Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File:                     X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier:          auWwQNfCaINoKWRgGYPOQMeGyBOHpwJ5f7HZJyEYhik=
Subject key identifier:   F5:D5:4D:1A:6C:BC:6F:E3:51:BB:37:D2:14:26:BE:07:B4:76:37:4D
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       019D2816E34A0443D6B95A03C1AC27CAABAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 03:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:21 +0000
Files and hashes:         1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
                          2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: oegKQSzsuHqUgExiZl0T7TEN9xUXafD7XOWOy6LOTuI=)
                          3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
                          4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
                          5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
                          6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:e3:4a:04:43:d6:b9:5a:03:c1:ac:27:ca:ab:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Mar 26 03:01:21 2026 GMT
            Not After : Mar 27 03:01:21 2026 GMT
        Subject: CN=f5d54d1a6cbc6fe351bb37d21426be07b476374d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:27:2c:b6:2a:83:b1:ca:d0:82:0f:4f:73:
                    c3:87:81:35:e8:98:82:4c:3f:78:3c:6e:c4:5c:36:
                    eb:0d:2e:71:e1:1a:23:55:da:00:6f:84:22:5e:de:
                    3c:e7:91:5d:a4:e9:3c:d5:6a:e2:00:62:8c:4e:86:
                    1a:aa:c2:9b:10:ab:af:6b:54:c5:76:66:1c:18:d5:
                    d0:97:54:f3:de:8a:8f:b5:a5:f2:15:40:4e:53:57:
                    8e:06:f5:8a:20:5e:c5:5a:41:65:4d:df:fa:32:70:
                    1e:35:c9:b8:57:47:64:b4:86:2d:8e:84:b4:93:5d:
                    6d:64:04:05:53:32:5f:21:6f:dd:f6:62:e5:bd:69:
                    f1:60:3e:30:a5:bb:26:db:bf:65:6e:c9:ba:39:e2:
                    36:f9:92:e8:23:00:f2:48:08:31:b9:94:90:3d:fe:
                    e2:bb:4e:d6:38:45:be:26:cf:1f:35:57:7e:c2:76:
                    17:ea:1e:4d:77:08:d7:8b:26:7d:b8:68:41:f8:96:
                    d0:9f:46:ff:45:c7:c9:43:46:24:6d:59:dd:31:e7:
                    59:51:8a:29:c2:ef:86:a5:86:61:6a:d1:bc:5c:53:
                    3c:95:e0:f7:86:2d:5f:c0:af:de:7f:ce:b0:e9:a9:
                    63:ec:f1:13:20:ea:b2:0f:ad:b5:34:47:5f:45:73:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D5:4D:1A:6C:BC:6F:E3:51:BB:37:D2:14:26:BE:07:B4:76:37:4D
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7c:08:94:6a:5c:7f:25:10:de:b7:73:f7:ae:20:a1:8c:cb:
         fc:4c:a6:10:23:8e:35:5b:4c:7c:a6:4b:3d:1c:79:96:08:f5:
         6f:b3:77:96:da:80:47:7c:83:db:4c:17:34:70:41:af:ae:1e:
         02:2f:e8:7b:03:c7:47:27:f5:34:fe:e4:57:84:6d:17:ab:17:
         f4:d4:74:0a:8d:c3:c3:34:93:22:b7:c6:56:aa:26:1b:71:c1:
         70:ac:80:e0:c2:2c:0b:92:8a:1f:69:3d:8e:fe:ac:c9:d8:05:
         a4:6a:e9:8f:c8:35:62:8b:c7:e0:18:1d:b8:5b:46:c8:b9:29:
         ae:14:c0:75:71:53:6f:25:60:9d:76:35:9d:7c:36:bf:b0:95:
         e6:ad:2b:36:8f:5e:43:85:01:56:a1:b4:14:da:d6:2d:75:84:
         b9:d0:d3:af:a1:92:99:c2:ec:9b:4d:d2:2a:e7:3d:06:9a:64:
         27:a2:ee:3a:4b:11:4e:65:1f:0f:0e:b6:6b:c3:0f:a9:09:08:
         61:73:5b:7f:f4:19:af:e7:12:a9:1a:8d:59:d8:78:d1:3e:21:
         93:6f:90:78:25:e0:b9:aa:d9:42:a7:d7:27:c1:ef:43:c6:6e:
         bf:ba:0c:10:d3:45:c6:ce:0a:c8:df:76:91:40:98:23:55:23:
         91:f2:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:18 2026 by rpki-client