Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File:                     LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier:          Y3htXANd7Hv2MQPoFz93zvzBMPnl9n3c/fS2g39zkBE=
Subject key identifier:   44:04:31:D5:81:66:7F:CB:9B:19:CB:1B:28:FE:92:F3:C9:5E:46:57
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer:       /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial:       019D2A044C28EB71F0C04A12D63B9D75C29D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 12:00:17 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:17 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:17 +0000
Files and hashes:         1: F8ssCXzm5DlQ97WN2xVb9wJjA_g.roa (hash: RedzK3Q4KVLEhYDQGEu2AFOE8F+deCMqCtqno/fcLrc=)
                          2: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: qcE+kTFNzJtf+zvrJjlD3PQqQiY45ji+ds6KvWALmQs=)
                          3: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (hash: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:4c:28:eb:71:f0:c0:4a:12:d6:3b:9d:75:c2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5894923bb002a434128810607dfb526722004f
        Validity
            Not Before: Mar 26 12:00:17 2026 GMT
            Not After : Mar 27 12:00:17 2026 GMT
        Subject: CN=440431d581667fcb9b19cb1b28fe92f3c95e4657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:19:ee:1f:65:28:63:c2:d2:b2:8b:bd:24:
                    fd:d7:3a:7c:eb:c3:09:ff:8d:19:7d:23:c5:8e:e3:
                    3f:3c:4b:ee:de:9d:0a:7f:48:b9:db:55:ec:b2:15:
                    86:8c:49:0c:ed:6b:63:e4:f4:b1:be:54:f3:50:c6:
                    3f:e3:15:20:7c:97:ba:a0:77:40:14:c4:57:25:dd:
                    e0:d8:62:38:3a:9b:cb:45:6b:bb:42:0c:7c:3d:a2:
                    50:07:c5:8b:9e:11:b2:91:2d:6b:6e:09:77:e8:c5:
                    39:8b:43:e9:bc:99:ab:05:10:a7:a4:8d:7d:eb:e5:
                    43:0f:51:2e:5b:d2:fc:25:18:f0:f8:2a:b2:98:69:
                    16:b2:20:8a:bf:fb:66:12:52:73:9f:50:04:04:2c:
                    12:d9:50:56:a1:50:4b:73:03:de:c2:5f:e3:02:78:
                    de:30:a0:12:1a:04:7c:5e:08:6c:9e:33:85:2c:d2:
                    1d:a6:19:53:7d:c5:f5:e1:f6:5c:46:90:4b:4f:fe:
                    9a:c8:fa:47:7c:2c:85:82:c0:cc:34:e8:91:b8:70:
                    2b:e7:4f:43:4f:22:80:1b:cf:a9:02:a8:fb:81:8c:
                    21:df:14:69:f4:5b:af:4a:17:b3:94:61:f7:35:ee:
                    3f:0c:08:e2:8c:8e:e1:a5:85:87:4e:c1:07:15:87:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:31:D5:81:66:7F:CB:9B:19:CB:1B:28:FE:92:F3:C9:5E:46:57
            X509v3 Authority Key Identifier:
                keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:97:8e:dd:a2:06:0b:60:c9:e1:a2:1b:aa:bd:f9:e7:15:71:
         04:21:f6:39:35:f7:56:6f:ed:64:a9:5e:49:03:be:12:61:cb:
         69:8f:0e:25:6d:9c:c2:8a:1c:32:f9:53:cc:41:e4:60:f0:ce:
         11:48:68:36:ef:05:81:37:72:3a:8b:d6:c7:3b:4f:59:44:2a:
         4e:08:94:36:a0:c6:be:34:f8:bb:76:f6:bc:d0:3b:bf:96:2b:
         13:3e:f8:32:f9:9e:c9:57:dd:19:59:53:92:c2:bd:51:17:52:
         94:97:db:86:06:83:fd:67:9a:31:68:c4:f2:cf:f3:f0:d3:c0:
         ed:1e:81:a3:13:1c:4b:db:27:d3:d9:7e:65:32:3f:f1:77:a9:
         b0:ce:f5:79:a2:79:8c:f2:d1:8b:35:26:ac:56:ad:c4:fd:63:
         2f:7f:ca:16:92:f5:c1:60:51:b3:59:99:47:d8:68:cf:85:7b:
         9b:09:63:48:88:00:2b:08:df:2e:ff:ed:27:93:c3:5c:cc:9a:
         cd:90:f8:35:d9:d5:6e:e1:53:61:ea:40:4b:44:f2:2f:9c:a1:
         29:80:26:09:f0:72:f4:67:8e:89:1d:8a:9c:36:89:e6:93:5b:
         cd:9c:04:7b:17:6f:4b:12:37:26:b5:a2:76:a5:0e:be:c4:44:
         f6:b4:36:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBEwo63HwwEoS1juddcKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTg5NDkyM2JiMDAyYTQzNDEyODgxMDYwN2RmYjUyNjcy
MjAwNGYwHhcNMjYwMzI2MTIwMDE3WhcNMjYwMzI3MTIwMDE3WjAzMTEwLwYDVQQD
Eyg0NDA0MzFkNTgxNjY3ZmNiOWIxOWNiMWIyOGZlOTJmM2M5NWU0NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/cZ7h9lKGPC0rKLvST91zp868MJ
/40ZfSPFjuM/PEvu3p0Kf0i521XsshWGjEkM7Wtj5PSxvlTzUMY/4xUgfJe6oHdA
FMRXJd3g2GI4OpvLRWu7Qgx8PaJQB8WLnhGykS1rbgl36MU5i0PpvJmrBRCnpI19
6+VDD1EuW9L8JRjw+CqymGkWsiCKv/tmElJzn1AEBCwS2VBWoVBLcwPewl/jAnje
MKASGgR8XghsnjOFLNIdphlTfcX14fZcRpBLT/6ayPpHfCyFgsDMNOiRuHAr509D
TyKAG8+pAqj7gYwh3xRp9FuvShezlGH3Ne4/DAjijI7hpYWHTsEHFYc6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQEMdWBZn/LmxnLGyj+kvPJXkZXMB8GA1UdIwQY
MBaAFC1YlJI7sAKkNBKIEGB9+1JnIgBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODIt
YWVlNTkyN2I0ZGQyLzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODItYWVlNTkyN2I0ZGQy
LzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJeO3aIG
C2DJ4aIbqr355xVxBCH2OTX3Vm/tZKleSQO+EmHLaY8OJW2cwoocMvlTzEHkYPDO
EUhoNu8FgTdyOovWxztPWUQqTgiUNqDGvjT4u3b2vNA7v5YrEz74MvmeyVfdGVlT
ksK9URdSlJfbhgaD/WeaMWjE8s/z8NPA7R6BoxMcS9sn09l+ZTI/8XepsM71eaJ5
jPLRizUmrFatxP1jL3/KFpL1wWBRs1mZR9hoz4V7mwljSIgAKwjfLv/tJ5PDXMya
zZD4NdnVbuFTYepAS0TyL5yhKYAmCfBy9GeOiR2KnDaJ5pNbzZwEexdvSxI3JrWi
dqUOvsRE9rQ2uA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:20 2026 by rpki-client