Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File:                     rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier:          mIw7mg1CBiQjNBoLVkkZRd1jwizuDMBBsFJUAiBzXZw=
Subject key identifier:   A7:88:11:AE:3C:4D:0E:E8:20:56:D6:B9:D2:0A:8E:32:32:8B:22:AB
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       019D27047245C4A91537B81BEE345D385765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number:          188D
Signing time:             Wed 25 Mar 2026 22:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:35 +0000
Files and hashes:         1: LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa (hash: WjIjLuXn3A1xNvSwh1XgBv48UJzhklp1E8+xHhdyWoU=)
                          2: PSfeFOCMS0X0DbK201fv7mhOqbQ.roa (hash: WJgLDQpReiQHOtzp+BWaEyBhXQtmTrQB0VphBgJmuek=)
                          3: QjQLmAt4m_YleTlWkKVih21BNgk.roa (hash: dq7HIavQuv8fREOJW5tnnd2hgLRsWh/EorRZKaqBVuc=)
                          4: Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa (hash: P11t+kwQnqI3kW3ZxTjDZFiJEM3aRQP5One4Rpc6tsg=)
                          5: du7armHnMdJDuNQqNV4R0NlwAvw.asa (hash: ci8jOh/1Qd1L/TuKvOYgtQOXNQCcGjWJZ4+8rrUkpRU=)
                          6: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: CfRbMe+tjJEggwIlwsmSfX27JaNvhgeaad29YCY4EBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:72:45:c4:a9:15:37:b8:1b:ee:34:5d:38:57:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Mar 25 22:01:35 2026 GMT
            Not After : Mar 26 22:01:35 2026 GMT
        Subject: CN=a78811ae3c4d0ee82056d6b9d20a8e32328b22ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:ff:5e:8c:b7:4f:2a:e7:e9:1c:3f:ee:b6:
                    f6:29:8e:fd:90:93:7a:bb:71:87:8e:fd:e8:2a:c9:
                    4e:25:41:02:37:9c:4a:49:5d:f0:16:ca:b8:65:f0:
                    e8:88:97:29:fb:e7:6b:f5:cc:5c:6c:dc:12:7d:cc:
                    bb:46:88:3a:e0:86:26:7e:66:2f:61:5c:be:52:17:
                    ea:99:7c:a1:34:05:ad:93:f4:79:25:89:56:a6:f2:
                    fa:6d:24:44:9f:a5:11:aa:01:80:95:b4:6c:bf:52:
                    ca:53:9f:51:c9:48:d1:6d:bf:5e:fc:d9:93:18:80:
                    aa:f2:12:ef:e6:af:83:32:04:e4:57:15:fe:e7:a3:
                    7e:e1:89:e7:37:27:05:45:be:3e:7d:71:20:f0:28:
                    b3:f6:a4:a2:37:e2:73:8c:e5:42:6a:ea:bf:4c:af:
                    a7:10:43:cd:49:5d:a4:7b:f6:8e:01:ed:d3:da:af:
                    0d:0d:d3:0f:99:dc:20:1d:02:e3:89:da:75:67:d7:
                    f0:ae:01:cd:55:5b:26:a1:ec:ff:de:e8:57:97:47:
                    7f:d8:da:17:45:9e:a8:0c:78:66:fc:87:1b:ba:6a:
                    83:5f:50:0c:ae:bf:85:14:e4:a4:e2:de:2e:85:6a:
                    d9:d9:ad:41:1b:36:46:84:b1:f6:3a:34:5a:13:a7:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:88:11:AE:3C:4D:0E:E8:20:56:D6:B9:D2:0A:8E:32:32:8B:22:AB
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:1b:d5:e9:2f:e8:a5:3a:de:b7:6a:36:be:c0:b0:43:89:
         03:91:b9:74:3f:77:29:10:e7:9b:44:8c:9d:e1:33:32:e6:7c:
         f4:58:41:ea:da:77:7c:ed:83:d3:5f:dd:e2:3c:eb:6f:a4:bc:
         a1:fc:af:bc:c3:4c:61:83:3f:0c:13:07:95:02:03:c3:fe:58:
         71:fa:c6:ef:a4:3d:f9:91:8c:1a:1f:94:c9:18:cb:91:79:97:
         ef:c0:55:0e:db:fb:2c:01:c7:c8:6e:80:bf:b0:5d:df:f3:05:
         fc:dc:a1:70:97:e9:92:41:35:8f:66:23:ff:bc:04:15:03:bf:
         b2:fc:f3:84:be:a3:1c:38:49:41:d9:53:10:d3:04:3a:ca:0a:
         35:bf:f8:9b:5a:ed:dd:cd:5b:42:c5:4e:a8:eb:3d:63:cf:27:
         a1:24:75:22:8f:b5:60:a0:10:b5:63:b8:47:26:da:29:82:0f:
         e7:99:f6:4f:46:37:d8:27:c9:17:a9:f0:96:f9:76:0e:bc:4c:
         e0:58:22:a0:45:3a:80:7e:bf:54:c9:66:a0:4f:24:74:e9:f8:
         06:d8:e7:26:62:db:bd:08:0d:ed:11:f9:8a:2d:11:9f:4d:2a:
         ab:2e:48:61:bb:9d:3b:25:34:7d:50:6d:e6:bc:48:3d:55:46:
         91:ef:a4:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHJFxKkVN7gb7jRdOFdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh
OGZmOGIwHhcNMjYwMzI1MjIwMTM1WhcNMjYwMzI2MjIwMTM1WjAzMTEwLwYDVQQD
EyhhNzg4MTFhZTNjNGQwZWU4MjA1NmQ2YjlkMjBhOGUzMjMyOGIyMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuST/Xoy3Tyrn6Rw/7rb2KY79kJN6
u3GHjv3oKslOJUECN5xKSV3wFsq4ZfDoiJcp++dr9cxcbNwSfcy7Rog64IYmfmYv
YVy+UhfqmXyhNAWtk/R5JYlWpvL6bSREn6URqgGAlbRsv1LKU59RyUjRbb9e/NmT
GICq8hLv5q+DMgTkVxX+56N+4YnnNycFRb4+fXEg8Ciz9qSiN+JzjOVCauq/TK+n
EEPNSV2ke/aOAe3T2q8NDdMPmdwgHQLjidp1Z9fwrgHNVVsmoez/3uhXl0d/2NoX
RZ6oDHhm/IcbumqDX1AMrr+FFOSk4t4uhWrZ2a1BGzZGhLH2OjRaE6eaiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeIEa48TQ7oIFbWudIKjjIyiyKrMB8GA1UdIwQY
MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt
ZjY2MjZiNjMzODNlLzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl
LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADysb1ekv
6KU63rdqNr7AsEOJA5G5dD93KRDnm0SMneEzMuZ89FhB6tp3fO2D01/d4jzrb6S8
ofyvvMNMYYM/DBMHlQIDw/5YcfrG76Q9+ZGMGh+UyRjLkXmX78BVDtv7LAHHyG6A
v7Bd3/MF/NyhcJfpkkE1j2Yj/7wEFQO/svzzhL6jHDhJQdlTENMEOsoKNb/4m1rt
3c1bQsVOqOs9Y88noSR1Io+1YKAQtWO4RybaKYIP55n2T0Y32CfJF6nwlvl2DrxM
4FgioEU6gH6/VMlmoE8kdOn4BtjnJmLbvQgN7RH5ii0Rn00qqy5IYbudOyU0fVBt
5rxIPVVGke+k6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:46 2026 by rpki-client