Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          PsAdug9fYqh4t06vtnCrA2Pa/R8LHxnj71xpYMe4GZc=
Subject key identifier:   CF:F6:B6:1C:75:95:CE:99:FE:2F:42:7A:D7:40:26:F3:E0:40:F9:F1
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       019D27A8FEF5207BD37053E5E95018792227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 01:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:19 +0000
Files and hashes:         1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
                          2: 3kbw1gEBJPgdXB0IaWihDI9SnkY.roa (hash: wc+w33BWiYv9rEBwRELoelpcxbBZ5Kq+Pp0M0nU7gkg=)
                          3: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
                          4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: KK1pUbtQ9WAkoigyGpGlP+2ftJqDQYz9Qa3n0VXoaWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:fe:f5:20:7b:d3:70:53:e5:e9:50:18:79:22:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: Mar 26 01:01:19 2026 GMT
            Not After : Mar 27 01:01:19 2026 GMT
        Subject: CN=cff6b61c7595ce99fe2f427ad74026f3e040f9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:fd:31:6f:df:9a:01:0c:7f:31:2e:ac:b4:
                    a2:e5:0d:87:1b:d2:59:97:21:63:04:aa:0f:c6:4a:
                    cd:61:cb:d9:e7:c7:ba:ed:c3:82:f3:d8:46:a3:c1:
                    da:b2:a8:36:de:a2:c8:b2:a3:3d:30:29:8a:08:a7:
                    4c:9b:7c:4c:1a:b7:4d:c4:fe:8e:f3:39:bc:37:07:
                    1a:2a:24:d4:e7:4b:a9:83:ac:a0:f7:65:d6:96:10:
                    b4:29:ad:43:70:3b:26:23:07:e4:6d:b4:82:d7:99:
                    f3:10:71:63:f2:66:12:de:c2:d6:f9:6e:1b:f2:6c:
                    62:96:c5:eb:22:88:80:e4:a3:d4:0b:6b:3d:c7:b7:
                    fa:e0:e9:4c:8b:bd:61:8c:95:37:46:69:b7:d8:4e:
                    fd:29:52:9e:21:37:05:bc:6c:0e:21:07:60:1f:9a:
                    56:d7:4c:0d:d2:18:77:b6:14:09:bb:4a:bf:fb:50:
                    ef:4d:69:92:63:a1:fe:c3:70:0d:d4:41:2c:64:a9:
                    71:bb:3e:65:8d:10:5a:db:1b:8a:48:55:b4:79:3b:
                    93:bd:a9:70:ea:42:c1:2b:6e:f8:47:b5:31:a3:88:
                    f7:67:d1:b2:49:8b:66:f8:f3:35:60:2e:ac:49:c0:
                    9e:de:6a:8e:a1:f8:f0:fa:1a:af:87:37:91:36:76:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F6:B6:1C:75:95:CE:99:FE:2F:42:7A:D7:40:26:F3:E0:40:F9:F1
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:61:04:42:3f:62:0e:6a:68:79:5d:94:21:cc:94:f1:0b:7b:
         05:d7:32:66:f8:d4:8a:7b:b1:b8:c5:6c:19:78:a4:c9:44:fa:
         98:69:08:4e:26:0f:d5:d5:fd:7c:f6:c5:7b:e6:0e:34:fb:ab:
         9e:c0:71:99:e2:ab:5a:f5:db:02:a8:a8:db:a0:5c:e8:a2:02:
         ea:2e:de:ea:8a:c3:e1:ab:4b:39:18:06:aa:5b:22:7e:77:1e:
         30:b0:7b:ff:a0:0e:54:a6:97:95:cd:b4:50:63:5a:3c:97:da:
         45:98:7e:04:18:45:99:1f:41:26:c3:e4:1b:78:25:7b:70:e7:
         55:5d:6f:8f:2a:6f:44:49:65:f6:52:c6:2c:c6:e1:70:41:5b:
         47:c1:ce:ee:0c:d1:e2:66:10:59:c0:92:2b:23:9b:fa:f9:38:
         b8:c5:64:e1:18:36:77:7b:61:80:5c:66:51:87:34:de:5d:f7:
         4d:39:f2:26:c5:35:1a:69:bc:2d:41:a3:19:20:af:ff:cb:ed:
         26:08:ef:8e:12:1a:3c:d1:3c:7c:7c:89:ab:c9:b6:77:f1:18:
         ae:ba:d9:88:42:95:c0:bb:85:20:23:da:95:fa:b6:1a:94:04:
         6f:d5:ea:17:7e:f4:71:be:19:4b:d8:e0:16:5d:19:81:40:66:
         15:cd:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:29 2026 by rpki-client