Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File:                     I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier:          8btcNpK4euU34jhqCSG35Qxyn3VQhSarHFPLu+UAvLU=
Subject key identifier:   E7:77:40:4B:CD:59:CB:B8:0F:ED:44:4B:51:8D:F8:E9:FA:12:84:03
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer:       /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial:       019D273AE0B0F50E14E6C2E66CD8C0D805C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number:          189A
Signing time:             Wed 25 Mar 2026 23:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:03 +0000
Files and hashes:         1: 249_vWOJGgvFFmLv_5dYY1MQIWI.roa (hash: XCFj+iRH39Cj0T/bNpjf+R2spCw9+pyFathw15z8sLI=)
                          2: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (hash: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM=)
                          3: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: 1WXES4tprHEl5Ajw9EMiS7s3kmodaHC/aJysSfaKevI=)
                          4: Qt2hQ4RevVaZm2AH4M4cjkjQkRg.roa (hash: 8xydBfba/M/Ub2ObXv2KeRHR1VzUxMr8P/a+WAzcdIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:e0:b0:f5:0e:14:e6:c2:e6:6c:d8:c0:d8:05:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
        Validity
            Not Before: Mar 25 23:01:03 2026 GMT
            Not After : Mar 26 23:01:03 2026 GMT
        Subject: CN=e777404bcd59cbb80fed444b518df8e9fa128403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:ba:7d:4d:41:e1:32:f8:3a:74:9b:e9:29:
                    c4:87:44:6d:25:af:6e:d0:ed:3a:ab:fe:1a:cb:36:
                    62:b2:fc:77:e4:df:f8:4b:2c:46:fe:38:fb:6b:31:
                    20:8f:60:42:39:b8:5b:d3:7f:20:ba:35:93:f7:a8:
                    2e:0c:f4:27:14:2c:f4:23:8b:0e:21:b5:78:58:8b:
                    6a:ab:dc:4c:67:c5:3f:e6:25:05:03:f6:84:3a:90:
                    7f:fb:1c:07:f0:19:25:16:be:20:09:08:e1:a6:9d:
                    bd:aa:48:6f:4b:47:7f:e7:24:bf:69:dc:96:fd:a5:
                    79:0d:c4:23:eb:cf:f2:b2:47:53:b3:03:dd:49:74:
                    4e:45:fc:1c:8c:57:fd:70:16:62:d3:40:7b:ad:3d:
                    89:de:7b:c8:80:e8:d0:19:8e:72:de:a4:e9:73:a9:
                    70:2f:e0:17:53:0b:86:b7:7f:8a:33:d0:74:1c:94:
                    c4:47:81:4f:4d:9e:28:50:c4:65:29:80:78:29:c0:
                    65:b8:b4:d8:6d:6f:99:c8:23:92:c0:90:12:ab:2b:
                    19:bf:02:d3:09:8d:16:92:d9:42:08:40:5a:15:ac:
                    16:e3:8b:80:f0:15:dc:ce:8c:fc:2e:ed:1b:29:aa:
                    44:89:89:1a:ef:0f:5b:75:2d:8d:15:54:36:d8:59:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:40:4B:CD:59:CB:B8:0F:ED:44:4B:51:8D:F8:E9:FA:12:84:03
            X509v3 Authority Key Identifier:
                keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:e9:8c:1b:b7:6f:f1:c3:fd:53:9f:5b:06:be:cc:2a:43:
         dd:39:ba:b7:2b:76:43:dd:d7:7e:1c:e0:44:8a:9d:ad:14:9a:
         47:d6:1e:27:18:8d:31:b0:9d:be:36:af:7a:04:6d:26:ad:6f:
         88:09:c7:15:f6:ff:f7:67:0a:77:97:6c:4d:40:28:d0:17:2b:
         26:9a:9d:9b:e7:ec:b6:10:ff:44:29:55:a6:3a:73:3a:bc:e4:
         b3:a6:ca:4c:16:93:16:11:1b:f1:97:7f:a4:2e:d7:6c:41:4f:
         54:a9:bf:85:92:3f:50:9b:f8:28:47:27:ef:66:8e:50:f6:a8:
         ae:07:bb:55:bd:28:b8:db:2e:8f:cc:39:74:ed:17:ab:81:98:
         ba:3f:31:64:fe:db:c0:87:c3:8e:95:cd:79:02:33:e0:b6:d0:
         27:b2:61:61:8e:24:9b:16:02:64:49:08:f7:15:21:5a:25:d2:
         92:52:09:bb:a4:12:f5:9f:36:83:ac:fd:52:c6:23:fc:96:73:
         9b:c1:9d:e2:28:dd:84:28:82:29:c9:dd:55:7d:88:fd:e0:66:
         da:9e:32:b3:3f:50:6e:b2:18:56:46:dc:ca:0a:8d:50:7c:ec:
         4e:80:f3:41:16:53:fd:5f:15:06:f8:31:b4:ee:79:5a:44:fe:
         3b:36:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:35 2026 by rpki-client