Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File:                     soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier:          iQEecKAwbpQd56/y9LIzNq4xRHYNoPdPAsV06lxfIoI=
Subject key identifier:   27:9E:F4:22:8A:F7:BA:4D:C7:F2:F7:D1:1F:15:32:68:23:46:58:5D
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer:       /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial:       019D2AE03DEEEE0747DC1EBD2A6AB2E8D2AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 16:00:32 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:32 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:32 +0000
Files and hashes:         1: Is5lVfkqCedDcO_OO0H8DuN4gvU.roa (hash: +NNpX2NGf5j+CvKpz8oUmEw0sfVnXlTMpDFrjNlIe5s=)
                          2: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: UEy6/cu7qJ0QkQg+nbER/VRSj8KTf1nx/kOwLPlRD3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:3d:ee:ee:07:47:dc:1e:bd:2a:6a:b2:e8:d2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
        Validity
            Not Before: Mar 26 16:00:32 2026 GMT
            Not After : Mar 27 16:00:32 2026 GMT
        Subject: CN=279ef4228af7ba4dc7f2f7d11f1532682346585d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:c5:5e:e5:08:52:88:55:e5:0f:cc:b0:e2:
                    82:52:c2:e3:29:45:2a:f3:14:22:4f:db:e4:fa:36:
                    05:82:a0:30:98:cd:d3:87:6b:fe:76:38:a3:a4:77:
                    23:52:8c:3e:34:5d:46:44:cc:58:1d:54:cb:8b:a1:
                    dd:be:03:e6:e5:2f:2c:11:e2:68:a7:28:44:1c:68:
                    e1:5d:27:81:be:15:78:8f:44:ef:56:bd:e4:72:e7:
                    58:cd:9c:0b:19:2c:94:9c:e4:b8:ef:04:e6:b3:52:
                    38:49:44:d9:83:8d:71:8a:7b:7c:98:17:6a:00:c7:
                    fc:38:35:f5:ce:50:95:83:fd:c8:2d:71:b2:5c:48:
                    34:c1:32:de:aa:61:ef:09:07:67:92:3d:19:7d:8e:
                    b4:5f:cd:fc:81:ca:6b:4f:04:25:8a:0b:c9:dc:0b:
                    ca:d9:f5:39:a1:54:03:3b:ca:ad:6c:f0:c6:e5:da:
                    c7:65:5a:ee:1e:6a:1c:a0:c1:f3:cf:99:3f:c0:42:
                    cd:5e:e7:08:cf:b3:ee:64:9d:fc:00:42:65:a8:f3:
                    5c:ac:ea:af:a6:a4:15:26:3e:30:1e:1a:27:78:b4:
                    7e:82:bc:c5:49:c4:47:5d:f8:b6:8e:9b:6e:5e:b4:
                    4b:b9:28:fa:f7:72:80:7e:b3:b8:74:24:09:00:e4:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9E:F4:22:8A:F7:BA:4D:C7:F2:F7:D1:1F:15:32:68:23:46:58:5D
            X509v3 Authority Key Identifier:
                keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:fd:47:22:4d:a7:52:f5:7d:88:b5:e2:96:de:f5:e5:3b:
         f4:7b:4e:f1:a2:1d:0f:f0:7f:33:dc:87:e7:99:d0:26:48:f1:
         49:56:8f:e0:4b:2a:cf:b3:95:ae:b8:37:c2:bb:7b:a8:59:20:
         a5:5e:ed:27:ca:8a:78:66:2d:34:ef:37:d2:b8:90:97:02:28:
         97:1b:65:38:2d:49:98:fe:c0:6c:1f:83:f4:ce:74:cf:4c:5d:
         3c:b4:0c:b8:d3:2e:95:3b:de:e2:0c:77:c5:bb:96:47:96:c6:
         5d:a2:52:26:ef:81:0d:24:7a:cc:63:70:65:dc:ba:b3:21:cc:
         32:f0:51:55:62:f8:d6:12:08:78:ae:82:49:73:85:50:0a:95:
         d4:c3:b8:e0:c1:58:75:d8:17:34:f7:b2:51:ad:03:d5:f4:35:
         30:b5:2f:9c:2d:9b:77:06:9b:be:e3:5e:cc:a7:62:9c:b7:3f:
         23:f4:6a:a9:7e:42:d2:86:31:40:5e:96:14:27:a4:74:86:9d:
         90:15:b9:2b:e3:81:a8:2d:2b:82:f4:b2:bd:7a:58:77:b3:83:
         e7:b4:0f:29:25:7e:42:fb:c2:d7:ad:5f:38:60:71:e1:2d:e2:
         37:db:30:14:ce:59:be:d2:1b:4e:c5:c0:5e:22:d7:6b:e5:7f:
         8b:1d:36:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4D3u7gdH3B69Kmqy6NKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODU5OTI5MmE2MzI0Mjk3ZTAyZmZmM2M1MTE5YmVlMGIz
MTc1NDgwHhcNMjYwMzI2MTYwMDMyWhcNMjYwMzI3MTYwMDMyWjAzMTEwLwYDVQQD
EygyNzllZjQyMjhhZjdiYTRkYzdmMmY3ZDExZjE1MzI2ODIzNDY1ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhXFXuUIUohV5Q/MsOKCUsLjKUUq
8xQiT9vk+jYFgqAwmM3Th2v+djijpHcjUow+NF1GRMxYHVTLi6HdvgPm5S8sEeJo
pyhEHGjhXSeBvhV4j0TvVr3kcudYzZwLGSyUnOS47wTms1I4SUTZg41xint8mBdq
AMf8ODX1zlCVg/3ILXGyXEg0wTLeqmHvCQdnkj0ZfY60X838gcprTwQligvJ3AvK
2fU5oVQDO8qtbPDG5drHZVruHmocoMHzz5k/wELNXucIz7PuZJ38AEJlqPNcrOqv
pqQVJj4wHhoneLR+grzFScRHXfi2jptuXrRLuSj693KAfrO4dCQJAORmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCee9CKK97pNx/L30R8VMmgjRlhdMB8GA1UdIwQY
MBaAFLKFmSkqYyQpfgL/88URm+4LMXVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEt
ZTM1YTY3ZTVkOWUyLzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEtZTM1YTY3ZTVkOWUy
LzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFr9RyJN
p1L1fYi14pbe9eU79HtO8aIdD/B/M9yH55nQJkjxSVaP4Esqz7OVrrg3wrt7qFkg
pV7tJ8qKeGYtNO830riQlwIolxtlOC1JmP7AbB+D9M50z0xdPLQMuNMulTve4gx3
xbuWR5bGXaJSJu+BDSR6zGNwZdy6syHMMvBRVWL41hIIeK6CSXOFUAqV1MO44MFY
ddgXNPeyUa0D1fQ1MLUvnC2bdwabvuNezKdinLc/I/RqqX5C0oYxQF6WFCekdIad
kBW5K+OBqC0rgvSyvXpYd7OD57QPKSV+QvvC161fOGBx4S3iN9swFM5ZvtIbTsXA
XiLXa+V/ix02fA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:43 2026 by rpki-client