Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File:                     PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier:          IsAQ5lcW/boXWYjJhhHlYkd+t12noQdW1Kv3X5r3gJE=
Subject key identifier:   1B:4A:09:20:41:BC:7F:49:D3:D3:62:0F:43:BC:06:4F:9A:D4:14:F0
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer:       /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial:       019D2771E2B16F74C91A54BA5F7BA0E82630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 00:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:07 +0000
Files and hashes:         1: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: ooQ2W0l1oeyhsOHhYcbk2uAgAchA38a2+akO03XvJe4=)
                          2: SzyuS0eXnLwWeAGox-fMOKKRa0k.roa (hash: Dq+m+Q3Weeb2C27Qjb2pmSYSODOr7fQDIW223xJTttY=)
                          3: jLLoS47eUJae3t8FVyX8FnvYXxQ.roa (hash: eB5bNmdIRB0ZExtd92+X58k6GBDD7TYAVG7aUaPQUe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:e2:b1:6f:74:c9:1a:54:ba:5f:7b:a0:e8:26:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
        Validity
            Not Before: Mar 26 00:01:07 2026 GMT
            Not After : Mar 27 00:01:07 2026 GMT
        Subject: CN=1b4a092041bc7f49d3d3620f43bc064f9ad414f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:29:92:7a:3f:f5:3e:5b:a8:eb:1f:05:b2:
                    77:38:0f:7c:7b:52:bd:5d:93:e1:ce:92:42:d4:e7:
                    23:21:d5:19:fc:d6:01:f1:af:b6:76:67:88:27:e3:
                    80:9f:12:5f:95:0a:a8:fb:43:1a:9e:6e:19:80:70:
                    68:7d:92:52:87:7f:d5:2a:74:2e:89:37:c7:6c:24:
                    17:af:37:37:e6:84:c1:ca:7c:4d:62:49:82:c2:53:
                    60:46:0f:49:e0:f4:7a:98:27:62:7b:4e:a9:a5:a2:
                    ce:a5:7c:68:79:dd:8a:c2:de:00:50:77:ee:0c:04:
                    96:bd:d4:6b:ed:7e:9b:d0:70:5d:4d:43:7c:2d:0a:
                    32:b2:82:ff:1e:2e:47:52:eb:42:ca:d1:bd:c4:60:
                    a3:6a:47:c1:b6:1b:5e:bb:69:14:5b:3b:87:e7:2a:
                    58:55:fc:d6:b0:d3:e5:4a:5a:ea:04:f9:63:4c:8e:
                    a7:00:b6:d4:7c:26:fc:72:8c:62:13:69:58:d0:1c:
                    28:f9:2b:c3:41:2a:b1:b7:18:16:de:6a:8b:d0:d9:
                    f8:44:54:88:08:3f:88:b8:a0:75:fb:40:1c:b3:71:
                    b0:0c:f4:2e:73:3e:d4:73:2f:c7:3b:16:76:42:3f:
                    23:89:e9:1c:f4:2c:d4:87:65:d3:88:1b:61:d7:47:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4A:09:20:41:BC:7F:49:D3:D3:62:0F:43:BC:06:4F:9A:D4:14:F0
            X509v3 Authority Key Identifier:
                keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:3d:87:32:59:ca:29:92:5c:4f:a5:57:da:84:0b:76:ed:
         63:3e:69:02:b8:b2:e8:bb:b3:cd:cc:40:ee:31:41:30:65:c9:
         f7:5e:d6:f4:e9:fb:48:d0:38:ab:79:4e:84:b6:d9:fc:ed:6b:
         c6:b2:43:91:64:e0:09:3a:c5:9b:02:13:6a:e7:f7:c9:1e:28:
         09:09:49:8e:29:3b:b6:33:cd:06:5f:bf:85:76:12:cd:3e:2b:
         64:c0:39:8d:80:e3:2e:9a:f3:e2:38:5a:92:ca:dd:fa:d5:77:
         8f:8a:0a:23:36:a2:22:bd:4a:1a:5f:fc:79:47:cb:62:d9:41:
         a2:bc:72:f6:ef:f6:de:e8:07:cb:bb:ee:74:d1:f7:3b:ae:39:
         78:36:d7:70:74:31:30:2e:27:30:2c:3f:ad:d8:32:06:3c:2d:
         d0:36:1a:b2:8c:85:8c:03:fa:23:c2:51:0f:98:71:40:c4:20:
         93:04:cf:19:5b:b9:b9:ff:ca:76:6d:ac:73:18:15:f1:4d:0c:
         c4:e6:30:80:4f:44:e7:c9:cc:51:96:a8:46:f1:56:04:aa:b2:
         04:7a:12:3e:c1:4d:03:d9:e3:39:32:aa:10:16:30:a4:7f:52:
         42:8a:35:19:88:fb:26:a6:15:c5:63:d5:6f:b2:45:0d:9f:23:
         25:95:86:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nceKxb3TJGlS6X3ug6CYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzhjMjBlNjVkY2QzM2ZmOGE1ZTNjMzBhNjQ1OTI1YzVj
OWY5NWYwHhcNMjYwMzI2MDAwMTA3WhcNMjYwMzI3MDAwMTA3WjAzMTEwLwYDVQQD
EygxYjRhMDkyMDQxYmM3ZjQ5ZDNkMzYyMGY0M2JjMDY0ZjlhZDQxNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFopkno/9T5bqOsfBbJ3OA98e1K9
XZPhzpJC1OcjIdUZ/NYB8a+2dmeIJ+OAnxJflQqo+0Manm4ZgHBofZJSh3/VKnQu
iTfHbCQXrzc35oTBynxNYkmCwlNgRg9J4PR6mCdie06ppaLOpXxoed2Kwt4AUHfu
DASWvdRr7X6b0HBdTUN8LQoysoL/Hi5HUutCytG9xGCjakfBthteu2kUWzuH5ypY
VfzWsNPlSlrqBPljTI6nALbUfCb8coxiE2lY0Bwo+SvDQSqxtxgW3mqL0Nn4RFSI
CD+IuKB1+0Acs3GwDPQucz7Ucy/HOxZ2Qj8jiekc9CzUh2XTiBth10eGQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtKCSBBvH9J09NiD0O8Bk+a1BTwMB8GA1UdIwQY
MBaAFD7Iwg5l3NM/+KXjwwpkWSXFyflfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYt
ZGZjNWNjNjRhODFlLzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYtZGZjNWNjNjRhODFl
LzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbk9hzJZ
yimSXE+lV9qEC3btYz5pAriy6LuzzcxA7jFBMGXJ917W9On7SNA4q3lOhLbZ/O1r
xrJDkWTgCTrFmwITauf3yR4oCQlJjik7tjPNBl+/hXYSzT4rZMA5jYDjLprz4jha
ksrd+tV3j4oKIzaiIr1KGl/8eUfLYtlBorxy9u/23ugHy7vudNH3O645eDbXcHQx
MC4nMCw/rdgyBjwt0DYasoyFjAP6I8JRD5hxQMQgkwTPGVu5uf/Kdm2scxgV8U0M
xOYwgE9E58nMUZaoRvFWBKqyBHoSPsFNA9njOTKqEBYwpH9SQoo1GYj7JqYVxWPV
b7JFDZ8jJZWGjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:47 2026 by rpki-client