Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File:                     vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier:          Q7H+s1Ft82PP7NNMOn/5N/2k8IlhVQHvZpay1d3khyg=
Subject key identifier:   C3:73:A3:0F:BE:A6:F6:C5:A8:A1:D6:B6:9E:FF:B1:A3:97:F6:50:8A
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer:       /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial:       019D28BB39719C48D93F181C05B027BB5AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 06:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:51 +0000
Files and hashes:         1: j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa (hash: TldycA22tY7EvqsLvcs1YaipegGydJ+DMucdg1RkrFY=)
                          2: m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (hash: 0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=)
                          3: sq38IYtkwvLbxoqDW_7wpbQZMOY.roa (hash: 9FNCpi3tI2psX/axIbavUXntYIPjv5HbB/DRF/Sxvrg=)
                          4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: P7OoXnbFXDA44+WHjHgF/W/cSjuksFHsDo6/uvshbPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:39:71:9c:48:d9:3f:18:1c:05:b0:27:bb:5a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
        Validity
            Not Before: Mar 26 06:00:51 2026 GMT
            Not After : Mar 27 06:00:51 2026 GMT
        Subject: CN=c373a30fbea6f6c5a8a1d6b69effb1a397f6508a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9d:05:0a:0c:86:d3:31:ec:1d:17:ff:e4:f1:
                    f7:7e:d8:30:ff:56:30:c4:8e:c7:03:02:c7:af:3b:
                    19:6b:1c:f9:40:88:44:37:51:c5:d4:cd:b6:c4:fa:
                    4a:bd:fe:4f:13:cf:a7:2e:2a:aa:41:91:41:51:de:
                    30:06:db:ca:d3:5c:15:f7:a6:50:b6:bf:0f:c2:ff:
                    99:e4:83:c9:6e:10:03:45:1f:d5:3f:87:49:53:4c:
                    9d:d3:11:a6:d0:28:c9:e7:68:23:c9:9f:ae:d8:91:
                    42:85:3a:e6:d1:5f:81:46:e9:ae:bc:88:96:4e:f0:
                    2f:41:66:c8:10:45:df:b9:7d:60:e2:6c:9b:25:87:
                    68:37:34:42:05:d9:8c:76:99:af:78:ee:4d:28:90:
                    ef:05:06:dc:68:44:9f:cc:c6:db:c6:0f:dc:85:7d:
                    87:78:6a:46:b6:3a:71:42:91:55:dc:88:30:47:03:
                    e5:dc:97:bc:d6:19:81:2c:96:9b:3e:4f:1f:08:47:
                    33:35:27:68:1c:70:2e:e6:7f:da:5f:05:4d:14:5b:
                    9d:46:46:59:10:2b:5f:08:9c:6c:0a:67:98:fd:8c:
                    2e:1e:82:c5:8a:03:e2:3d:eb:e0:f5:34:20:d6:fe:
                    27:af:db:3d:4a:1f:5b:52:67:4d:78:b9:b7:4c:e2:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:A3:0F:BE:A6:F6:C5:A8:A1:D6:B6:9E:FF:B1:A3:97:F6:50:8A
            X509v3 Authority Key Identifier:
                keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:4e:8c:67:d2:02:11:85:6a:6e:28:f9:cd:f5:c3:00:6b:
         22:ef:06:6e:68:a1:5a:36:31:c8:d2:2c:9e:3d:33:33:cb:c9:
         4b:ed:03:dd:29:8e:7a:07:ec:13:31:e1:af:c6:5e:84:1d:11:
         87:61:68:fe:e3:29:31:74:91:d0:f1:4b:a4:ec:e3:72:9e:b1:
         ed:f1:1c:d6:29:ca:d6:a7:09:04:ae:96:e4:94:10:9f:8e:87:
         e6:cb:1d:e4:1b:fb:f7:53:62:6a:cd:58:4c:e0:6f:33:12:32:
         68:c8:4c:a7:ba:a8:c7:c0:3d:e5:95:3c:26:8e:74:eb:02:d6:
         bc:ed:d8:4b:fb:da:e3:5d:fa:e5:2b:b8:f7:3f:a9:4d:80:78:
         50:d3:60:1a:5d:d5:e1:0a:e4:ff:66:a6:8b:59:ee:23:cb:68:
         59:42:75:33:bc:07:6e:ad:67:d1:b3:26:ce:81:c6:62:f4:07:
         e5:f8:91:54:84:71:45:ce:42:2a:09:9c:39:fb:41:5e:20:05:
         c3:b1:b5:70:ba:99:ca:c6:20:5f:ad:d8:e4:54:fb:a2:0f:33:
         78:59:9c:41:18:bd:de:68:e5:cd:dc:7d:b9:32:b4:ca:13:44:
         4a:c1:ee:46:a4:a0:50:bf:3b:77:ea:a3:69:59:17:e0:6f:b8:
         30:69:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:45 2026 by rpki-client