Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          Si33qq2WyOL798GNrrTF5A7XMs5Z1MXkGP6LChnD07Q=
Subject key identifier:   E6:1A:60:A1:35:78:EA:87:42:A4:ED:85:54:B0:98:9F:F0:57:ED:C0
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       019D2695E3EF68504B05481C6857CAA77239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 20:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:50 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
                          3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
                          4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: EL7rIjtv00YO4dvU9gwRHYi+3xo2290/s0ZNl0N1MUw=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:e3:ef:68:50:4b:05:48:1c:68:57:ca:a7:72:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Mar 25 20:00:50 2026 GMT
            Not After : Mar 26 20:00:50 2026 GMT
        Subject: CN=e61a60a13578ea8742a4ed8554b0989ff057edc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:d1:24:57:f0:37:93:e5:9c:d2:cf:88:4d:
                    ea:9f:36:b2:ad:1b:fa:55:ad:83:93:75:bc:62:01:
                    da:ae:d2:8c:ff:4e:4d:83:11:45:f1:33:87:7c:f5:
                    9d:ea:93:01:dd:04:74:70:be:94:93:56:6f:f1:d1:
                    fd:15:d6:32:d5:31:61:48:17:5b:70:95:95:35:c8:
                    6f:33:03:96:7a:eb:6d:a1:71:8e:d9:ff:60:cb:e3:
                    12:9a:86:7b:98:f1:01:36:2f:a5:e8:15:8a:bb:d8:
                    58:f5:d5:e5:9a:96:0b:77:67:0a:5b:b3:9d:5c:07:
                    76:dd:6d:c1:eb:de:8f:f6:a5:da:34:9f:37:0f:9c:
                    e4:97:b7:ce:c2:a1:ee:c9:11:fc:74:63:b8:0b:3b:
                    74:31:5c:24:14:bc:f9:df:e2:ba:85:24:f3:8e:fd:
                    43:0c:20:f6:40:cc:d6:51:51:dc:68:70:75:88:7f:
                    a8:82:a2:93:d9:f5:38:a6:15:84:6d:df:6d:b4:84:
                    cc:3b:dc:cd:9c:c2:6e:a0:ed:6c:cd:fa:b6:5e:57:
                    cd:73:49:92:8f:e9:4d:8a:c2:3d:b8:94:eb:e0:23:
                    0f:e7:59:9c:85:03:99:ee:d5:74:ad:1a:a0:8c:24:
                    19:0f:70:e9:1d:e7:c2:8b:6e:32:87:4a:9c:e2:af:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1A:60:A1:35:78:EA:87:42:A4:ED:85:54:B0:98:9F:F0:57:ED:C0
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:dc:83:be:52:24:5d:84:ce:27:d1:ce:8a:8b:d4:c6:f5:70:
         0f:6a:90:c2:f9:a3:66:9a:38:d4:a3:7d:0e:4a:c3:c3:21:ac:
         02:e2:80:53:1e:a3:37:4f:79:01:20:da:cf:59:f8:2e:f2:79:
         c0:d7:51:90:31:4b:f9:ec:92:3e:98:3a:88:4f:26:74:f8:6e:
         21:23:ed:9b:e3:d4:72:83:b7:f6:01:c9:37:72:df:15:ed:9d:
         1a:6b:83:c2:13:55:64:fa:59:01:8f:11:92:1e:d2:3f:a7:9e:
         92:cf:72:a2:89:5b:5b:f8:78:84:7d:85:7f:03:7e:4f:94:2f:
         23:c0:da:46:50:e4:a2:5c:5f:94:f8:88:3d:91:d8:65:d9:2b:
         d3:54:68:39:eb:4c:7b:25:45:d5:e4:f7:32:89:00:d1:d7:7f:
         5c:5b:66:da:f8:44:be:ba:90:ae:5b:fa:f3:fd:08:3a:af:73:
         3a:43:53:b1:3e:33:24:a8:87:36:73:21:5e:10:e2:70:e9:33:
         54:75:e2:d9:a6:c9:fe:5a:1c:f7:b6:98:da:30:a3:56:57:74:
         46:1d:1b:fb:9d:70:d3:1a:3a:15:9b:d9:cc:5f:16:59:78:82:
         99:4e:0a:93:5b:be:b7:89:e5:be:24:ca:24:b8:96:ba:44:8d:
         99:03:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:56 2026 by rpki-client