Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File:                     n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier:          8MpmnCfvy7hdkArFuTaZ2l4Dfn2RMgFHjnK3Zxung74=
Subject key identifier:   D6:69:DB:EE:88:E5:18:2B:87:CD:4D:C7:C9:ED:80:54:7D:5C:EC:5C
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer:       /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial:       019D26CCE59896845A985D19CAE677D30947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number:          188F
Signing time:             Wed 25 Mar 2026 21:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:55 +0000
Files and hashes:         1: _oRX04Ccp7g8yn6Qn7PqMMD7qgg.roa (hash: y56xKKuiofP4Wvb2d2PYOPDkpzXNerKcJtIazDABM0Y=)
                          2: cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa (hash: ngo5lXOLVy6FLpzOmrGOPzq70ozWmBI0PvKNWkY2CdE=)
                          3: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: GQGV2KfsvdJSF7MCjcmUARlR1EP6XIU+ogCzzZMmti0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:e5:98:96:84:5a:98:5d:19:ca:e6:77:d3:09:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
        Validity
            Not Before: Mar 25 21:00:55 2026 GMT
            Not After : Mar 26 21:00:55 2026 GMT
        Subject: CN=d669dbee88e5182b87cd4dc7c9ed80547d5cec5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:83:0c:b9:8b:60:00:f7:3f:34:97:75:b7:
                    c9:8d:ce:36:a5:6b:ca:17:9e:18:17:0d:7e:3c:12:
                    1a:00:44:5e:ca:3e:5f:a4:dd:11:40:17:1a:5e:a4:
                    df:21:ed:a6:db:46:c2:20:18:dc:2f:85:1b:9a:b9:
                    24:42:5e:3a:0b:6c:c9:0e:57:ce:a7:46:22:76:e2:
                    12:65:08:83:be:d3:4f:7c:4a:01:42:30:80:bd:c2:
                    65:9c:30:70:6c:a6:f3:b8:82:89:a9:af:06:e6:45:
                    ba:81:64:29:dd:c9:06:9d:1f:a7:e6:e8:29:c6:a2:
                    da:d8:c6:d5:6e:8e:e8:14:8c:97:01:f7:07:ae:54:
                    c8:55:79:96:9f:1f:9e:5d:ac:4c:e7:50:e7:40:7f:
                    e0:92:76:48:b8:29:b9:e8:f6:68:41:73:87:e9:2d:
                    7d:82:03:bb:dc:31:84:0b:29:76:29:d9:82:47:84:
                    8c:ee:58:28:fa:b8:b7:17:4d:17:7d:5d:d9:c9:24:
                    f4:85:b4:ae:a1:c1:78:0b:dd:af:b0:d6:8d:ed:6c:
                    67:fb:df:e0:b8:fd:f0:9a:02:0d:0d:bd:8e:2b:24:
                    e8:53:7f:08:d7:f2:73:9c:f4:c6:12:24:6c:6a:22:
                    fe:87:fd:4a:44:56:d0:38:93:dc:0e:62:7c:b8:be:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:DB:EE:88:E5:18:2B:87:CD:4D:C7:C9:ED:80:54:7D:5C:EC:5C
            X509v3 Authority Key Identifier:
                keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:34:78:c9:26:86:5b:43:f9:48:75:f3:98:56:52:cb:f0:
         d8:14:e4:99:c5:2a:ff:7f:76:6c:f7:93:f0:d8:57:f5:73:bf:
         f8:66:8d:75:5b:5a:89:b1:00:a0:40:57:6e:a6:92:dc:d9:19:
         ae:b8:76:c7:13:15:7c:9a:cc:22:14:94:6a:19:44:de:63:f0:
         4a:16:b6:43:7b:c2:45:31:54:35:d1:e8:66:22:f8:9e:3e:1d:
         ad:e5:79:c0:91:25:86:e8:de:c8:4c:a4:c9:9b:33:39:b6:0e:
         d3:b4:52:56:e6:01:63:0d:fa:7a:6e:33:54:b7:88:87:91:64:
         86:aa:38:53:18:c9:ec:d4:55:b2:26:a0:35:b5:b3:00:c4:66:
         05:42:c5:d1:1b:6b:71:d2:fa:d2:a9:e1:9f:d9:83:2f:71:01:
         8f:5b:77:97:a5:72:b0:f5:f2:be:50:3f:fa:1a:03:30:e0:fa:
         ab:09:e7:25:63:67:e7:f0:47:9c:a3:4c:b0:e5:ff:17:cb:56:
         fa:2f:2e:a1:31:5a:69:e5:5c:21:e6:57:ee:13:47:f0:9c:1e:
         62:8f:f0:de:67:5a:89:ea:f5:67:d7:e5:12:1e:9b:96:45:22:
         98:a0:56:2b:05:f5:00:21:11:5a:29:7a:71:cd:ef:b1:73:ec:
         91:a0:a2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOWYloRamF0ZyuZ30wlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjliZGY5YmJkMmE0NTk3ZTI2Y2UyMGJmZTEzODYyNGNh
ZDMzZGMwHhcNMjYwMzI1MjEwMDU1WhcNMjYwMzI2MjEwMDU1WjAzMTEwLwYDVQQD
EyhkNjY5ZGJlZTg4ZTUxODJiODdjZDRkYzdjOWVkODA1NDdkNWNlYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RKDDLmLYAD3PzSXdbfJjc42pWvK
F54YFw1+PBIaAEReyj5fpN0RQBcaXqTfIe2m20bCIBjcL4UbmrkkQl46C2zJDlfO
p0YiduISZQiDvtNPfEoBQjCAvcJlnDBwbKbzuIKJqa8G5kW6gWQp3ckGnR+n5ugp
xqLa2MbVbo7oFIyXAfcHrlTIVXmWnx+eXaxM51DnQH/gknZIuCm56PZoQXOH6S19
ggO73DGECyl2KdmCR4SM7lgo+ri3F00XfV3ZyST0hbSuocF4C92vsNaN7Wxn+9/g
uP3wmgINDb2OKyToU38I1/JznPTGEiRsaiL+h/1KRFbQOJPcDmJ8uL7KHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZp2+6I5Rgrh81Nx8ntgFR9XOxcMB8GA1UdIwQY
MBaAFJ9pvfm70qRZfibOIL/hOGJMrTPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEt
NjE5MjgxMzgwYmMyLzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEtNjE5MjgxMzgwYmMy
LzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn00eMkm
hltD+Uh185hWUsvw2BTkmcUq/392bPeT8NhX9XO/+GaNdVtaibEAoEBXbqaS3NkZ
rrh2xxMVfJrMIhSUahlE3mPwSha2Q3vCRTFUNdHoZiL4nj4dreV5wJElhujeyEyk
yZszObYO07RSVuYBYw36em4zVLeIh5Fkhqo4UxjJ7NRVsiagNbWzAMRmBULF0Rtr
cdL60qnhn9mDL3EBj1t3l6VysPXyvlA/+hoDMOD6qwnnJWNn5/BHnKNMsOX/F8tW
+i8uoTFaaeVcIeZX7hNH8JweYo/w3mdaier1Z9flEh6blkUimKBWKwX1ACERWil6
cc3vsXPskaCi/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:28 2026 by rpki-client