    38:60:d3:5e:89:66:0c:09:f0:3d:17:bf:68:7a:42:
                    9a:c8:6f:43:a1:32:a7:78:8a:2e:14:7e:3d:10:83:
                    9d:ff:46:e7:fd:20:5d:f7:5b:8b:75:75:f0:65:42:
                    6f:d4:b1:5e:e5:95:4c:9e:4c:93:5a:00:e6:65:8d:
                    fe:9b:5b:21:61:c5:03:61:18:5a:5b:b1:a1:7b:9f:
                    d8:31:f5:e6:0d:c2:22:7f:63:7a:8d:da:c7:02:18:
                    ac:de:55:7c:35:db:c8:71:be:97:e6:5a:c9:c3:74:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:88:74:2B:32:2A:43:2B:58:17:0D:05:C0:EA:0D:B8:D5:21:DD
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b9:a0:2c:40:3c:ce:50:3b:ed:3c:7e:1a:5a:a1:98:26:c5:
         59:e3:1c:d9:b9:73:7c:26:86:47:02:5c:7b:d2:5d:e2:3c:c0:
         5c:f9:f6:3b:0c:2d:62:40:5e:58:6f:78:6e:03:fc:47:fa:59:
         67:ba:88:e8:71:98:64:c2:27:07:e3:2a:e5:13:83:f1:3a:a4:
         ce:ae:ce:89:ce:92:0e:4b:2a:bc:f0:87:3b:53:f1:55:92:f7:
         50:12:d7:75:3c:c5:85:dd:1c:01:f3:62:1d:90:05:b4:4c:9d:
         8d:26:4d:28:6a:63:c8:9b:23:7f:c0:cb:48:e1:e0:70:43:1a:
         36:29:c1:72:e6:1e:68:45:66:29:91:6c:54:43:0e:5b:56:32:
         80:a6:d7:c8:d9:29:10:56:80:56:58:e7:c7:65:b3:3c:3c:85:
         00:5f:1b:7e:da:92:2d:a9:d5:ee:29:9a:16:9b:cb:8a:04:63:
         25:ce:1b:03:bf:0c:17:20:bf:dc:12:ab:6d:c1:b9:29:14:b6:
         bc:a9:93:19:74:4a:90:f5:09:e9:97:ab:dd:e2:28:24:ab:f6:
         80:ed:4f:00:ff:52:a1:46:d7:b4:b1:7f:9a:6b:d2:87:d6:de:
         48:cf:44:5c:af:e1:97:d4:51:bd:69:63:bb:ec:dc:8c:9b:aa:
         9c:ee:86:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKC2V5k1OBq8iiXj3w1xWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjYwMzI1MTgwMTAwWhcNMjYwMzI2MTgwMTAwWjAzMTEwLwYDVQQD
EyhmY2Q3ODg3NDJiMzIyYTQzMmI1ODE3MGQwNWMwZWEwZGI4ZDUyMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviDqhU21TG2zT3Czxkn6EoW0b18p
l5Rt8Jnt3oV3lyawaanNUUel4ZbvHQtBQR8Rx6mUD0WGO5ajLJaNIguc/0zRfVil
mQGaI04aB/fjX3J5j0C5qIGoQNPxxOdh1JD40Wlia3T7DY6UgHzK1Yb5jhDhVdPy
T1jyzhT8o+ZHllLaJiuOJpn1bN9k0HV9j44BMm74sm44YNNeiWYMCfA9F79oekKa
yG9DoTKneIouFH49EIOd/0bn/SBd91uLdXXwZUJv1LFe5ZVMnkyTWgDmZY3+m1sh
YcUDYRhaW7Ghe5/YMfXmDcIif2N6jdrHAhis3lV8NdvIcb6X5lrJw3Q0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzXiHQrMipDK1gXDQXA6g241SHdMB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrmgLEA8
zlA77Tx+GlqhmCbFWeMc2blzfCaGRwJce9Jd4jzAXPn2OwwtYkBeWG94bgP8R/pZ
Z7qI6HGYZMInB+Mq5ROD8Tqkzq7Oic6SDksqvPCHO1PxVZL3UBLXdTzFhd0cAfNi
HZAFtEydjSZNKGpjyJsjf8DLSOHgcEMaNinBcuYeaEVmKZFsVEMOW1YygKbXyNkp
EFaAVljnx2WzPDyFAF8bftqSLanV7imaFpvLigRjJc4bA78MFyC/3BKrbcG5KRS2
vKmTGXRKkPUJ6Zer3eIoJKv2gO1PAP9SoUbXtLF/mmvSh9beSM9EXK/hl9RRvWlj
u+zcjJuqnO6GqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:59 2026 by rpki-client