Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          Dm2QWpw2WaybvwjI86rpZixqJNw63gmej9ytzYq+w3E=
Subject key identifier:   B7:FD:20:BD:5D:F1:E6:0C:6B:C6:6D:53:88:0C:34:02:16:2B:BA:BD
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019D2772999C4DC2578F2B72E7614613389B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 00:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:54 +0000
Files and hashes:         1: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (hash: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: cv/2p72bwAsXM4cOYG7IjWFqQuqalsYLnfQs2dFeOws=)
                          3: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (hash: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ=)
                          4: _DgxgPBMn4GEtr1HFV4lxED-jk0.roa (hash: 7MO54lxduq+XFWhLRW9Dq64qSqZFXeJN+DNM88s/Oz4=)
                          5: bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa (hash: fXQllw8VZVYHGOPsqntwHwX5QpNIrlOnadEQ+JteA+I=)
                          6: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (hash: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:99:9c:4d:c2:57:8f:2b:72:e7:61:46:13:38:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Mar 26 00:01:54 2026 GMT
            Not After : Mar 27 00:01:54 2026 GMT
        Subject: CN=b7fd20bd5df1e60c6bc66d53880c3402162bbabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:f8:d9:61:f7:f6:f0:45:d1:86:9f:92:4c:
                    33:ac:d1:e8:d5:0e:45:4a:6d:26:08:e9:ac:df:d7:
                    d8:e1:65:fb:d8:72:52:8c:a3:ff:a1:29:20:bf:26:
                    d4:45:43:9f:97:87:e6:22:b5:51:cb:b8:6a:f7:98:
                    21:c5:24:6b:0c:8a:cc:69:8a:55:3c:a0:e8:22:e2:
                    5f:38:6b:7d:9f:4b:ba:6d:10:05:2d:52:23:ef:bb:
                    14:18:bd:ce:89:06:5f:34:1a:88:1f:59:7d:28:51:
                    98:b1:19:89:02:fe:98:0a:dc:61:09:26:b8:06:35:
                    86:85:60:79:f8:2c:7a:2a:d2:50:ed:6f:44:22:d3:
                    1e:ca:74:c1:ca:33:64:23:dc:fb:ce:89:18:ca:56:
                    42:50:3e:12:dc:d8:6c:a5:6b:27:cc:51:1b:9a:13:
                    de:35:b7:db:f6:71:db:17:d1:cd:eb:3c:b8:a4:a6:
                    b9:d4:55:2b:4f:a5:e2:b2:77:aa:c6:3a:86:e4:f3:
                    1a:de:dd:e8:98:05:42:62:98:74:bc:ac:a5:ec:90:
                    f0:52:08:8d:94:94:d8:2c:9e:1b:52:ec:5a:c5:03:
                    db:16:47:31:8f:7a:53:64:b0:7b:93:80:71:37:84:
                    34:2b:64:b8:20:02:46:1c:2f:d7:e5:5e:77:b7:92:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FD:20:BD:5D:F1:E6:0C:6B:C6:6D:53:88:0C:34:02:16:2B:BA:BD
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:1a:1f:ed:50:0b:be:bd:85:07:28:8c:ba:c9:3f:fa:eb:
         49:1a:bd:09:b6:56:c4:19:6e:05:bb:57:32:02:bf:29:0e:5f:
         c8:7f:9d:ad:37:fe:0b:d5:af:5c:06:5b:2e:f3:19:32:7e:83:
         7a:bb:48:05:2e:fb:a9:57:aa:98:b0:87:12:e8:f7:c6:c7:37:
         1c:3b:94:a5:76:b7:c2:b6:91:b8:7d:4e:db:f1:7c:e5:b2:37:
         bd:d0:49:ab:2e:bd:ae:5c:00:8b:48:72:64:ee:78:84:e7:2b:
         d0:29:c9:61:27:4c:78:db:3c:d1:64:47:50:6b:c1:28:61:b4:
         94:e7:7b:dd:96:94:d6:83:48:8a:0c:42:80:06:58:6c:44:82:
         2c:a2:ce:93:4b:e1:12:83:e2:a8:c6:d4:43:bb:dd:7f:6e:08:
         57:f3:f4:1a:42:85:21:b6:87:29:1e:ac:5e:fd:57:00:c0:6b:
         3f:4b:05:f6:7f:de:2f:2d:9e:54:24:61:92:c1:69:c7:41:37:
         24:ef:15:b5:ab:2a:25:89:33:01:4f:38:e7:dd:a8:98:c9:29:
         e0:7c:ce:f1:37:28:a5:ea:a1:a0:30:56:54:c5:fd:a9:56:82:
         bd:c5:bc:ff:65:c8:9b:c0:ab:41:ef:15:26:6e:f6:16:b5:e6:
         72:dd:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:50 2026 by rpki-client