Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File:                     sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier:          dZoI/0tWS8FwwRwW2kOyjsT8ODdmQiNyeynNVgKKEzA=
Subject key identifier:   E9:EC:F0:40:2A:1A:B1:E6:52:7D:89:74:56:04:50:6C:7C:59:DB:C2
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer:       /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial:       019D265F5196CAAEE5BAEF8379169EA336FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 19:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:14 +0000
Files and hashes:         1: 9TOqGu4162v0qWS1r5J3RslyKWk.asa (hash: blkV+1hYOV+uGdGMlHV2otVp88CM6pTuGTFsjZqUK1U=)
                          2: msFdZet1jGf9Pxj7w6VmCeW1jMQ.roa (hash: fyqpHHLV2QyOw8iBPdNynqjL383PMJfcyHqqNVPJBtE=)
                          3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: eSD5an6rT+vr+c8f3MNmSgOdHmakZt1aPDQam2W0veg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:51:96:ca:ae:e5:ba:ef:83:79:16:9e:a3:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
        Validity
            Not Before: Mar 25 19:01:14 2026 GMT
            Not After : Mar 26 19:01:14 2026 GMT
        Subject: CN=e9ecf0402a1ab1e6527d89745604506c7c59dbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:40:25:3d:8b:24:b1:25:8a:05:3f:aa:86:
                    a6:5d:1b:f4:c8:13:e3:20:71:a2:bd:9c:a2:9e:ba:
                    5b:05:72:4a:bf:ab:f1:54:35:bc:6b:1f:89:3e:ee:
                    19:6f:fa:68:28:83:50:ee:b7:02:40:dd:fd:f1:26:
                    9b:7c:15:27:4d:f1:0c:68:f9:fc:3c:27:2b:3a:00:
                    60:3f:68:3c:3e:e2:62:9a:93:94:09:ad:d4:00:74:
                    4b:1e:ec:5b:2b:98:93:8c:38:5d:94:13:9d:50:cc:
                    1f:6b:b4:6d:7d:f8:8e:70:1f:50:0b:a2:b6:92:30:
                    9d:48:90:df:2d:a0:81:e3:3b:d8:ae:85:83:e8:f3:
                    83:47:ba:70:d9:a6:5d:3e:04:72:12:4b:18:2b:8b:
                    1c:61:77:3a:7e:16:2b:0b:97:eb:c7:4c:e7:ce:8f:
                    a9:34:db:66:b5:45:ea:83:aa:63:f9:2e:a3:7a:c4:
                    9d:a7:4f:07:3b:28:48:47:2b:8e:ed:24:7f:fb:5b:
                    86:a3:dc:a6:c0:d8:72:f7:7c:a0:47:8a:a3:f2:26:
                    2e:60:e7:3f:06:d3:fd:6d:d6:bf:2b:88:4e:e8:e8:
                    ce:0c:db:27:a4:1d:ba:d3:1b:12:9f:f2:3b:4d:2a:
                    fe:4a:d7:b9:63:c7:76:13:46:5c:78:c5:4d:f5:14:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EC:F0:40:2A:1A:B1:E6:52:7D:89:74:56:04:50:6C:7C:59:DB:C2
            X509v3 Authority Key Identifier:
                keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:14:3e:69:a4:df:d0:3f:59:a0:12:4e:80:3d:14:30:d5:
         0e:59:71:a5:a5:5d:ff:b2:18:50:8b:64:73:c0:fd:a8:15:cb:
         7b:3e:04:54:df:b1:fe:f7:c3:2a:c4:5a:b7:ed:69:02:10:9d:
         2f:29:bd:dc:2c:f5:cd:82:06:57:71:5a:1e:b1:8d:83:c6:14:
         95:55:d0:3f:d2:a0:b3:01:cb:c3:88:4e:6b:22:96:ce:01:49:
         5a:4f:1d:87:e8:a3:89:e1:69:b2:7b:eb:2e:f6:0c:a6:ca:07:
         32:2f:95:28:b2:2b:95:be:14:2a:9e:50:30:a1:83:1a:bc:5d:
         27:94:84:63:eb:ea:0a:90:33:69:ef:d8:b4:00:4d:c9:02:b0:
         a4:cc:67:3a:1e:30:e7:ea:9c:ff:5c:3b:8a:40:f8:42:ab:b8:
         09:d8:c9:ee:40:88:6c:8f:2a:62:68:d7:be:51:6c:ba:61:83:
         2a:bf:46:25:95:ac:12:5f:86:41:0c:7b:88:17:cf:b3:93:99:
         fe:75:32:a4:64:78:a6:f3:ed:57:77:c7:f3:3a:73:24:4f:f5:
         44:25:fe:9d:33:65:20:28:6a:4e:4c:49:6e:a2:11:82:86:1a:
         28:af:8c:76:c8:f7:fe:19:9f:cd:bd:82:14:07:53:8b:43:a4:
         a4:a9:e2:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX1GWyq7luu+DeRaeozb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm
OWNhNTAwHhcNMjYwMzI1MTkwMTE0WhcNMjYwMzI2MTkwMTE0WjAzMTEwLwYDVQQD
EyhlOWVjZjA0MDJhMWFiMWU2NTI3ZDg5NzQ1NjA0NTA2YzdjNTlkYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wpAJT2LJLEligU/qoamXRv0yBPj
IHGivZyinrpbBXJKv6vxVDW8ax+JPu4Zb/poKINQ7rcCQN398SabfBUnTfEMaPn8
PCcrOgBgP2g8PuJimpOUCa3UAHRLHuxbK5iTjDhdlBOdUMwfa7RtffiOcB9QC6K2
kjCdSJDfLaCB4zvYroWD6PODR7pw2aZdPgRyEksYK4scYXc6fhYrC5frx0znzo+p
NNtmtUXqg6pj+S6jesSdp08HOyhIRyuO7SR/+1uGo9ymwNhy93ygR4qj8iYuYOc/
BtP9bda/K4hO6OjODNsnpB260xsSn/I7TSr+Ste5Y8d2E0ZceMVN9RR69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOns8EAqGrHmUn2JdFYEUGx8WdvCMB8GA1UdIwQY
MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt
Njk0ZDc4YjMyZDIwLzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw
LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDwUPmmk
39A/WaASToA9FDDVDllxpaVd/7IYUItkc8D9qBXLez4EVN+x/vfDKsRat+1pAhCd
Lym93Cz1zYIGV3FaHrGNg8YUlVXQP9KgswHLw4hOayKWzgFJWk8dh+ijieFpsnvr
LvYMpsoHMi+VKLIrlb4UKp5QMKGDGrxdJ5SEY+vqCpAzae/YtABNyQKwpMxnOh4w
5+qc/1w7ikD4Qqu4CdjJ7kCIbI8qYmjXvlFsumGDKr9GJZWsEl+GQQx7iBfPs5OZ
/nUypGR4pvPtV3fH8zpzJE/1RCX+nTNlIChqTkxJbqIRgoYaKK+Mdsj3/hmfzb2C
FAdTi0OkpKniiA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client