Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft
File:                     F5--gq_LTlTH1JcSOlyDcRTFcWI.mft (raw, json)
Hash identifier:          tcdGZVr/jA7WndgkOZjdy9dUCYR/i+Ui1s4A0w5v6b0=
Subject key identifier:   9C:54:1C:3C:0C:7F:64:B7:AF:5B:A4:71:3E:F2:B2:24:43:39:D0:2A
Authority key identifier: 17:9F:BE:82:AF:CB:4E:54:C7:D4:97:12:3A:5C:83:71:14:C5:71:62
Certificate issuer:       /CN=179fbe82afcb4e54c7d497123a5c837114c57162
Certificate serial:       019D32635867C16E820C51956A1A129FDFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft
Manifest number:          188D
Signing time:             Sat 28 Mar 2026 03:01:04 +0000
Manifest this update:     Sat 28 Mar 2026 03:01:04 +0000
Manifest next update:     Sun 29 Mar 2026 03:01:04 +0000
Files and hashes:         1: F5--gq_LTlTH1JcSOlyDcRTFcWI.crl (hash: 2J1E1Xzd1gu1WvmVmDd9UXwt93aL3e+hKPoXI1TV1C8=)
                          2: I_9yK8gotYFiLzYNBCnkTEOepcI.roa (hash: +2UY5KVnW5bybyVf40UgpMFgmmTcGX5BD3cs8saP4ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:63:58:67:c1:6e:82:0c:51:95:6a:1a:12:9f:df:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179fbe82afcb4e54c7d497123a5c837114c57162
        Validity
            Not Before: Mar 28 03:01:04 2026 GMT
            Not After : Mar 29 03:01:04 2026 GMT
        Subject: CN=9c541c3c0c7f64b7af5ba4713ef2b2244339d02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:6b:3c:d4:46:87:68:64:d4:c4:24:e4:d6:
                    77:b7:b8:4d:6d:94:44:2a:67:96:5e:14:8d:00:c2:
                    9d:40:6d:f6:0a:49:91:23:3a:84:f0:57:15:de:c4:
                    ab:f7:ef:87:7e:f7:b1:ce:6b:44:5c:36:c4:c1:f1:
                    d2:88:06:c9:5d:c2:d9:41:16:ea:c3:62:fd:ef:9d:
                    10:b0:d4:95:dd:d6:09:c5:75:3b:57:28:c7:ed:ef:
                    d5:4d:3c:ec:ea:17:9a:aa:bf:f4:13:7a:79:b2:8b:
                    7f:9a:87:8b:19:d0:6b:24:9e:41:20:d1:de:b0:ce:
                    0b:3b:42:6c:3e:00:2b:09:a0:9c:5c:95:ed:0e:2a:
                    7b:ac:bb:1a:1f:da:7a:5b:07:91:c4:89:db:1f:40:
                    bf:88:0a:1a:f5:3e:2c:3e:36:5f:2f:28:34:5a:84:
                    c1:ce:ae:c7:b7:bb:22:04:3c:fe:ac:95:94:28:68:
                    dd:88:e8:64:36:96:39:9d:93:a0:19:6e:42:15:8b:
                    22:9f:51:70:f9:cc:ee:f7:e5:78:b7:10:c9:0b:c4:
                    2c:70:c8:1a:f2:b4:52:49:fa:2c:58:0c:fe:07:fc:
                    ca:c6:79:b1:a5:8d:eb:50:35:41:fe:10:d3:03:9f:
                    46:ac:c7:c5:31:fc:cc:1b:cd:52:f6:4f:02:98:36:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:1C:3C:0C:7F:64:B7:AF:5B:A4:71:3E:F2:B2:24:43:39:D0:2A
            X509v3 Authority Key Identifier:
                keyid:17:9F:BE:82:AF:CB:4E:54:C7:D4:97:12:3A:5C:83:71:14:C5:71:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:34:50:5c:3e:60:40:2a:f2:fd:8a:ee:30:87:d2:35:ca:
         9c:df:b3:d1:50:86:45:d3:2d:79:cf:88:35:b7:c1:30:30:8e:
         81:38:d1:b3:46:9a:40:06:17:02:5b:9b:b8:80:42:14:af:ae:
         f8:e0:06:83:09:4f:e8:ec:ec:12:dc:d9:e8:17:35:8f:de:de:
         f2:cb:e9:39:2c:20:cd:49:a8:de:c3:76:34:d3:fc:b2:24:96:
         23:ca:6a:d2:0b:b6:3b:c6:04:c4:17:70:8a:b9:38:44:52:11:
         18:1d:76:ef:91:06:7f:86:00:e6:27:2a:c0:9e:3e:ca:49:b6:
         89:69:dd:6f:81:c5:34:b6:d3:a0:e8:64:0c:3f:2d:7e:51:29:
         90:0b:17:59:6c:d4:46:4f:a9:28:ec:d2:1f:11:c1:3d:1f:fd:
         1a:72:54:6b:d3:72:b7:fa:0f:9d:55:52:e0:ca:5f:f5:d1:77:
         1f:e6:6c:09:50:14:08:c7:d7:e1:a5:7a:08:d4:e3:45:37:0f:
         77:dd:03:f0:65:f3:57:22:c4:7c:79:fe:94:6c:2b:ca:64:c0:
         fd:4b:b2:3f:15:23:2c:35:57:2c:78:a8:c8:39:1b:10:8d:1f:
         43:35:97:fd:ad:4f:be:61:11:0e:dd:88:43:40:06:2d:aa:0e:
         45:23:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:27 2026 by rpki-client