Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          N8IuJv8AeWxfBloyNR0fYCZW1UDGoK/+ouUAy1R7KSQ=
Subject key identifier:   A4:CE:EE:83:D1:4B:A2:04:E9:EB:5D:F4:84:F2:29:FC:B0:A3:87:73
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       019D265F1835DB57F162C79E353D03D63837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          188F
Signing time:             Wed 25 Mar 2026 19:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:59 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: ZS7asdYbFgNQ4ep9vPT/VqMgkJsR10ZcZISM5fYLtJk=)
                          2: A34_GTeXqKfeFieH-K6SMhQYDeM.roa (hash: kMGUuf+bmu2QhGj0B3VWZCeUdZ8iNJFffakS/R7WXBo=)
                          3: aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa (hash: sOa0dIn7uqNOrAivXJIEeikXKxFSaK1g51TxfgbbJB8=)
                          4: gJS4W1OlZX4qhqCfciLkY8-A4Yo.roa (hash: t2Rys77KJN1dnN93Baik0czPJYwk4ZAeQlLRAbQNSRg=)
                          5: j_fEcmRawhfQ335R07nuk6I9mKM.roa (hash: sLXREARPQv68UDdJgDz8RPpaZ0LxhTnDeQMZPazHH7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:18:35:db:57:f1:62:c7:9e:35:3d:03:d6:38:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Mar 25 19:00:59 2026 GMT
            Not After : Mar 26 19:00:59 2026 GMT
        Subject: CN=a4ceee83d14ba204e9eb5df484f229fcb0a38773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:47:12:b1:08:14:fb:24:fe:a7:27:34:76:
                    a0:3b:96:d4:60:5c:08:87:77:09:6e:e2:6d:4c:f1:
                    1f:16:56:18:3c:69:04:42:69:68:a5:3f:f6:45:b5:
                    70:c3:43:22:1c:f2:bc:ff:69:5c:b7:18:86:a5:5a:
                    6d:dc:11:d4:60:c6:40:4a:97:71:fa:e7:58:b6:96:
                    a0:1a:a0:af:11:52:0e:a1:2a:48:8e:96:b4:0f:35:
                    2e:74:67:f0:59:e3:f3:62:85:1a:bd:76:25:66:64:
                    de:20:48:d3:b1:b0:d8:44:83:44:17:9d:8b:70:c6:
                    4c:01:b9:a6:7b:78:38:c8:ea:18:5c:00:ce:3b:b9:
                    17:1e:6d:f3:80:81:76:7d:f5:73:7e:ef:21:1a:43:
                    95:24:57:02:2b:5c:a0:c4:53:d3:71:d1:1a:ac:9d:
                    0d:e8:13:66:f8:ff:12:be:30:fa:af:c1:f0:da:2b:
                    0a:c5:48:9e:4c:a3:f3:08:31:6e:8f:ee:b4:f2:11:
                    03:f4:42:c9:c3:77:b7:3f:26:ef:8c:d0:20:bd:85:
                    49:6c:27:90:62:e0:3f:b4:a1:57:4f:00:69:a1:37:
                    74:84:ee:74:77:d9:80:fa:f4:f7:1e:26:f4:b2:56:
                    c2:0f:b6:63:28:53:5c:aa:b8:cc:ad:60:06:6d:2c:
                    31:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CE:EE:83:D1:4B:A2:04:E9:EB:5D:F4:84:F2:29:FC:B0:A3:87:73
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9f:f0:36:13:09:32:12:c3:bc:ea:9f:4f:7e:c9:8c:1f:4d:
         10:5c:4b:2e:71:11:cd:e4:21:8c:b7:11:1f:6d:f9:90:6d:a6:
         97:55:6b:06:1b:ef:89:e5:8e:73:71:f3:1d:1e:a7:b4:d7:05:
         70:33:9a:a6:68:95:15:52:2d:d7:b3:47:02:a9:13:17:a9:3b:
         69:e1:1e:53:f2:ad:5c:45:7b:bd:62:b4:56:5d:b9:82:fb:f6:
         fe:61:0d:18:35:67:f5:4d:f2:1b:c6:fa:96:f7:57:79:5d:6e:
         1d:f4:3a:80:2b:88:52:ce:3e:d4:60:e3:d0:59:d7:40:e1:64:
         bb:8a:29:8d:53:bf:3c:3d:cb:00:59:34:78:77:c3:e0:82:6a:
         e7:8c:c1:a7:66:6a:5b:52:ba:bd:48:0e:e8:20:a6:ef:49:54:
         9a:02:0f:89:03:eb:e9:32:d7:6a:4e:91:96:1d:20:d7:87:20:
         a8:9f:e8:cf:d6:dc:f1:26:07:81:83:91:3b:8c:09:27:f8:b5:
         08:f0:0e:10:81:bc:58:a8:5b:95:41:8b:9c:8d:0c:22:ba:a4:
         22:fa:e3:bb:ab:25:e5:55:69:33:1a:57:4b:c2:c7:64:d0:10:
         bd:43:e8:4f:a2:08:97:1e:8f:5c:70:78:ad:0d:c5:27:8d:61:
         ce:b2:cc:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxg121fxYseeNT0D1jg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWMwN2M5NTE0ODhmMDRjYjNiMGZkMzM4YWY4NGQ3N2U0
NmJmNTIwHhcNMjYwMzI1MTkwMDU5WhcNMjYwMzI2MTkwMDU5WjAzMTEwLwYDVQQD
EyhhNGNlZWU4M2QxNGJhMjA0ZTllYjVkZjQ4NGYyMjlmY2IwYTM4NzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B9HErEIFPsk/qcnNHagO5bUYFwI
h3cJbuJtTPEfFlYYPGkEQmlopT/2RbVww0MiHPK8/2lctxiGpVpt3BHUYMZASpdx
+udYtpagGqCvEVIOoSpIjpa0DzUudGfwWePzYoUavXYlZmTeIEjTsbDYRINEF52L
cMZMAbmme3g4yOoYXADOO7kXHm3zgIF2ffVzfu8hGkOVJFcCK1ygxFPTcdEarJ0N
6BNm+P8SvjD6r8Hw2isKxUieTKPzCDFuj+608hED9ELJw3e3PybvjNAgvYVJbCeQ
YuA/tKFXTwBpoTd0hO50d9mA+vT3Hib0slbCD7ZjKFNcqrjMrWAGbSwxGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTO7oPRS6IE6etd9ITyKfywo4dzMB8GA1UdIwQY
MBaAFOYcB8lRSI8EyzsP0zivhNd+Rr9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWIt
NmE4NDc3Y2I2YzJhLzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWItNmE4NDc3Y2I2YzJh
LzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArp/wNhMJ
MhLDvOqfT37JjB9NEFxLLnERzeQhjLcRH235kG2ml1VrBhvvieWOc3HzHR6ntNcF
cDOapmiVFVIt17NHAqkTF6k7aeEeU/KtXEV7vWK0Vl25gvv2/mENGDVn9U3yG8b6
lvdXeV1uHfQ6gCuIUs4+1GDj0FnXQOFku4opjVO/PD3LAFk0eHfD4IJq54zBp2Zq
W1K6vUgO6CCm70lUmgIPiQPr6TLXak6Rlh0g14cgqJ/oz9bc8SYHgYORO4wJJ/i1
CPAOEIG8WKhblUGLnI0MIrqkIvrju6sl5VVpMxpXS8LHZNAQvUPoT6IIlx6PXHB4
rQ3FJ41hzrLMPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:22 2026 by rpki-client