Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
File:                     J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json)
Hash identifier:          wAiQCQm+gbdhiyNmEmDbZ8Z1SXVWGaoOELNjnsNMCRg=
Subject key identifier:   12:CE:DC:32:75:C6:E2:ED:DD:A1:BE:9C:3D:57:6C:D6:08:B7:5A:C4
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Certificate issuer:       /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial:       019D2A728C8ACE66E3EF300875A5835EC828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 14:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:43 +0000
Files and hashes:         1: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: HBfZlQuLmOTDnSu0XqpcOhHZleQRkJOR+ouOa0oFVb0=)
                          2: f6iqlfdMArGL77ftRWPuRND2qEw.roa (hash: Y4n4zPlQ5X9WdhdswqlaVDVx5UOEzkW5UgOyIaM7S3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:8c:8a:ce:66:e3:ef:30:08:75:a5:83:5e:c8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
        Validity
            Not Before: Mar 26 14:00:43 2026 GMT
            Not After : Mar 27 14:00:43 2026 GMT
        Subject: CN=12cedc3275c6e2eddda1be9c3d576cd608b75ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:83:4a:2f:1b:c0:19:4a:ed:9f:8f:1c:f6:
                    78:43:5f:79:6b:bd:08:c8:63:89:c6:21:87:5d:c7:
                    f4:c3:e0:e8:20:2e:6e:58:80:6d:6f:ea:a5:56:a3:
                    6c:d7:26:10:49:dc:a5:af:3a:96:f3:c9:c4:b6:d2:
                    42:31:77:d4:53:ba:06:f7:40:fe:0c:2e:88:de:9f:
                    a2:9f:29:3d:9d:fc:32:8e:96:1f:20:8a:c1:10:16:
                    38:34:2a:17:c8:23:bd:98:e2:d6:31:08:60:1a:ff:
                    ae:7c:36:d4:f0:74:68:89:78:c9:f4:6a:93:5c:0f:
                    93:9c:6f:b2:ae:53:c7:cc:f5:a8:96:bb:0f:03:eb:
                    f4:8f:6e:60:a9:08:be:93:77:0e:70:1b:ea:09:fe:
                    a6:71:99:c0:b1:06:b4:c9:94:cd:0a:fd:92:1c:b6:
                    d8:43:2c:26:fb:a5:da:21:bf:29:5c:29:20:97:e1:
                    7d:40:55:bc:91:30:4d:6b:8e:e3:f8:c9:ca:ed:50:
                    3a:6a:56:e9:08:a9:81:7c:a3:1a:f9:f6:91:fd:86:
                    5d:c4:0b:42:65:0c:11:aa:d7:c4:9f:c4:58:bd:67:
                    1c:72:f2:ec:92:f9:f4:7b:c1:a4:6b:82:b3:ca:e6:
                    e9:f0:e2:e1:50:cc:5f:b4:d7:aa:d8:a4:b8:40:2e:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CE:DC:32:75:C6:E2:ED:DD:A1:BE:9C:3D:57:6C:D6:08:B7:5A:C4
            X509v3 Authority Key Identifier:
                keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:53:44:ad:d1:ae:6f:08:e2:19:ac:f0:ff:78:84:62:89:50:
         ed:84:87:3a:42:82:c4:09:72:33:31:97:d0:6a:ea:90:60:8f:
         09:e9:20:80:86:cf:3e:4c:46:5b:71:26:20:6a:1b:46:f3:5e:
         94:5d:2f:9e:35:12:18:24:e0:fd:2f:da:a4:48:c7:9d:48:43:
         04:96:85:05:22:37:ab:e4:3a:d4:47:34:97:1e:63:81:51:11:
         f9:20:cc:5c:9f:7b:6e:a4:08:74:77:9a:f5:3e:4b:35:93:fc:
         77:60:4d:b1:96:c4:5b:40:01:99:fb:1b:df:30:69:ba:7c:da:
         f6:60:75:88:e6:ad:6f:2f:ae:63:9d:57:4f:7a:ff:29:c6:c2:
         ef:f5:d2:01:5a:52:16:f0:e9:36:8a:96:f6:5c:d6:f9:21:f0:
         50:d2:24:fe:9c:4d:cf:c8:65:5e:bf:d0:2c:66:a1:df:f7:5b:
         78:c0:60:aa:fb:b3:47:1b:c4:00:87:27:a6:f1:4a:b3:b8:7b:
         d7:b8:20:75:e5:de:25:a1:95:bb:02:ce:40:ff:0b:bc:8b:a1:
         38:7b:af:82:1e:e2:c3:0e:dc:20:0d:13:ac:6f:54:11:5b:06:
         30:c2:40:92:1a:c1:69:39:1b:91:be:5a:70:5b:9a:e9:5e:2a:
         5b:d5:1d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcoyKzmbj7zAIdaWDXsgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTQ1NTYzOTViNDdiZjQzZTBkNWQ1NTZlN2UyNTViNmM4
YWNjYzIwHhcNMjYwMzI2MTQwMDQzWhcNMjYwMzI3MTQwMDQzWjAzMTEwLwYDVQQD
EygxMmNlZGMzMjc1YzZlMmVkZGRhMWJlOWMzZDU3NmNkNjA4Yjc1YWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ+DSi8bwBlK7Z+PHPZ4Q195a70I
yGOJxiGHXcf0w+DoIC5uWIBtb+qlVqNs1yYQSdylrzqW88nEttJCMXfUU7oG90D+
DC6I3p+inyk9nfwyjpYfIIrBEBY4NCoXyCO9mOLWMQhgGv+ufDbU8HRoiXjJ9GqT
XA+TnG+yrlPHzPWolrsPA+v0j25gqQi+k3cOcBvqCf6mcZnAsQa0yZTNCv2SHLbY
Qywm+6XaIb8pXCkgl+F9QFW8kTBNa47j+MnK7VA6albpCKmBfKMa+faR/YZdxAtC
ZQwRqtfEn8RYvWcccvLskvn0e8Gka4Kzyubp8OLhUMxftNeq2KS4QC6eaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLO3DJ1xuLt3aG+nD1XbNYIt1rEMB8GA1UdIwQY
MBaAFCeUVWOVtHv0Pg1dVW5+JVtsiszCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYt
NzlkYTdhYWFhM2IyLzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYtNzlkYTdhYWFhM2Iy
LzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVNErdGu
bwjiGazw/3iEYolQ7YSHOkKCxAlyMzGX0GrqkGCPCekggIbPPkxGW3EmIGobRvNe
lF0vnjUSGCTg/S/apEjHnUhDBJaFBSI3q+Q61Ec0lx5jgVER+SDMXJ97bqQIdHea
9T5LNZP8d2BNsZbEW0ABmfsb3zBpunza9mB1iOatby+uY51XT3r/KcbC7/XSAVpS
FvDpNoqW9lzW+SHwUNIk/pxNz8hlXr/QLGah3/dbeMBgqvuzRxvEAIcnpvFKs7h7
17ggdeXeJaGVuwLOQP8LvIuhOHuvgh7iww7cIA0TrG9UEVsGMMJAkhrBaTkbkb5a
cFua6V4qW9UdIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:34 2026 by rpki-client