Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File:                     T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier:          gbdwyNqKOJdM3eFnIfQfTwrhuhBs9GFdnKDbAmJkyc0=
Subject key identifier:   02:F0:68:25:F6:A9:CC:C5:89:A7:9A:D6:C9:11:F4:31:4D:AF:1B:AD
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer:       /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial:       019D284E828C08D34C7A3F81A2638174A902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 04:02:06 +0000
Manifest this update:     Thu 26 Mar 2026 04:02:06 +0000
Manifest next update:     Fri 27 Mar 2026 04:02:06 +0000
Files and hashes:         1: 8ZRlNNc35z7_o90cin0lnPRuC2o.roa (hash: v3k+bHpxtw/4UrPsyDE1vbWZluRfTlgNFYTkoDqmNws=)
                          2: HCGfFsFzdEdOgL94q44-LrKFOk4.roa (hash: z2rwFnfOIUrAmdSR0Bpv+q/6wHr2zoObtpToXBsamGU=)
                          3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: 4+6H7NNFLC4z5ReGqW9ndG9x80GYTa2vRV/idEtVSUs=)
                          4: bEtxOVFEe6RgofyeDUv0F4MuQwg.roa (hash: P00yl0lvfAFq6gWwP+lokbttZWyi8V39INq/nWNvt1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:82:8c:08:d3:4c:7a:3f:81:a2:63:81:74:a9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
        Validity
            Not Before: Mar 26 04:02:06 2026 GMT
            Not After : Mar 27 04:02:06 2026 GMT
        Subject: CN=02f06825f6a9ccc589a79ad6c911f4314daf1bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:aa:55:17:f0:36:74:a6:94:12:b8:05:a9:
                    ba:59:01:7f:48:5c:97:2d:61:9b:8b:b9:db:89:0b:
                    39:94:88:1f:e6:26:2b:a1:0f:f8:3d:b0:9f:75:44:
                    07:bd:08:62:06:aa:75:2a:e3:31:ce:e6:c5:bb:17:
                    ae:60:45:ce:4f:56:50:2f:9a:5d:cf:28:15:f7:8e:
                    a6:61:68:1f:ef:72:d0:8b:52:e3:5a:a5:4c:0a:d6:
                    e6:63:3c:30:13:00:5c:99:7f:25:dd:39:0d:4a:40:
                    5d:f8:69:97:e2:54:4e:39:2f:c8:9a:2e:b9:f7:38:
                    86:af:6a:b5:04:c6:23:c2:c9:cc:dd:68:d2:0a:38:
                    e1:1a:e8:24:cb:1e:a5:74:9c:14:5c:3a:0e:dc:f6:
                    05:2b:1c:26:c2:ac:76:71:fa:78:97:43:3e:8a:de:
                    e2:fa:d8:d4:5d:96:23:13:d5:fb:08:96:d5:2b:94:
                    86:25:10:c2:cd:ec:81:53:c5:1b:32:04:be:77:ea:
                    e6:b1:72:f9:57:81:4d:a6:b5:f3:92:6d:3e:94:c0:
                    69:b2:a1:dc:56:f0:3b:ef:7e:f9:59:1f:cc:e6:73:
                    61:36:f6:9b:0b:6a:84:5b:99:e5:43:55:b7:c4:c0:
                    92:d3:3d:96:95:d5:d1:87:68:29:f2:cb:8c:69:0c:
                    c5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:68:25:F6:A9:CC:C5:89:A7:9A:D6:C9:11:F4:31:4D:AF:1B:AD
            X509v3 Authority Key Identifier:
                keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:6f:79:b2:1f:de:14:1b:b2:f4:2a:4d:33:b9:86:74:06:
         c0:6b:39:62:20:c3:4d:a9:f8:eb:f5:a5:bc:92:c0:a8:91:e1:
         65:8e:0a:bf:03:e2:4b:d7:ea:dc:45:85:e7:78:49:cd:44:63:
         bb:5c:5c:31:6b:25:5d:a8:3b:f7:8b:ef:8f:de:36:ea:44:e0:
         22:72:df:89:aa:d1:00:94:13:1e:68:95:18:5b:06:18:49:d2:
         9f:24:2a:56:37:bf:7f:d0:6c:19:34:6b:42:d0:b7:16:76:c3:
         e4:31:c5:21:84:04:a4:c7:01:a8:74:d8:2a:b1:65:fc:7a:a6:
         34:b6:c9:fa:6b:f6:b6:aa:43:de:23:c6:65:b7:5b:82:a7:f1:
         d1:66:21:9d:0f:43:2f:9f:f9:ad:8f:18:73:76:fa:d9:e7:1a:
         93:86:04:cc:86:44:73:fe:49:8f:8d:63:39:53:ce:63:b9:49:
         6b:d1:14:58:e7:10:45:28:67:db:34:8d:44:e2:bd:bd:45:9a:
         20:0f:41:6d:17:ba:f3:97:56:99:f2:35:54:c5:86:15:25:89:
         70:3d:d3:75:ba:8d:0f:95:03:fa:7c:d6:a2:80:dd:41:fe:4c:
         ea:f0:3f:a3:60:99:bc:89:78:34:a4:1b:88:b8:83:f7:3a:16:
         bb:19:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:45 2026 by rpki-client