Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          e2oTCrhF4IQYAX62d06S+Qf9OfdLvRZf62MsP1YI2+I=
Subject key identifier:   A1:05:38:78:BD:B5:EC:1D:5B:51:FB:01:CF:00:39:F6:0B:F9:06:98
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       019D2A72DC5654DF60094CEFC850219ACF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 14:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 14:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:03 +0000
Files and hashes:         1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
                          2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
                          3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
                          4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
                          5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: dyJ4sUxbahkSASBdLvTOJP2FZPDd7b256JcI8ypZWGc=)
                          7: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:dc:56:54:df:60:09:4c:ef:c8:50:21:9a:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Mar 26 14:01:03 2026 GMT
            Not After : Mar 27 14:01:03 2026 GMT
        Subject: CN=a1053878bdb5ec1d5b51fb01cf0039f60bf90698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:dd:84:0a:46:f0:c2:be:82:bb:6a:b0:d4:
                    bc:ed:db:0b:11:e7:7e:7e:94:e3:b1:0c:3e:79:6d:
                    e3:5c:6b:c4:c7:da:84:21:3d:ea:a7:d0:1f:db:50:
                    00:c1:f7:4b:28:f6:86:90:ca:bd:51:18:38:cb:aa:
                    7b:de:84:aa:17:82:70:7a:ff:ae:5f:76:3a:00:ea:
                    f2:87:99:b9:5c:1d:66:35:8f:74:18:a9:87:6a:12:
                    0f:0d:22:d2:65:9b:1e:89:9a:bc:96:30:25:03:06:
                    c6:60:ac:7e:6f:73:8a:68:c5:2b:e8:c4:98:99:d8:
                    17:32:e1:e1:fe:94:28:f5:9c:a4:11:11:2f:37:c8:
                    f7:e6:de:38:d1:ad:93:21:21:bd:c5:16:bf:27:2c:
                    17:a8:5c:1b:e0:57:25:8d:68:29:8d:3a:77:f3:6d:
                    77:d5:40:b4:ea:13:74:d4:28:ee:a8:9b:97:70:51:
                    1c:d1:d1:ae:f4:95:d9:4e:55:d5:07:ec:c2:bc:d7:
                    06:ec:52:0f:ee:2f:92:71:48:62:5f:0c:fd:bf:e0:
                    67:26:8b:d7:a9:d6:83:56:88:ca:0f:e9:f2:d2:df:
                    95:3b:7c:35:35:0c:83:06:45:b8:6c:e5:22:38:bc:
                    be:d6:ee:6a:28:9e:23:e3:35:34:4b:de:01:f4:ba:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:38:78:BD:B5:EC:1D:5B:51:FB:01:CF:00:39:F6:0B:F9:06:98
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:40:7c:97:d8:99:d6:b4:0a:7e:03:5f:07:ee:60:6b:90:9c:
         ed:9a:19:2f:2b:03:d6:f2:0a:27:17:8e:95:2f:0f:14:0d:af:
         2d:86:09:0f:1f:1e:9c:44:39:fc:47:4f:1a:90:c4:51:a3:49:
         a2:35:28:62:85:37:72:bf:e6:18:c3:23:cc:8e:b9:0a:b6:5b:
         df:72:df:f9:6b:fc:73:ba:e6:b6:c3:e9:23:0d:a9:2f:d7:8a:
         54:75:0e:dd:92:a7:16:ad:55:10:98:6e:ce:76:fe:1f:c4:14:
         1e:43:11:d9:ba:16:1a:6a:91:cd:9b:78:da:44:d7:d5:f1:f4:
         67:5d:fb:b0:29:a0:80:32:5f:36:aa:de:69:94:0b:d8:b4:75:
         84:41:ff:74:e0:da:22:c1:6c:b0:96:95:c4:1e:ef:df:58:02:
         e4:15:0c:92:1f:85:83:7e:95:f8:62:8a:0a:86:b7:44:a9:6e:
         f8:05:60:8e:7b:96:e8:50:45:aa:91:53:fc:b8:50:ab:b6:4f:
         6d:f5:1f:e3:cc:31:3e:4f:f7:e0:bb:f8:a3:29:82:5a:d9:c8:
         7d:7d:f5:6c:9f:10:e2:3a:08:43:d4:3e:a3:a3:07:55:5d:b2:
         33:40:36:e7:ae:b1:ec:93:18:0c:e2:1a:f4:72:aa:90:86:47:
         fb:e1:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:32 2026 by rpki-client