Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          iBgY99DguI6gW7tR1sVtIQ5vw43gAsDyNPbx9dmq94w=
Subject key identifier:   A4:7E:6F:73:59:5C:51:3F:A5:0A:94:F8:BF:7F:A1:44:67:ED:62:B5
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       019D2704E6664EDD25BC272A5AEF58F09FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 22:02:05 +0000
Manifest this update:     Wed 25 Mar 2026 22:02:05 +0000
Manifest next update:     Thu 26 Mar 2026 22:02:05 +0000
Files and hashes:         1: BXc4TLN2CmhRJ2yOY8M4OZ5D4Ho.roa (hash: 4HtwLPKM/gPNWVp+9ccMF2LmMtM+RFcuZfWJ7xzFuic=)
                          2: Exw5qyeOsmaTxkuI-TVnrQ12bNY.roa (hash: 5anMOhWc/Hz9I+7ZHBfOzmKMYIxEdwwqXzXF5HG055M=)
                          3: _NBJFnlrLjlxU-NkUZtiAj1J8qo.roa (hash: HyoiSLaZjrIA6KdMeiHJErPb4cCaz1fssEroy13+1F0=)
                          4: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: dtble4aAjo6oMrJBCCamqND/b42MyzS5XycvZ0zi/YM=)
                          5: e3iOXt4kN0x8sNUsLzYrx2gh1uA.roa (hash: wihWRQC4V6tMHjFES8yjsPfSZBAFUkTbgCOxUXuLKJQ=)
                          6: g4p9tyK55FRpeCWOSuZ8Bmz5xrg.roa (hash: hjRNfDC3YP5pXhjMmniTuNmauo3ts39PcOEU3dAW+7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:e6:66:4e:dd:25:bc:27:2a:5a:ef:58:f0:9f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Mar 25 22:02:05 2026 GMT
            Not After : Mar 26 22:02:05 2026 GMT
        Subject: CN=a47e6f73595c513fa50a94f8bf7fa14467ed62b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:06:04:bf:48:b6:c9:ba:e0:03:8d:8a:9a:
                    20:b5:31:f6:aa:50:73:29:7a:bb:5e:3b:db:bb:77:
                    b5:bd:0f:55:61:5c:74:a3:2c:ed:9b:d0:4f:19:2b:
                    20:86:16:6b:fb:24:11:74:26:04:14:2a:45:b7:64:
                    2a:52:1b:fc:70:54:a5:ab:33:67:83:97:68:97:b1:
                    eb:fa:85:5a:df:f3:0c:57:41:7f:ea:46:ab:bf:f1:
                    aa:f6:9f:7b:8a:d1:3e:e8:af:c8:b8:7b:3d:bf:c5:
                    6e:5f:c2:7b:c4:ae:cd:58:25:60:34:d9:2a:0b:bc:
                    05:ad:80:80:2e:e2:56:e0:f6:e7:d5:9c:65:23:c4:
                    5c:6c:cd:9a:ed:04:0f:03:d1:a3:68:6c:62:22:9c:
                    e0:ab:05:7f:a3:70:ea:82:e9:da:f1:a3:85:c6:68:
                    92:5f:5e:22:df:ad:3d:b3:bb:f7:f7:7e:b1:25:3e:
                    6d:47:7b:01:0d:ae:36:2b:4b:2b:bf:a3:34:ea:23:
                    ce:08:ff:a0:b7:fa:29:3f:98:c7:76:1b:92:92:34:
                    08:bf:8c:57:78:c6:7f:52:53:a0:34:b3:3d:99:e3:
                    ec:5a:fc:67:e1:19:a8:98:5b:b0:75:82:46:03:e8:
                    68:cc:8b:92:47:2b:7b:4e:bd:0d:74:fb:f8:23:c5:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7E:6F:73:59:5C:51:3F:A5:0A:94:F8:BF:7F:A1:44:67:ED:62:B5
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f8:4a:b8:25:d7:5c:7c:7e:1a:6a:ad:3c:12:5d:98:71:69:
         c5:d3:7e:c4:c4:fa:91:71:b6:f0:a3:ca:d6:0b:90:a1:bd:dd:
         23:a2:bd:05:7d:50:1b:70:58:5a:9d:70:86:b5:2b:dd:05:51:
         37:6b:b9:69:cb:ca:c9:4c:c4:bb:34:be:95:84:19:0d:cc:bb:
         33:15:47:86:80:31:26:4f:19:61:34:de:5f:bf:c7:d9:14:0b:
         51:38:1e:f6:7a:50:42:b9:97:7c:65:d3:74:53:61:a4:43:c4:
         cc:73:d0:fa:eb:93:2d:d1:45:95:91:d2:4d:96:ef:95:a0:1d:
         eb:da:10:79:37:1a:e1:f2:3f:72:e2:4c:96:ce:3a:f5:81:a8:
         a0:99:51:db:59:25:96:7a:f1:9e:91:cd:ed:42:84:89:71:6b:
         cb:4b:82:da:df:b0:fc:b0:9c:90:86:18:90:01:68:84:2e:25:
         08:63:34:1a:b1:e2:d8:72:99:9c:78:b7:97:9d:a7:35:2d:d2:
         70:ec:62:5a:47:ae:d6:43:39:d5:b1:56:1e:ee:45:6d:fa:be:
         ae:01:e7:8e:56:e7:02:06:9c:10:58:ca:5d:dc:02:47:db:91:
         c7:6e:8e:74:d4:0d:67:c6:64:a6:20:14:4b:36:9b:af:e6:a6:
         35:58:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:30 2026 by rpki-client