Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
File:                     ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft (raw, json)
Hash identifier:          ak4KmvGhWGpRln6d9fWxZcr0OefX22SCUJDPsBdJvf8=
Subject key identifier:   DE:4E:EF:B9:4A:B6:CE:FE:09:8B:09:D5:8C:C0:38:5F:55:13:B3:DF
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       019D27721D77DF7EFE6A1526025FC5E6034A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 00:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:23 +0000
Files and hashes:         1: Dr4k8rcxNwwvtD-NUqAYA4wpMFQ.roa (hash: yr8UoyK4v1H8SgPKrwOaaeZiAEGz1OruUIWHPcmq9Vo=)
                          2: ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl (hash: ZVFh6gyD5CG0hFYWHNy3iGj1N8NwuI6VbsXDedcTNWI=)
                          3: X5SBtcQkBk-r1YSIkJ6h_u4r5c0.roa (hash: WCGcN3I+HFWgQchuI1CposGX3iq6Q7uEeLbWfrOVY6k=)
                          4: XuycbR32EoIomKKoQhLCCI4Rvp8.roa (hash: HSv0T0VPzIpKBdwedT9ShZypv6pQI0ktxil19pf7w6Q=)
                          5: lD0ER9sndJVzynhBtAsN1nu4J0g.roa (hash: PzMpNtcO//f8fgScQjfd/rvw0npPMGdjT1plcxSP4o8=)
                          6: uNdZurNlGvzblt7cOT0TXlmz1qg.roa (hash: Lqq02/rAZp7YJsqEVziXP2UZSzM4V9uMFACxpPbuhg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:1d:77:df:7e:fe:6a:15:26:02:5f:c5:e6:03:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Mar 26 00:01:23 2026 GMT
            Not After : Mar 27 00:01:23 2026 GMT
        Subject: CN=de4eefb94ab6cefe098b09d58cc0385f5513b3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bc:de:2b:ea:a5:bd:64:cd:1f:9d:b3:f6:19:
                    65:65:71:f6:2d:ad:68:cf:bd:aa:c8:a4:ab:d5:c2:
                    7c:22:df:2c:ce:8f:70:27:a2:15:da:18:f5:e1:21:
                    32:17:b1:94:6e:fa:b6:3d:2a:e4:04:e4:42:0f:d9:
                    a2:ae:ce:23:cc:51:9c:fa:75:46:42:38:67:32:64:
                    82:65:ef:4e:4a:28:26:34:3b:02:33:71:64:57:c1:
                    2b:0a:24:1c:5b:e1:3d:23:f5:6e:e1:f6:cf:a6:31:
                    09:74:cc:d4:1d:d9:a7:7e:83:23:10:de:0b:dc:82:
                    b8:c3:a6:63:35:7d:93:98:d4:0a:d9:00:87:03:df:
                    29:32:b6:bb:b7:60:e2:94:58:77:ea:fa:1a:40:ac:
                    90:f5:a4:dd:a1:f4:f1:d9:2a:1d:96:9b:e5:64:e5:
                    63:74:04:52:73:ee:75:70:93:09:4d:21:f1:4e:26:
                    02:49:67:14:08:12:e0:ae:8c:59:91:21:a3:81:41:
                    4b:55:f3:d5:64:f8:cc:e0:1d:21:63:27:d6:1e:0c:
                    c3:fa:e4:fb:ca:50:60:69:db:46:66:a7:77:58:dc:
                    92:2c:f7:8f:1f:08:40:66:46:0e:35:00:89:cb:ab:
                    ca:f7:9f:f0:a1:59:d0:bb:79:0d:1e:d8:57:32:ed:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:EF:B9:4A:B6:CE:FE:09:8B:09:D5:8C:C0:38:5F:55:13:B3:DF
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bc:5c:e0:14:ba:d1:6e:04:b7:c9:5b:73:aa:7c:3f:bc:94:
         9b:32:c9:6f:be:b3:53:1b:d6:b6:21:c5:5b:af:06:29:1b:52:
         f3:68:58:fd:8e:c6:69:21:68:9a:d5:67:53:54:04:ed:aa:9e:
         42:28:36:7e:5d:5a:df:ef:2a:58:8a:2b:b5:4f:7c:16:9a:21:
         a2:0e:6e:e1:2b:96:b8:87:bb:db:45:28:ca:39:8c:32:b2:68:
         b9:c2:20:06:23:ff:f1:2c:73:51:9c:7a:8f:9c:bc:26:75:3e:
         13:1c:da:c9:82:0b:2c:fe:8e:3d:2f:00:f9:2f:d5:10:be:2c:
         b3:cd:24:a2:02:e1:38:84:ca:3e:8a:0b:e8:1b:17:67:ef:39:
         b4:59:46:7e:f7:af:2c:ea:e5:9d:51:bd:da:9e:b2:01:e6:62:
         c2:e8:87:85:33:f2:8c:43:8f:1f:60:fc:e2:c4:fa:34:0f:59:
         36:52:32:2f:6a:69:91:d7:a3:cc:2f:91:c0:c5:17:bc:23:d9:
         9f:39:62:9c:fa:1c:a2:5f:5e:50:e1:8e:f8:4a:0d:76:7b:e6:
         51:08:67:32:16:7d:81:d9:fb:56:50:a5:41:53:8f:21:b0:8d:
         dd:51:04:f5:a4:8d:d1:80:a0:89:e5:ce:24:6a:6e:22:e4:fe:
         fc:b5:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:59 2026 by rpki-client