Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
File:                     m7rm4-12beR6umaTu1r4pkiXQxA.mft (raw, json)
Hash identifier:          F/ZX/JBFtf1rq44BEGVxMXkhwu95ospEXD9uaqLSK3A=
Subject key identifier:   4B:F8:BB:EA:CB:65:ED:AF:D0:01:DC:17:2B:3A:85:58:C3:C5:D6:0F
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Certificate issuer:       /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial:       019D26CCE74F97179E7932AF34034CB3AA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 21:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:55 +0000
Files and hashes:         1: AtRHUu5djF_9THq1S347r70vIec.roa (hash: 2rpIh+F0dzzUdJUnjgF+65AQ/tE0b6hNiw5NNKKZ9pU=)
                          2: NEmVNkbXZYrffbAhPL-Xg7g1_vs.roa (hash: Uf0bzb/NFK4azjx8QKPNpOoYIdPXAHv9ZC+GseFVOFQ=)
                          3: S4Q6dDZv7ODkY9Hdj6FMXesARjs.roa (hash: BfnQdIEMTPrwdIfmNAj/Eaatuwz9h9D3qynkoTNAarY=)
                          4: _IFdJfE78-zROqcic2dU-ZWfcFY.roa (hash: uiQtuxAVoE5FJEhMehigG75HbGFAiF/XJZ1c54451JI=)
                          5: m7rm4-12beR6umaTu1r4pkiXQxA.crl (hash: V7rtmZeOWY1vDW+NUVKHgkv1h4l4KEdTY6OYcFfXOV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:e7:4f:97:17:9e:79:32:af:34:03:4c:b3:aa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
        Validity
            Not Before: Mar 25 21:00:55 2026 GMT
            Not After : Mar 26 21:00:55 2026 GMT
        Subject: CN=4bf8bbeacb65edafd001dc172b3a8558c3c5d60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:f8:b9:55:b2:9a:aa:30:1f:f7:2d:c0:25:
                    9d:c1:83:d5:5c:82:77:a0:1b:cf:8b:69:f4:4b:74:
                    c4:70:ec:16:ae:6c:69:a8:82:a6:d6:9e:62:a5:6f:
                    f9:32:b6:21:93:c8:e2:7b:57:5f:1b:14:d5:ec:80:
                    02:27:a8:c5:03:cd:6b:98:b1:8e:81:eb:23:71:05:
                    7a:5a:22:46:26:15:7d:61:2b:dc:84:a4:8b:92:dc:
                    5f:d0:97:d4:29:64:12:f3:ea:aa:f9:7c:0f:73:a5:
                    15:b1:23:81:52:20:42:dd:05:f9:c2:08:13:fe:5b:
                    07:b9:d5:53:7d:66:81:05:de:46:bc:8f:90:90:d8:
                    86:6e:d7:b1:66:e0:72:dc:7f:4b:f3:c2:da:02:19:
                    a5:bc:09:49:ba:a0:dc:96:47:b4:9b:a4:b8:dd:0a:
                    5f:f9:da:f7:05:17:06:48:31:77:77:0c:ea:1c:f7:
                    2c:38:0e:0a:f1:0b:69:5f:19:fa:6e:8d:75:c3:82:
                    f6:bf:5e:cc:7c:b8:f3:77:de:c9:f4:f5:b6:23:4f:
                    7e:88:1f:cc:a5:8d:0f:d6:99:55:af:d7:a9:46:26:
                    c0:72:94:4c:9f:92:4d:f3:ff:61:8c:3b:5b:7e:be:
                    60:d0:d7:64:bf:f4:60:82:af:8c:8c:c4:49:e0:30:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:BB:EA:CB:65:ED:AF:D0:01:DC:17:2B:3A:85:58:C3:C5:D6:0F
            X509v3 Authority Key Identifier:
                keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:99:a4:55:11:15:88:a0:d8:c2:3f:fe:c5:ac:d5:23:dc:
         34:c4:7c:21:85:2d:b9:96:92:a5:14:c5:f4:16:a3:ae:b6:56:
         8f:4f:e5:ca:0c:12:f5:15:8d:88:75:dc:ab:64:6e:dd:04:a0:
         2f:5b:e5:d2:28:8d:e6:41:78:33:2c:34:1f:ff:df:a1:27:1b:
         04:33:b3:bd:c3:5a:e5:d7:fe:dc:fe:54:bb:74:cf:f3:78:23:
         57:a4:62:6c:77:ac:ac:78:6f:67:61:46:b2:ca:bb:ee:73:f0:
         13:43:48:35:36:4c:d5:45:fe:2e:80:cf:fc:eb:b3:b9:4c:df:
         a0:15:78:d4:ef:a5:2c:d9:af:dd:e4:b5:d8:3f:54:a6:07:6d:
         59:54:55:2e:9e:0a:55:fb:0d:35:3a:8d:fb:1f:d1:80:8f:84:
         7b:e2:52:c3:9d:09:ef:7f:e0:a5:10:b5:3d:b6:fd:35:5e:60:
         6e:97:85:ca:1a:2d:b8:49:58:92:ef:77:ff:0a:b1:9d:20:1c:
         f8:3e:7c:0a:99:91:7b:67:6c:a8:16:d6:5e:68:55:35:21:38:
         d0:12:c9:f5:b4:91:54:8b:cd:8f:5c:15:20:53:8b:1f:95:a4:
         39:8d:3d:57:45:a2:93:85:86:04:a5:1c:38:8a:e3:bc:40:69:
         2f:9b:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:56 2026 by rpki-client