Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
File:                     V7J1ubzEXc6LPvAXLJZzeACUek4.mft (raw, json)
Hash identifier:          CaF9f5oIb6MQFMFOj3BlQHIMpB/M/Vuu/EnuLiKDFbs=
Subject key identifier:   A8:88:1A:E5:6D:9B:18:E7:83:BC:31:6C:80:00:4D:60:7B:F7:00:25
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Certificate issuer:       /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial:       019D2A3B4C622FB91512CEC4E3532BDA8E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 13:00:22 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:22 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:22 +0000
Files and hashes:         1: QHKubAaWU3rZXqcgMw_rFgGwHlw.roa (hash: 84jkJFXrjsdItstz0iNY4wQwy8CG6Wjsb9Ta7TD1huA=)
                          2: V7J1ubzEXc6LPvAXLJZzeACUek4.crl (hash: sqlvqlP1QNktfsTUf4ym7vlCxTtpfjozT1SunEM657g=)
                          3: gCxy-B6_9nnMrK0Bb6ykXoX-kvU.roa (hash: 3OI7nKRRWyMq1X53pCEQC3Z/sntzJNq/svM0w34ORBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:4c:62:2f:b9:15:12:ce:c4:e3:53:2b:da:8e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
        Validity
            Not Before: Mar 26 13:00:22 2026 GMT
            Not After : Mar 27 13:00:22 2026 GMT
        Subject: CN=a8881ae56d9b18e783bc316c80004d607bf70025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:2e:34:90:45:62:8d:1b:3e:a9:04:f4:67:
                    67:08:f6:cd:cb:95:94:a2:73:e6:53:30:0d:64:ab:
                    62:98:31:cb:02:14:6c:be:40:9e:a7:1d:e6:49:7d:
                    02:0c:1c:1b:05:a4:a6:0d:ef:02:12:eb:2a:08:71:
                    fc:d9:ee:c6:0e:16:c4:e1:d3:c0:48:f8:d9:c1:38:
                    66:67:db:f3:c0:d0:35:45:8a:d2:28:e2:07:aa:72:
                    dc:c0:09:3e:85:d9:b8:57:06:1d:b4:e1:c9:52:5b:
                    d4:16:3d:8b:c5:77:38:46:ae:83:2e:31:f5:24:34:
                    5a:50:46:8b:7c:a8:1d:65:b8:f3:83:03:07:db:d4:
                    45:70:7b:3e:ce:c2:9a:ff:f3:ae:ec:d0:5c:3c:3a:
                    39:22:39:23:26:b4:df:57:b1:ab:44:e5:a8:10:f2:
                    25:c9:a4:b5:96:1f:27:d6:6b:2e:27:44:97:84:75:
                    26:1a:51:90:21:cf:92:30:f2:55:f4:8d:a3:c9:d2:
                    2e:d8:04:6f:f4:57:58:9d:c0:70:1a:ba:bc:8a:b4:
                    32:07:8d:7c:65:51:19:a5:63:b5:25:4c:b8:e1:ac:
                    55:fd:6a:11:0c:d9:4d:25:ea:46:5b:62:4a:0d:c9:
                    60:07:5b:af:07:0e:df:b0:2e:47:b6:2e:44:59:d8:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:1A:E5:6D:9B:18:E7:83:BC:31:6C:80:00:4D:60:7B:F7:00:25
            X509v3 Authority Key Identifier:
                keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:75:8e:89:25:55:fc:11:b6:be:17:de:40:83:8b:da:1f:72:
         a3:ec:20:6b:d7:b2:50:32:7e:61:64:a0:dc:a8:78:28:a4:d4:
         c2:e1:8b:35:f7:f6:ec:59:ad:45:a3:ca:12:3f:5b:97:08:5d:
         4f:fb:0c:f4:5a:3c:62:52:06:b4:1e:9d:ed:01:ba:f5:7a:10:
         41:0c:91:57:73:8e:0c:1f:56:1e:8e:71:c4:ea:67:12:80:b3:
         5f:c5:48:ac:ab:f9:42:90:25:e1:ed:ff:7e:18:3c:94:5f:04:
         5f:bc:39:9c:00:51:6c:79:ab:f5:21:f4:ad:e9:f2:69:84:86:
         fa:b2:cb:a2:cf:a2:41:bc:77:f2:7d:c3:0a:2b:27:3b:57:4a:
         1a:ff:ea:88:73:2e:c2:96:1a:03:4e:e7:18:3f:3e:1a:e5:7d:
         26:b2:7e:05:47:25:73:fb:b5:f8:29:7c:95:6d:ee:94:35:7d:
         f7:d5:48:c5:08:34:0b:32:66:88:78:d0:9c:88:b8:6f:0e:25:
         48:dc:6c:26:9d:b1:48:05:95:b1:c2:69:68:51:b0:9a:0c:b7:
         b6:7b:16:23:b2:33:e1:ee:e2:3f:e7:61:e0:2c:7a:34:1a:e0:
         b5:4b:76:22:2e:b3:77:5b:35:c2:0c:de:21:6e:12:2f:00:d7:
         97:cf:50:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:55 2026 by rpki-client