Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File:                     jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier:          0aLVpypUcdQB+wtMjAhRbyVMcR9GXT1RQFwOb5KokdM=
Subject key identifier:   6D:24:63:34:CF:85:7B:91:7A:43:C4:5C:5A:D3:93:C4:76:A0:70:1E
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer:       /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial:       019D265FA146B29DC076C0FF4148C102D1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 19:01:34 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:34 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:34 +0000
Files and hashes:         1: 0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa (hash: 9FNLm9UezI9LWG0EYY6elTehFhNHqrh8PSFbqazgLkI=)
                          2: aIB-U74XOsh4LFFeV56dHmApdhA.roa (hash: n4BldvZSrWCDo/is34Mdq/Joj399xGxxHCi8O5qGXUc=)
                          3: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: V9uSqJ+C98QhQHNurydzirqcLq6FK8/F0mrVB260DJQ=)
                          4: jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa (hash: USL2VyfF57jrtGEUdroIYIf6KJtLy3Xo1q4FTmoA1+c=)
                          5: kft59b0FPyvt41ZJ7c7rkDRzMdo.roa (hash: rnkG/kK1GbP5ThmnLvK6djMuJiao91onEPjk3GN8OV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:a1:46:b2:9d:c0:76:c0:ff:41:48:c1:02:d1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
        Validity
            Not Before: Mar 25 19:01:34 2026 GMT
            Not After : Mar 26 19:01:34 2026 GMT
        Subject: CN=6d246334cf857b917a43c45c5ad393c476a0701e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:59:d8:af:14:fa:c7:d8:4a:2d:bd:03:23:
                    f7:1e:4c:a5:46:7a:17:8e:bc:76:d8:aa:91:1c:20:
                    94:5b:06:75:cd:a1:a1:19:53:70:4e:58:03:45:cf:
                    ba:b8:83:9c:e1:05:1f:ef:e5:ee:f8:8f:9a:f8:c8:
                    cd:c4:1d:a3:45:27:bd:f3:97:05:aa:a0:9e:60:7a:
                    4f:65:45:a3:a7:07:ac:75:47:02:68:0e:dd:1c:80:
                    c8:eb:cc:b3:53:e5:80:a9:e6:8e:bf:42:7a:2d:7f:
                    d8:8f:3b:8f:e5:2b:55:c7:ea:c6:a0:7d:46:cd:60:
                    05:22:9d:e0:ee:1e:6d:f9:60:9c:84:62:2f:33:2b:
                    e9:e2:79:ae:d1:ef:47:38:24:4f:b9:75:ff:e6:e5:
                    bc:13:75:3c:43:0b:2f:77:db:26:d0:8c:92:bb:cc:
                    81:a6:db:94:73:e5:fe:92:c0:0b:24:e7:1c:6a:ea:
                    90:2f:cf:29:ae:8d:bf:27:c1:c2:a4:64:e5:55:47:
                    5f:61:e5:e9:81:8a:8e:8e:52:e1:89:d7:32:46:b2:
                    a1:65:7a:b4:b1:5f:29:5c:1e:ad:47:70:5d:1b:c6:
                    86:52:b5:a1:f0:14:c1:a0:9a:9a:a2:0c:d7:bb:42:
                    6a:34:1c:81:de:ed:47:b2:0f:44:3d:d1:a1:e1:fa:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:63:34:CF:85:7B:91:7A:43:C4:5C:5A:D3:93:C4:76:A0:70:1E
            X509v3 Authority Key Identifier:
                keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:40:ea:d1:fc:09:8e:f3:d9:6d:1c:fa:47:85:b9:3c:58:
         70:4a:3f:31:6d:81:53:e2:36:cf:b2:90:6f:22:04:e5:09:70:
         7d:7d:bd:78:8b:6c:d7:2a:7d:26:03:c9:c9:db:38:d5:c6:c0:
         19:91:2a:99:ac:cf:0e:6c:3d:68:82:0f:fe:3c:b5:a3:98:47:
         b9:ff:80:0b:c3:ec:7a:7c:5d:de:a4:ce:9b:35:17:a8:f9:c9:
         22:47:6d:d8:99:06:e5:ee:ae:9f:0f:9e:a9:21:bb:4d:54:ae:
         bd:79:db:80:73:94:43:99:95:e7:31:13:9f:9e:43:a3:e3:58:
         a2:a6:71:81:02:65:c1:94:32:05:08:5c:12:95:13:f8:16:35:
         27:3c:dd:97:e8:99:8e:f8:52:1c:cb:fd:07:cd:cb:8f:d1:d5:
         2e:43:6d:58:b4:ca:18:4b:cd:c2:b2:ce:6b:86:5b:24:da:e8:
         3a:15:4d:59:f4:52:71:99:9e:a2:f4:32:ce:8e:19:e6:3d:d8:
         30:42:b7:45:a6:70:7c:27:80:f4:b6:17:32:1d:20:0c:81:ef:
         1d:af:aa:d8:12:58:b4:ba:e4:17:b6:79:1b:dc:f0:06:30:1f:
         23:b2:ab:18:f8:6a:d3:cb:53:c6:85:2e:98:37:e7:3a:bb:eb:
         37:f6:c5:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX6FGsp3AdsD/QUjBAtHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw
OGY3ODIwHhcNMjYwMzI1MTkwMTM0WhcNMjYwMzI2MTkwMTM0WjAzMTEwLwYDVQQD
Eyg2ZDI0NjMzNGNmODU3YjkxN2E0M2M0NWM1YWQzOTNjNDc2YTA3MDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJRZ2K8U+sfYSi29AyP3HkylRnoX
jrx22KqRHCCUWwZ1zaGhGVNwTlgDRc+6uIOc4QUf7+Xu+I+a+MjNxB2jRSe985cF
qqCeYHpPZUWjpwesdUcCaA7dHIDI68yzU+WAqeaOv0J6LX/YjzuP5StVx+rGoH1G
zWAFIp3g7h5t+WCchGIvMyvp4nmu0e9HOCRPuXX/5uW8E3U8Qwsvd9sm0IySu8yB
ptuUc+X+ksALJOccauqQL88pro2/J8HCpGTlVUdfYeXpgYqOjlLhidcyRrKhZXq0
sV8pXB6tR3BdG8aGUrWh8BTBoJqaogzXu0JqNByB3u1Hsg9EPdGh4fru/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0kYzTPhXuRekPEXFrTk8R2oHAeMB8GA1UdIwQY
MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt
NGU0YTM1ZGQzNjc3LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3
LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0ZA6tH8
CY7z2W0c+keFuTxYcEo/MW2BU+I2z7KQbyIE5QlwfX29eIts1yp9JgPJyds41cbA
GZEqmazPDmw9aIIP/jy1o5hHuf+AC8Psenxd3qTOmzUXqPnJIkdt2JkG5e6unw+e
qSG7TVSuvXnbgHOUQ5mV5zETn55Do+NYoqZxgQJlwZQyBQhcEpUT+BY1Jzzdl+iZ
jvhSHMv9B83Lj9HVLkNtWLTKGEvNwrLOa4ZbJNroOhVNWfRScZmeovQyzo4Z5j3Y
MEK3RaZwfCeA9LYXMh0gDIHvHa+q2BJYtLrkF7Z5G9zwBjAfI7KrGPhq08tTxoUu
mDfnOrvrN/bFxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:46 2026 by rpki-client